CVE-2008-3810
Status: ModifiedHigh (7.8)—
Severity7.8High · CVSS 2.0
Exploitation probability1.92 %higher than 80% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitNot knownno public code found
Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811.
CVSS
- Base score
- 7.8
- Version
- 2.0
- Vector
- AV:N/AC:L/Au:N/C:N/I:N/A:C
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 1.92 %
- Percentile among all scored CVEs
- 80
- Score date
- 10/22/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-20
References
Show 12 references
- http://secunia.com/advisories/31990
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml
- http://www.securityfocus.com/bid/31359
- http://www.securitytracker.com/id?1020937
- http://www.vupen.com/english/advisories/2008/2670
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6112
- http://secunia.com/advisories/31990
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml
- http://www.securityfocus.com/bid/31359
- http://www.securitytracker.com/id?1020937
- http://www.vupen.com/english/advisories/2008/2670
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6112
Raw JSON (NVD)
Show
{
"id": "CVE-2008-3810",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2008-09-26T16:21:44.300",
"references": [
{
"url": "http://secunia.com/advisories/31990",
"source": "psirt@cisco.com"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml",
"source": "psirt@cisco.com"
},
{
"url": "http://www.securityfocus.com/bid/31359",
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id?1020937",
"source": "psirt@cisco.com"
},
{
"url": "http://www.vupen.com/english/advisories/2008/2670",
"source": "psirt@cisco.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6112",
"source": "psirt@cisco.com"
},
{
"url": "http://secunia.com/advisories/31990",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080a0148e.shtml",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/31359",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1020937",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2008/2670",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6112",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811."
},
{
"lang": "es",
"value": "En Cisco IOS v12.2 y 12.4, cuando el soporte de Fragmentación del protocolo de control de llamada NAT Skinny (SCCP) está habilitado, permite a atacantes de control remoto causar denegación de servicio (reinicio de dispositivo) a través de mensajes SCCP segmentados, aka CSCsg22426, una vulnerabilidad distinta de CVE-2008-3811."
}
],
"lastModified": "2026-06-16T22:56:35.087",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A2222EED-6CB2-4D18-8AF5-FAE55BC6213F"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7414D32-88A1-416E-A717-3F47B6D1BE74"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "370DC543-AC01-4B91-88C7-60C323E35929"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BEAD7398-D1B2-47FB-952D-8C3162D5A363"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xc:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "544BD924-2CBD-4130-BBD3-5AD084C85FE5"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xe:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1F36C3D-E9A2-41A1-BE71-4D8B00D228E0"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D1CD80F-E898-41CE-8A86-28C2F48B928A"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xg:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9C3C3B97-7F1E-4B87-AD44-E4230BCDAB7D"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF610051-1638-4C1B-9864-11E34EFC4DE6"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78260223-50C0-48F8-9A65-AE67489E602C"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xl:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18E39462-4CEE-4C29-8B60-50E05FCF3E91"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xm:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FF16123-CCA0-4ECD-9B8C-AC1534C3F244"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xn:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC7454AF-7610-4CD3-BD2B-95A6C3283811"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xp:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB633E6C-025C-4B31-ABE7-8318C813376B"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xt:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFED1FFB-899D-4A48-9CCA-0B8737AE1408"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "883FA166-2973-42BA-842D-28FBDBFEAC4A"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4362045B-7065-4FF9-A977-B3DA7894F831"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}