Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2008-2476

28
FAUCET Score

CVE-2008-2476 describes a critical vulnerability in the IPv6 Neighbor Discovery Protocol (NDP) implementation across multiple operating systems and network devices, including FreeBSD, OpenBSD, NetBSD, Force10 FTOS, Juniper JUNOS, and Wind River VxWorks. This flaw allows remote attackers to spoof NDP messages, leading to a denial of service by disrupting network connectivity or enabling the interception of private network traffic through manipulation of the Forward Information Base (FIB). With a CVSS score of 9.3, this vulnerability is considered highly severe, indicating a network-based attack with medium complexity that can result in complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
All Versions ImpactedCPE matchmatch criteria
cpe:2.3:o:force10:ftos:*:*:*:*:*:*:*:*
6.3CPE matchmatch criteria
cpe:2.3:o:freebsd:freebsd:6.3:*:*:*:*:*:*:*
7.1CPE matchmatch criteria
cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*
All Versions ImpactedCPE matchmatch criteria
cpe:2.3:o:juniper:jnos:*:*:*:*:*:*:*:*
All Versions ImpactedCPE matchmatch criteria
cpe:2.3:o:netbsd:netbsd:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

9.3HIGH

AV:N/AC:M/Au:N/C:C/I:C/A:C

Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
10.0
CvssVersion
2.0

Exploit Intelligence

EPSS Score
7.42%
Probability of exploitation in next 30 days
EPSS Percentile
93.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
This CVE's current EPSS score of 0.0742 is in the 71st percentile among its peer group of 8,914 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2008-2476

CVE-2008-2476

References

ftp.netbsd.org / pub/NetBSD/security/advisories/NetBSD-SA2008-013.txt.asc
secunia.com / advisories/32112
Vendor Advisory
secunia.com / advisories/32116
secunia.com / advisories/32117
Vendor Advisory
secunia.com / advisories/32133
secunia.com / advisories/32406
security.freebsd.org / advisories/FreeBSD-SA-08:10.nd6.asc
Vendor Advisory
securitytracker.com / id
exchange.xforce.ibmcloud.com / vulnerabilities/45601
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5670
support.apple.com / kb/HT3467
juniper.net / alerts/viewalert.jsp
kb.cert.org / vuls/id/472363
US Government Resource
kb.cert.org / vuls/id/MAPG-7H2RY7
US Government Resource
kb.cert.org / vuls/id/MAPG-7H2S68
US Government Resource
openbsd.org / errata42.html
openbsd.org / errata43.html
securityfocus.com / bid/31529
securitytracker.com / id
securitytracker.com / id
vupen.com / english/advisories/2008/2750
vupen.com / english/advisories/2008/2751
vupen.com / english/advisories/2008/2752
vupen.com / english/advisories/2009/0633