CVE-2008-3802
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12...
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (device reload) via unspecified valid SIP messages, aka Cisco bug ID CSCsk42759, a different vulnerability than CVE-2008-3800 and CVE-2008-3801.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (device reload) via unspecified valid SIP messages, aka Cisco bug ID CSCsk42759, a different vulnerability than CVE-2008-3800 and CVE-2008-3801.
- Record
CVE-2008-3802- CVSS 2.0
- 7.1 High
AV:N/AC:M/Au:N/C:N/I:N/A:C - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (device reload) via unspecified valid SIP messages, aka Cisco bug ID CSCsk42759, a different vulnerability than CVE-2008-3800 and CVE-2008-3801.
- Record
CVE-2008-3802- Updated
- 2026-11-02
EUVDEUVD-2008-3788 No score
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (device reload) via unspecified valid SIP messages, aka Cisco bug ID CSCsk42759, a different vulnerability than CVE-2008-3800 and CVE-2008-3801.
- Record
EUVD-2008-3788- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7r4m-p2w9-fj4x No score
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12...
Unspecified vulnerability in the Session Initiation Protocol (SIP) implementation in Cisco IOS 12.2 through 12.4, when VoIP is configured, allows remote attackers to cause a denial of service (device reload) via unspecified valid SIP messages, aka Cisco bug ID CSCsk42759, a different vulnerability than CVE-2008-3800 and CVE-2008-3801.
- Record
GHSA-7r4m-p2w9-fj4x- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3802 is a high vulnerability (CVSS 7.1) in Cisco Ios, published September 26, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.54%, the 85th percentile. No source names a fixed version.
References
secunia.com/advisories/31990
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5889
vupen.com/english/advisories/2008/2670
cisco.com/en/US/products/products_security_advisory09186a0080a01562.shtml
securitytracker.com/id?1020939
nvd.nist.gov/vuln/detail/CVE-2008-3802
github.com/advisories/GHSA-7r4m-p2w9-fj4x