CVE-2009-2867: High severity cisco ios vulnerability

Published Sep 28, 2009

Updated

Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted SIP transit packet, aka Bug ID CSCsr18691.

Affected Software

8 affected components

Cisco IOS=12.2xnd

Cisco IOS=12.4t

Cisco IOS=12.2xna

Cisco IOS=12.4ya

Cisco IOS=12.4xz

Cisco IOS=12.2xnb

Cisco IOS=12.4yb

Cisco IOS=12.2xnc

Event History

Sep 28, 2009

CVE Published

via MITRE·06:20 PM

Data Sourced

via MITRE·06:20 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-2867?

CVE-2009-2867 has been classified as a high severity vulnerability due to its potential to cause a device reload, leading to a denial of service.

How do I fix CVE-2009-2867?

To resolve CVE-2009-2867, it is recommended to upgrade to a patched version of Cisco IOS that addresses this vulnerability.

Which Cisco IOS versions are affected by CVE-2009-2867?

CVE-2009-2867 affects Cisco IOS versions 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA when Zone-Based Policy Firewall SIP Inspection is enabled.

What attack vector can exploit CVE-2009-2867?

CVE-2009-2867 can be exploited by remote attackers using crafted SIP transit packets to cause a denial of service on the vulnerable device.

Is there a workaround for CVE-2009-2867?

A potential workaround for CVE-2009-2867 includes disabling Zone-Based Policy Firewall SIP Inspection if immediate upgrading is not possible.