high
7.8
CWE
399
Advisory Published
Updated

CVE-2009-0626

First published: Fri Mar 27 2009(Updated: )

The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet.

Credit: ykramarz@cisco.com

Affected SoftwareAffected VersionHow to fix
Puppet Cisco IOS=12.3ym
Puppet Cisco IOS=12.3yq
Puppet Cisco IOS=12.4t
Puppet Cisco IOS=12.3bc
Puppet Cisco IOS=12.3ya
Puppet Cisco IOS=12.4xq
Puppet Cisco IOS=12.3xs
Puppet Cisco IOS=12.3xg
Puppet Cisco IOS=12.4xj
Puppet Cisco IOS=12.3bw
Puppet Cisco IOS=12.3xd
Puppet Cisco IOS=12.4xl
Puppet Cisco IOS=12.4xm
Puppet Cisco IOS=12.3xw
Puppet Cisco IOS=12.4mr
Puppet Cisco IOS=12.4xt
Puppet Cisco IOS=12.3xi
Puppet Cisco IOS=12.3yj
Puppet Cisco IOS=12.3jec
Puppet Cisco IOS=12.3yu
Puppet Cisco IOS=12.3xj
Puppet Cisco IOS=12.3t
Puppet Cisco IOS=12.3
Puppet Cisco IOS=12.4xf
Puppet Cisco IOS=12.3va
Puppet Cisco IOS=12.3xz
Puppet Cisco IOS=12.4jx
Puppet Cisco IOS=12.4xg
Puppet Cisco IOS=12.4ya
Puppet Cisco IOS=12.4jmb
Puppet Cisco IOS=12.4xv
Puppet Cisco IOS=12.3yd
Puppet Cisco IOS=12.4xw
Puppet Cisco IOS=12.4xz
Puppet Cisco IOS=12.3xf
Puppet Cisco IOS=12.3xl
Puppet Cisco IOS=12.3yk
Puppet Cisco IOS=12.3yf
Puppet Cisco IOS=12.4xd
Puppet Cisco IOS=12.4xp
Puppet Cisco IOS=12.4jda
Puppet Cisco IOS=12.3yt
Puppet Cisco IOS=12.3xb
Puppet Cisco IOS=12.3yz
Puppet Cisco IOS=12.4xk
Puppet Cisco IOS=12.3jl
Puppet Cisco IOS=12.3yg
Puppet Cisco IOS=12.3xu
Puppet Cisco IOS=12.3xy
Puppet Cisco IOS=12.3xc
Puppet Cisco IOS=12.4jk
Puppet Cisco IOS=12.4
Puppet Cisco IOS=12.4jl
Puppet Cisco IOS=12.4sw
Puppet Cisco IOS=12.3jea
Puppet Cisco IOS=12.3tpc
Puppet Cisco IOS=12.3ja
Puppet Cisco IOS=12.4xa
Puppet Cisco IOS=12.4xn
Puppet Cisco IOS=12.3yx
Puppet Cisco IOS=12.3xq
Puppet Cisco IOS=12.4md
Puppet Cisco IOS=12.3ys
Puppet Cisco IOS=12.3jk
Puppet Cisco IOS=12.3b
Puppet Cisco IOS=12.3jeb
Puppet Cisco IOS=12.3yh
Puppet Cisco IOS=12.4xb
Puppet Cisco IOS=12.4ja
Puppet Cisco IOS=12.3xx
Puppet Cisco IOS=12.4xy
Puppet Cisco IOS=12.4xc
Puppet Cisco IOS=12.3xa
Puppet Cisco IOS=12.3yi
Puppet Cisco IOS=12.3xk
Puppet Cisco IOS=12.3jx
Puppet Cisco IOS=12.4jma

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2009-0626?

    CVE-2009-0626 has been classified with a high-severity rating due to its potential to cause denial of service and device instability.

  • How do I fix CVE-2009-0626?

    To mitigate CVE-2009-0626, upgrade to a non-vulnerable version of Cisco IOS that addresses this vulnerability.

  • Which Cisco IOS versions are affected by CVE-2009-0626?

    CVE-2009-0626 affects Cisco IOS versions 12.3 through 12.4, including specific sub-versions listed in the vulnerability description.

  • What is the impact of CVE-2009-0626?

    The impact of CVE-2009-0626 includes the potential for remote attackers to trigger a device reload or hang through crafted HTTPS packets.

  • Is there a workaround for CVE-2009-0626?

    There is no official workaround for CVE-2009-0626, and the recommended action is to upgrade the affected Cisco IOS.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203