CVE-2008-3803: Cisco IOS

Medium severity, CVSS 5.1. EPSS: 2.6% chance of exploitation in the next 30 days.

A "logic error" in Cisco IOS 12.0 through 12.4, when a Multiprotocol Label Switching (MPLS) VPN with extended communities is configured, sometimes causes a corrupted route target (RT) to be used, which allows remote attackers to read traffic from other VPNs in opportunistic circumstances.

Affected products

• Cisco IOS: version 12.0s only; version 12.0sx only; version 12.0sz only

Published 2008-09-26. Last modified 2026-06-16.