CVE-2008-1152: Cisco IOS

High severity, CVSS 7.8. EPSS: 3.7% chance of exploitation in the next 30 days.

The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device restart or memory consumption) via crafted (1) UDP port 2067 or (2) IP protocol 91 packets.

Affected products

• Cisco Cisco IOS: version 12.0 only; version 12.1 only; version 12.2 only; version 12.3 only; version 12.4 only
• Cisco IOS: version 12.0 only; version 12.2yd only; version 12.2yf only; version 12.2yg only; version 12.2yh only

Published 2008-03-27. Last modified 2026-06-16.