Vulnerability Description
Unspecified vulnerability in the Supervisor Engine 32 (Sup32), Supervisor Engine 720 (Sup720), and Route Switch Processor 720 (RSP720) for multiple Cisco products, when using Multi Protocol Label Switching (MPLS) VPN and OSPF sham-link, allows remote attackers to cause a denial of service (blocked queue, device restart, or memory leak) via unknown vectors.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | 7600 Router | All versions |
| Cisco | Catalyst 6500 | All versions |
| Cisco | Me 6524 Ethernet Switch | All versions |
| Cisco | Route Switch Processor | rsp720 |
| Cisco | Supervisor Engine | sup32 |
References
- http://secunia.com/advisories/29559Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20080326-queue.shtmlVendor Advisory
- http://www.securityfocus.com/bid/28463
- http://www.securitytracker.com/id?1019716
- http://www.us-cert.gov/cas/techalerts/TA08-087B.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/1005/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41466
- http://secunia.com/advisories/29559Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20080326-queue.shtmlVendor Advisory
- http://www.securityfocus.com/bid/28463
- http://www.securitytracker.com/id?1019716
- http://www.us-cert.gov/cas/techalerts/TA08-087B.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/1005/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41466
FAQ
What is CVE-2008-0537?
CVE-2008-0537 is a vulnerability with a CVSS score of 7.1 (HIGH). Unspecified vulnerability in the Supervisor Engine 32 (Sup32), Supervisor Engine 720 (Sup720), and Route Switch Processor 720 (RSP720) for multiple Cisco products, when using Multi Protocol Label Swit...
How severe is CVE-2008-0537?
CVE-2008-0537 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-0537?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco 7600 Router, Cisco Catalyst 6500, Cisco Me 6524 Ethernet Switch, Cisco Route Switch Processor, Cisco Supervisor Engine.