Unscored severity · published Nov 6, 2008
CVE-2008-4963
Unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the VTP operating mode is not transparent, allows remote attackers to…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the VTP operating mode is not transparent, allows remote attackers to cause a denial of service (device reload or hang) via a crafted VTP packet sent to a switch interface configured as a trunk port.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 77% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Catos · Cisco
All versions, or not specified · source: NVD
IO
Ios · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4963
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4963
osvdb.org
http://osvdb.org/49601
Vendor Advisory
http://secunia.com/advisories/32573
securitytracker.com
http://securitytracker.com/id?1021143
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_response09186a0080a231cf.html
www.securityfocus.com
http://www.securityfocus.com/bid/32120
www.securitytracker.com
http://www.securitytracker.com/id?1021144
More from Catos
–
CVE-2007-5651
Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP…
–
CVE-2007-5134
Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send…
–
CVE-2006-4775
The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of…
–
CVE-2004-1775
Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device…
–
CVE-2004-0551
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and…