CVE-2009-0626: High severity Cisco IOS vulnerability

Published Mar 27, 2009

Updated

The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet.

Affected Software

77 affected components

Cisco IOS=12.3ym

Cisco IOS=12.3yq

Cisco IOS=12.4t

Cisco IOS=12.3bc

Cisco IOS=12.3ya

Cisco IOS=12.4xq

Cisco IOS=12.3xs

Cisco IOS=12.3xg

Cisco IOS=12.4xj

Cisco IOS=12.3bw

Cisco IOS=12.3xd

Cisco IOS=12.4xl

Cisco IOS=12.4xm

Cisco IOS=12.3xw

Cisco IOS=12.4mr

Cisco IOS=12.4xt

Cisco IOS=12.3xi

Cisco IOS=12.3yj

Cisco IOS=12.3jec

Cisco IOS=12.3yu

Cisco IOS=12.3xj

Cisco IOS=12.3t

Cisco IOS=12.3

Cisco IOS=12.4xf

Cisco IOS=12.3va

Cisco IOS=12.3xz

Cisco IOS=12.4jx

Cisco IOS=12.4xg

Cisco IOS=12.4ya

Cisco IOS=12.4jmb

Cisco IOS=12.4xv

Cisco IOS=12.3yd

Cisco IOS=12.4xw

Cisco IOS=12.4xz

Cisco IOS=12.3xf

Cisco IOS=12.3xl

Cisco IOS=12.3yk

Cisco IOS=12.3yf

Cisco IOS=12.4xd

Cisco IOS=12.4xp

Cisco IOS=12.4jda

Cisco IOS=12.3yt

Cisco IOS=12.3xb

Cisco IOS=12.3yz

Cisco IOS=12.4xk

Cisco IOS=12.3jl

Cisco IOS=12.3yg

Cisco IOS=12.3xu

Cisco IOS=12.3xy

Cisco IOS=12.3xc

Cisco IOS=12.4jk

Cisco IOS=12.4

Cisco IOS=12.4jl

Cisco IOS=12.4sw

Cisco IOS=12.3jea

Cisco IOS=12.3tpc

Cisco IOS=12.3ja

Cisco IOS=12.4xa

Cisco IOS=12.4xn

Cisco IOS=12.3yx

Cisco IOS=12.3xq

Cisco IOS=12.4md

Cisco IOS=12.3ys

Cisco IOS=12.3jk

Cisco IOS=12.3b

Cisco IOS=12.3jeb

Cisco IOS=12.3yh

Cisco IOS=12.4xb

Cisco IOS=12.4ja

Cisco IOS=12.3xx

Cisco IOS=12.4xy

Cisco IOS=12.4xc

Cisco IOS=12.3xa

Cisco IOS=12.3yi

Cisco IOS=12.3xk

Cisco IOS=12.3jx

Cisco IOS=12.4jma

Event History

Mar 27, 2009

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Data Sourced

via NVD·04:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-0626?

CVE-2009-0626 has been classified with a high-severity rating due to its potential to cause denial of service and device instability.

How do I fix CVE-2009-0626?

To mitigate CVE-2009-0626, upgrade to a non-vulnerable version of Cisco IOS that addresses this vulnerability.

Which Cisco IOS versions are affected by CVE-2009-0626?

CVE-2009-0626 affects Cisco IOS versions 12.3 through 12.4, including specific sub-versions listed in the vulnerability description.

What is the impact of CVE-2009-0626?

The impact of CVE-2009-0626 includes the potential for remote attackers to trigger a device reload or hang through crafted HTTPS packets.

Is there a workaround for CVE-2009-0626?

There is no official workaround for CVE-2009-0626, and the recommended action is to upgrade the affected Cisco IOS.