CVE-2009-2869: High severity cisco ios vulnerability

Published Sep 28, 2009

Updated

Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to cause a denial of service (device reload) via a crafted NTPv4 packet, aka Bug IDs CSCsu24505 and CSCsv75948.

Affected Software

10 affected components

Cisco IOS=12.2xnd

Cisco IOS=12.4t

Cisco IOS=12.2xna

Cisco IOS=12.4ya

Cisco IOS=12.4xz

Cisco IOS=12.4yd

Cisco IOS=12.2xnb

Cisco IOS=12.4md

Cisco IOS=12.2xnc

Cisco IOS=12.4ye

Event History

Sep 28, 2009

CVE Published

via MITRE·06:20 PM

Data Sourced

via MITRE·06:20 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-2869?

CVE-2009-2869 has a high severity rating due to its potential to cause denial of service resulting in device reload.

How do I fix CVE-2009-2869?

To address CVE-2009-2869, upgrade to a patched version of Cisco IOS that is not affected by this vulnerability.

Which Cisco IOS versions are affected by CVE-2009-2869?

CVE-2009-2869 affects several Cisco IOS versions including 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA.

Can CVE-2009-2869 be exploited remotely?

Yes, CVE-2009-2869 can be exploited remotely through a crafted NTPv4 packet.

What impact does CVE-2009-2869 have on Cisco devices?

CVE-2009-2869 can lead to a denial of service, causing Cisco devices to reload unexpectedly.