CVE-2008-3805: Cisco IOS

High severity, CVSS 8.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3806.

Affected products

• Cisco IOS: version 12.2b only; version 12.2ca only; version 12.2l only; version 12.2rc only; version 12.2s only; version 12.2t only; …

Published 2008-09-26. Last modified 2026-06-16.