CVE-2009-0626

Cisco IOS 12.3-12.4 - Denial of Service via Crafted HTTPS Packet

Title source: llm
STIX 2.1

Description

The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet.

References (8)

Core 8
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/34239
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6919
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34438
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1021896
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49425
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0851

Scores

EPSS 0.0197
EPSS Percentile 78.3%

Details

CWE
CWE-399
Status published
Products (50)
cisco/ios 12.3
cisco/ios 12.3b
cisco/ios 12.3bc
cisco/ios 12.3bw
cisco/ios 12.3ja
cisco/ios 12.3jea
cisco/ios 12.3jeb
cisco/ios 12.3jec
cisco/ios 12.3jk
cisco/ios 12.3jl
... and 40 more
Published Mar 27, 2009
Tracked Since Feb 18, 2026