CVE-2009-2871
Cisco IOS 12.2-12.4 - Denial of Service via Crafted Encrypted Packet
Title source: llmDescription
Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002.
References (4)
Core 4
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811c.shtml
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1022930
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/2759
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=18892
Scores
EPSS
0.0252
EPSS Percentile
83.2%
Details
Status
published
Products (17)
cisco/ios
12.2xna
cisco/ios
12.2xnb
cisco/ios
12.2xnc
cisco/ios
12.2xnd
cisco/ios
12.4md
cisco/ios
12.4mr
cisco/ios
12.4sw
cisco/ios
12.4t
cisco/ios
12.4xf
cisco/ios
12.4xj
... and 7 more
Published
Sep 28, 2009
Tracked Since
Feb 18, 2026