CVE-2008-3813: High severity cisco ios vulnerability

Published Sep 26, 2008

Updated

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when the L2TP mgmt daemon process is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted L2TP packet.

Affected Software

9 affected components

Cisco IOS=12.4t

Cisco IOS=12.4xj

Cisco IOS=12.4mr

Cisco IOS=12.2srb

Cisco IOS=12.2sg

Cisco IOS=12.4xv

Cisco IOS=12.4xw

Cisco IOS=12.2se

Cisco IOS=12.4sw

Event History

Sep 26, 2008

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3813?

CVE-2008-3813 is classified as a high severity vulnerability due to its potential to cause denial of service attacks.

How do I fix CVE-2008-3813?

To mitigate CVE-2008-3813, it is recommended to disable the L2TP management daemon process on affected Cisco IOS versions.

Which versions of Cisco IOS are affected by CVE-2008-3813?

CVE-2008-3813 affects Cisco IOS 12.2 and 12.4, specifically versions 12.2srb, 12.2sg, 12.2se, and several versions of 12.4.

What consequences might result from CVE-2008-3813?

Exploiting CVE-2008-3813 could allow remote attackers to reload the device, leading to a denial of service.

Is there a patch available for CVE-2008-3813?

Currently, Cisco recommends disabling the affected service as there may not be a dedicated patch for CVE-2008-3813.