CVE-2008-3811: Cisco IOS

High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days.

Cisco IOS 12.2 and 12.4, when NAT Skinny Call Control Protocol (SCCP) Fragmentation Support is enabled, allows remote attackers to cause a denial of service (device reload) via segmented SCCP messages, aka Cisco Bug ID CSCsi17020, a different vulnerability than CVE-2008-3810.

Affected products

• Cisco IOS: version 12.4md only; version 12.4mr only; version 12.4sw only; version 12.4t only; version 12.4xc only; version 12.4xe only; …

Published 2008-09-26. Last modified 2026-06-16.