CVE-2009-2868

Cisco IOS 12.2-12.4 - Denial of Service via Crafted IKE Requests

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service (Phase 1 SA exhaustion) via crafted requests, aka Bug IDs CSCsy07555 and CSCee72997.

References (3)

Core 3
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/2759

Scores

EPSS 0.0173
EPSS Percentile 75.2%

Details

Status published
Products (40)
cisco/ios 12.2ex
cisco/ios 12.2ira
cisco/ios 12.2irb
cisco/ios 12.2irc
cisco/ios 12.2sb
cisco/ios 12.2sca
cisco/ios 12.2scb
cisco/ios 12.2se
cisco/ios 12.2sra
cisco/ios 12.2srb
... and 30 more
Published Sep 28, 2009
Tracked Since Feb 18, 2026