CVE-2009-2871

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2009-2871
Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002.

7.8 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 10.0 / Impact : 6.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References
Link Resource
http://tools.cisco.com/security/center/viewAlert.x?alertId=18892 Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811c.shtml Vendor Advisory
http://www.securitytracker.com/id?1022930
http://www.vupen.com/english/advisories/2009/2759
http://tools.cisco.com/security/center/viewAlert.x?alertId=18892 Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811c.shtml Vendor Advisory
http://www.securitytracker.com/id?1022930
http://www.vupen.com/english/advisories/2009/2759
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4xk:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4xq:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4xr:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4xv:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4xw:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4xy:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.4xz:*:*:*:*:*:*:*
History

21 Nov 2024, 01:05

Type Values Removed Values Added
References () http://tools.cisco.com/security/center/viewAlert.x?alertId=18892 - Vendor Advisory () http://tools.cisco.com/security/center/viewAlert.x?alertId=18892 - Vendor Advisory
References () http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811c.shtml - Vendor Advisory () http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811c.shtml - Vendor Advisory
References () http://www.securitytracker.com/id?1022930 - () http://www.securitytracker.com/id?1022930 -
References () http://www.vupen.com/english/advisories/2009/2759 - () http://www.vupen.com/english/advisories/2009/2759 -
Information

Published : 2009-09-28 19:30

Updated : 2025-04-09 00:30

NVD link : CVE-2009-2871

Mitre link : CVE-2009-2871

CVE.ORG link : CVE-2009-2871

JSON object : View

Products Affected

cisco

  • ios
CWE
NVD-CWE-noinfo