Login Request a demo
Unscored severity · published Mar 27, 2008
CVE-2008-1156
Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create "extra multicast…
–
CVSS
2.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create "extra multicast states on the core routers" via a crafted Multicast Distribution Tree (MDT) Data Join message.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Cisco Ios · Cisco
12.3; 12.4 · source: NVD
IO
Ios · Cisco
12.0; 12.2 · source: NVD
Affected product
CI
Cisco Ios
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1156
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1156
secunia.com
http://secunia.com/advisories/29507
Patch
http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml
www.securityfocus.com
http://www.securityfocus.com/bid/28464
www.securitytracker.com
http://www.securitytracker.com/id?1019715
US Government Resource
http://www.us-cert.gov/cas/techalerts/TA08-087B.html
www.vupen.com
http://www.vupen.com/english/advisories/2008/1006/references
More from Cisco Ios
7.7
CVE-2022-20920
Cisco IOS and IOS XE Software SSH Denial of Service Vulnerability
7.5
CVE-2022-20919
Cisco IOS and IOS XE Software Common Industrial Protocol Request Denial of Service Vulnerability
–
CVE-2015-4204
Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000 devices allows remote authenticated users to cause a denial of service (memory consumption…
–
CVE-2009-0634
Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4…
–
CVE-2009-0633
Multiple unspecified vulnerabilities in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a…