CVE-2008-3798: Cisco IOS

High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days.

Cisco IOS 12.4 allows remote attackers to cause a denial of service (device crash) via a normal, properly formed SSL packet that occurs during termination of an SSL session.

Affected products

• Cisco IOS: version 12.4 only; version 12.4mr only

Published 2008-09-26. Last modified 2026-06-16.