CVE-2008-3806: Cisco IOS

High severity, CVSS 8.5. EPSS: 3.1% chance of exploitation in the next 30 days.

Cisco IOS 12.0 through 12.4 on Cisco 10000, uBR10012 and uBR7200 series devices handles external UDP packets that are sent to 127.0.0.0/8 addresses intended for IPC communication within the device, which allows remote attackers to cause a denial of service (device or linecard reload) via crafted UDP packets, a different vulnerability than CVE-2008-3805.

Affected products

• Cisco IOS: version 12.0s only; version 12.0sl only; version 12.0st only; version 12.2sb only; version 12.2sca only; version 12.2src only; …

Published 2008-09-26. Last modified 2026-06-16.