CVEvulnerability

CVE-2009-2871

7.8 HIGH Published 2009-09-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-09-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C

Description

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002.

Affected configurations

• cisco ios 12.2xna • cisco ios 12.2xnb • cisco ios 12.2xnc • cisco ios 12.2xnd • cisco ios 12.4md • cisco ios 12.4mr • cisco ios 12.4sw • cisco ios 12.4t • cisco ios 12.4xf • cisco ios 12.4xj • cisco ios 12.4xk • cisco ios 12.4xq • cisco ios 12.4xr • cisco ios 12.4xv • cisco ios 12.4xw • cisco ios 12.4xy • cisco ios 12.4xz

References