Vulnerability Details CVE-2008-1152
The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device restart or memory consumption) via crafted (1) UDP port 2067 or (2) IP protocol 91 packets.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.5%
CVSS Severity
CVSS v2 Score 7.8
References
- http://secunia.com/advisories/29507
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080969866.shtml
- http://www.securityfocus.com/bid/28465
- http://www.securitytracker.com/id?1019712
- http://www.us-cert.gov/cas/techalerts/TA08-087B.html
- http://www.vupen.com/english/advisories/2008/1006/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41482
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5821
- http://secunia.com/advisories/29507
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080969866.shtml
- http://www.securityfocus.com/bid/28465
- http://www.securitytracker.com/id?1019712
- http://www.us-cert.gov/cas/techalerts/TA08-087B.html
- http://www.vupen.com/english/advisories/2008/1006/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41482
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5821
Products affected by CVE-2008-1152
-
cpe:2.3:o:cisco:cisco_ios:12.0
-
cpe:2.3:o:cisco:cisco_ios:12.1
-
cpe:2.3:o:cisco:cisco_ios:12.2
-
cpe:2.3:o:cisco:cisco_ios:12.3
-
cpe:2.3:o:cisco:cisco_ios:12.4
-
cpe:2.3:o:cisco:ios:12.0
-
cpe:2.3:o:cisco:ios:12.2yd
-
cpe:2.3:o:cisco:ios:12.2yf
-
cpe:2.3:o:cisco:ios:12.2yg
-
cpe:2.3:o:cisco:ios:12.2yh