What’s Vulnerable › Vulnerabilities

CVE-2008-1156

• Severity: medium (CVSS 5.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2008-03-27 · updated 2026-06-16
• Weakness: CWE-16

Description

Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3, and 12.4 allows remote attackers to create "extra multicast states on the core routers" via a crafted Multicast Distribution Tree (MDT) Data Join message.

Affected products

• Cisco Ios: 12.3, 12.4
• Cisco IOS: 12.0, 12.2

References

• http://secunia.com/advisories/29507
• http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml
• http://www.securityfocus.com/bid/28464
• http://www.securitytracker.com/id?1019715
• http://www.us-cert.gov/cas/techalerts/TA08-087B.html
• http://www.vupen.com/english/advisories/2008/1006/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41468
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5648
• http://secunia.com/advisories/29507
• http://www.cisco.com/warp/public/707/cisco-sa-20080326-mvpn.shtml
• http://www.securityfocus.com/bid/28464
• http://www.securitytracker.com/id?1019715

Get alerted when CVE-2008-1156 or the next vulnerability affects your stack