Lucene search
HistorySep 28, 2009 - 7:30 p.m.
CVE-2009-2871
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.5
Confidence
High
EPSS
0.007
Percentile
80.0%
Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002.
Affected configurations
Node
ciscoiosMatch12.2xna
ORciscoiosMatch12.2xnb
ORciscoiosMatch12.2xnc
ORciscoiosMatch12.2xnd
ORciscoiosMatch12.4md
ORciscoiosMatch12.4mr
ORciscoiosMatch12.4sw
ORciscoiosMatch12.4t
ORciscoiosMatch12.4xf
ORciscoiosMatch12.4xj
ORciscoiosMatch12.4xk
ORciscoiosMatch12.4xq
ORciscoiosMatch12.4xr
ORciscoiosMatch12.4xv
ORciscoiosMatch12.4xw
ORciscoiosMatch12.4xy
ORciscoiosMatch12.4xz
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | ios | 12.2xna | cpe:2.3:o:cisco:ios:12.2xna:*:*:*:*:*:*:* |
| cisco | ios | 12.2xnb | cpe:2.3:o:cisco:ios:12.2xnb:*:*:*:*:*:*:* |
| cisco | ios | 12.2xnc | cpe:2.3:o:cisco:ios:12.2xnc:*:*:*:*:*:*:* |
| cisco | ios | 12.2xnd | cpe:2.3:o:cisco:ios:12.2xnd:*:*:*:*:*:*:* |
| cisco | ios | 12.4md | cpe:2.3:o:cisco:ios:12.4md:*:*:*:*:*:*:* |
| cisco | ios | 12.4mr | cpe:2.3:o:cisco:ios:12.4mr:*:*:*:*:*:*:* |
| cisco | ios | 12.4sw | cpe:2.3:o:cisco:ios:12.4sw:*:*:*:*:*:*:* |
| cisco | ios | 12.4t | cpe:2.3:o:cisco:ios:12.4t:*:*:*:*:*:*:* |
| cisco | ios | 12.4xf | cpe:2.3:o:cisco:ios:12.4xf:*:*:*:*:*:*:* |
| cisco | ios | 12.4xj | cpe:2.3:o:cisco:ios:12.4xj:*:*:*:*:*:*:* |
Related
cisco
cisco
Cisco IOS Software Crafted Encryption Packet Denial of Service Vulnerability
2009-09-23 16:00:00
cvelist
cvelist
CVE-2009-2871
2009-09-28 18:20:00
securityvulns
securityvulns
Cisco Security Advisory: Cisco IOS Software Crafted Encryption Packet Denial of Service Vulnerability
2009-09-23 00:00:00
Cisco IOS multiple security vulnerabilities
2009-09-24 00:00:00
cve
cve
CVE-2009-2871
2009-09-28 19:30:01
nessus
nessus
prion
prion
Code injection
2009-09-28 19:30:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
AI Score
6.5
Confidence
High
EPSS
0.007
Percentile
80.0%
Related for NVD:CVE-2009-2871