CVE-2008-3812: Cisco IOS

High severity, CVSS 7.1. EPSS: 2.8% chance of exploitation in the next 30 days.

Cisco IOS 12.4, when IOS firewall Application Inspection Control (AIC) with HTTP Deep Packet Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a malformed HTTP transit packet.

Affected products

• Cisco IOS: version 12.4t only; version 12.4xe only; version 12.4xj only; version 12.4xk only; version 12.4xv only; version 12.4xw only

Published 2008-09-26. Last modified 2026-06-16.