CVE Feed

    Dashboard / CVE / CVE-2008-1152

    CVE-2008-1152

    The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device restart or memory consumption) via crafted (1) UDP port 2067 or (2) IP protocol 91 packets.

    Published:Mar 27, 2008
    Last Modified:Apr 23, 2026
    EPS:Mar 27, 2008
    EPSS Score:0.01328
    CVSS Score:7.8

    Affected Products

    Vendor
    Cisco
    Product
    Cisco Ios
    Vendor
    Cisco
    Product
    Ios

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-20365 (CVSS 4.3) — A vulnerability in the IPv6 Router Advertisement (RA) packet processing of Cisco Access Point Software could a…
    CVE-2025-20364 (CVSS 4.3) — A vulnerability in the Device Analytics action frame processing of Cisco Wireless Access Point (AP) Software c…
    CVE-2025-20151 (CVSS 4.3) — A vulnerability in the implementation of the Simple Network Management Protocol Version 3 (SNMPv3) feature of …
    CVE-2015-4204 (CVSS 6.8) — Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000 devices allows remote…
    CVE-2009-0628 (CVSS 9) — Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of …
    CVE-2009-0633 (CVSS 7.1) — Multiple unspecified vulnerabilities in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem …
    CVE-2009-0634 (CVSS 7.1) — Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal …
    CVE-2008-0960 (CVSS 10) — SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1;…
    CVE-2008-1153 (CVSS 7.1) — Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol enabled, allows remote atta…
    CVE-2008-1156 (CVSS 5.1) — Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12…

    References

    http://secunia.com/advisories/29507
    http://www.cisco.com/en/US/products/products_security_advisory09186a0080969866.shtml
    http://www.securityfocus.com/bid/28465
    http://www.securitytracker.com/id?1019712
    http://www.us-cert.gov/cas/techalerts/TA08-087B.html
    http://www.vupen.com/english/advisories/2008/1006/references
    https://exchange.xforce.ibmcloud.com/vulnerabilities/41482
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5821
    http://secunia.com/advisories/29507
    http://www.cisco.com/en/US/products/products_security_advisory09186a0080969866.shtml
    http://www.securityfocus.com/bid/28465
    http://www.securitytracker.com/id?1019712
    http://www.us-cert.gov/cas/techalerts/TA08-087B.html
    http://www.vupen.com/english/advisories/2008/1006/references
    https://exchange.xforce.ibmcloud.com/vulnerabilities/41482
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5821

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High