high
7.8
CWE
Advisory Published
Updated

CVE-2009-2868

First published: Mon Sep 28 2009(Updated: )

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service (Phase 1 SA exhaustion) via crafted requests, aka Bug IDs CSCsy07555 and CSCee72997.

Credit: ykramarz@cisco.com

Affected SoftwareAffected VersionHow to fix
Cisco IOS=12.2xnd
Cisco IOS=12.3yq
Cisco IOS=12.3xr
Cisco IOS=12.4t
Cisco IOS=12.3ya
Cisco IOS=12.2irc
Cisco IOS=12.2scb
Cisco IOS=12.3xs
Cisco IOS=12.2srb
Cisco IOS=12.2xna
Cisco IOS=12.3yu
Cisco IOS=12.3t
Cisco IOS=12.2sca
Cisco IOS=12.3yd
Cisco IOS=12.2ex
Cisco IOS=12.2ira
Cisco IOS=12.3xl
Cisco IOS=12.2se
Cisco IOS=12.2sxh
Cisco IOS=12.3yf
Cisco IOS=12.4xd
Cisco IOS=12.2sb
Cisco IOS=12.3yt
Cisco IOS=12.3yz
Cisco IOS=12.3yg
Cisco IOS=12.4
Cisco IOS=12.2srd
Cisco IOS=12.2xnb
Cisco IOS=12.2sxi
Cisco IOS=12.3yx
Cisco IOS=12.3ys
Cisco IOS=12.2sra
Cisco IOS=12.2irb
Cisco IOS=12.3yh
Cisco IOS=12.4xb
Cisco IOS=12.3xx
Cisco IOS=12.2xnc
Cisco IOS=12.4xc
Cisco IOS=12.3yi
Cisco IOS=12.2src

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203