CVE-2008-3805
Status: ModifiedHigh (8.5)—
Severity8.5High · CVSS 2.0
Exploitation probability3.30 %higher than 88% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found
Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3806.
CVSS
- Base score
- 8.5
- Version
- 2.0
- Vector
- AV:N/AC:L/Au:N/C:N/I:P/A:C
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 3.30 %
- Percentile among all scored CVEs
- 88
- Score date
- 10/22/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- NVD-CWE-noinfo
References
Show 12 references
- http://secunia.com/advisories/31990
- http://tools.cisco.com/security/center/viewAlert.x?alertId=16646
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml
- http://www.securitytracker.com/id?1020935
- http://www.vupen.com/english/advisories/2008/2670
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5910
- http://secunia.com/advisories/31990
- http://tools.cisco.com/security/center/viewAlert.x?alertId=16646
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml
- http://www.securitytracker.com/id?1020935
- http://www.vupen.com/english/advisories/2008/2670
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5910
Raw JSON (NVD)
Show
{
"id": "CVE-2008-3805",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 8.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:C",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 7.8,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2008-09-26T16:21:44.190",
"references": [
{
"url": "http://secunia.com/advisories/31990",
"tags": [
"Third Party Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=16646",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id?1020935",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.vupen.com/english/advisories/2008/2670",
"tags": [
"Permissions Required"
],
"source": "psirt@cisco.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5910",
"tags": [
"Broken Link"
],
"source": "psirt@cisco.com"
},
{
"url": "http://secunia.com/advisories/31990",
"tags": [
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=16646",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a014ae.shtml",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1020935",
"tags": [
"Broken Link",
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/2670",
"tags": [
"Permissions Required"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5910",
"tags": [
"Broken Link"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3806."
},
{
"lang": "es",
"value": "Cisco IOS v12.0 a la v12.4 sobre Cisco 10000, uBR10012 y uBR7200 maneja los paquetes externos UDP que son enviados a las direcciones 127.0.0.0/8 intencionadamente para la comunicación IPC en el propio dispositivo, esto permite a atacantes remotos provocar una denegación de servicio (reinicio de dispositivo o de \"linecard\") a través de paquetes UDP manipulados. Vulnerabilidad distinta de CVE-2008-3806."
}
],
"lastModified": "2026-06-16T22:56:34.500",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios:12.2b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E314B0F7-1A27-483E-B3B3-947A5561281F"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.2ca:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22D57BED-1D99-4077-941C-E60BEA65324E"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.2l:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FEFEFF0-65E0-4F68-8C9E-03DAC585CA5E"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.2rc:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A4577947-7960-4627-9A74-9C3BB6477DDD"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.2s:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D035A35-D53E-4C49-B4E4-F40B85866F27"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84900BB3-B49F-448A-9E04-FE423FBCCC4F"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.2zx:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9663D24-0D1D-4F46-961F-9D37D3776E90"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3bc:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40183EF8-BD19-49AD-9E55-7FCCA635327F"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3t:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0C3B413-76F7-413B-A51F-29834F9DE722"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.3xi:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA212293-7BAF-4AD9-BD30-E953CBA7CB95"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9D4D8C72-E7BB-40BF-9AE5-622794D63E09"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}