CVE-2008-3807: Cisco IOS

High severity, CVSS 9.3. EPSS: 3.5% chance of exploitation in the next 30 days.

Cisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured, enables a read/write SNMP service with "private" as the community, which allows remote attackers to obtain administrative access by guessing this community and sending SNMP requests.

Affected products

• Cisco IOS: version 12.2bc only; version 12.2cx only; version 12.2cy only; version 12.2xf only; version 12.3bc only

Published 2008-09-26. Last modified 2026-06-16.