CVE-2008-2060

Severity CVSS v4.0:

Pending analysis

Type:

CWE-16 Configuration Errors

Publication date:

18/06/2008

Last modified:

09/04/2025

Description

Unspecified vulnerability in Cisco Intrusion Prevention System (IPS) 5.x before 5.1(8)E2 and 6.x before 6.0(5)E2, when inline mode and jumbo Ethernet support are enabled, allows remote attackers to cause a denial of service (panic), and possibly bypass intended restrictions on network traffic, via a "specific series of jumbo Ethernet frames."

Impact

Vector 2.0

AV:N/AC:M/Au:N/C:P/I:N/A:C CVSS v2.0 Severity and Metrics:

Base Score: 7.80 HIGH
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:C

Attack Vector (AV): Network
Attack Complexity (AC): Medium
Authentication (Au): None
Confidentiality (C): Physical
Integrity (I): None
Availability (A): Complete