TI-2008-01105 Aliases CVE-2008-1153 GHSA-676g-35q7-rhh4

Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol…

MEDIUM 40Published 2008-03-27 · Updated 2024-08-07

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Medium
Impact type: —
Confidentiality · integrity · availability: None · None · Complete
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol enabled, allows remote attackers to cause a denial of service (device crash and possible blocked interface) via a crafted IPv6 packet to the device.

Why it matters now

EPSS 0.05584 92nd percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:o:cisco:cisco_ios:12.3:::::::*	12.3	Vulnerable	Cisco
cpe:2.3:o:cisco:cisco_ios:12.4:::::::*	12.4	Vulnerable	Cisco
cpe:2.3:o:cisco:ios:12.1:::::::*	12.1	Vulnerable	Cisco
cpe:2.3:o:cisco:ios:12.2:::::::*	12.2	Vulnerable	Cisco

cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:* Versions 12.3 Vulnerable ·Cisco
cpe:2.3:o:cisco:cisco_ios:12.4:*:*:*:*:*:*:* Versions 12.4 Vulnerable ·Cisco
cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:* Versions 12.1 Vulnerable ·Cisco
cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:* Versions 12.2 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2008-1153
2026-10-03 Alias added: GHSA-676g-35q7-rhh4

References

Exploit 1

20080326 Cisco IOS User Datagram Protocol Delivery Issue For IPv4/IPv6 Dual-stack Routers

Advisory 2

Other 2

TI-2009-00604 Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers… CVSS 2.0HIGH 9.0
TI-2008-01104 The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote… CVSS 2.0HIGH 7.8
TI-2009-00610 Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1)… CVSS 2.0HIGH 7.1
TI-2009-00609 Multiple unspecified vulnerabilities in the (1) Mobile IP NAT Traversal feature and (2)… CVSS 2.0HIGH 7.1
TI-2015-03523 Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000… CVSS 2.0MEDIUM 6.8
TI-2008-01108 Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation… CVSS 2.0MEDIUM 5.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences