CVE-2008-3810: Cisco IOS

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka CSCsg22426, a different vulnerability than CVE-2008-3811.

Affected products

• Cisco IOS: version 12.4md only; version 12.4mr only; version 12.4sw only; version 12.4t only; version 12.4xc only; version 12.4xe only; …

Published 2008-09-26. Last modified 2026-06-16.