CVE-2008-3810: Input Validation

Published Sep 26, 2008

Updated

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811.

Affected Software

17 affected components

Cisco IOS=12.4t

Cisco IOS=12.4xj

Cisco IOS=12.4xl

Cisco IOS=12.4xm

Cisco IOS=12.4mr

Cisco IOS=12.4xt

Cisco IOS=12.4xf

Cisco IOS=12.4xg

Cisco IOS=12.4xv

Cisco IOS=12.4xw

Cisco IOS=12.4xp

Cisco IOS=12.4xk

Cisco IOS=12.4sw

Cisco IOS=12.4xn

Cisco IOS=12.4xe

Cisco IOS=12.4md

Cisco IOS=12.4xc

Event History

Sep 26, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3810?

CVE-2008-3810 is classified as a high severity vulnerability due to its potential to cause denial of service by reloading affected devices.

How do I fix CVE-2008-3810?

To fix CVE-2008-3810, disable NAT Skinny Call Control Protocol (SCCP) Fragmentation Support on affected Cisco IOS versions.

Which versions of Cisco IOS are affected by CVE-2008-3810?

CVE-2008-3810 affects Cisco IOS versions 12.2 and 12.4, including various specific releases like 12.4t, 12.4xj, and others.

What impact does CVE-2008-3810 have on systems?

The impact of CVE-2008-3810 is primarily a denial of service, causing devices to become unresponsive and restart.

Is CVE-2008-3810 being actively exploited?

As of the last assessment, there are no reports confirming active exploitation of CVE-2008-3810 in the wild.