CVE-2009-2870: High severity cisco ios vulnerability
Published Sep 28, 2009
·Updated
Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID CSCsx25880.
Affected Software
19 affected components
Cisco IOS=12.3yk
Cisco IOS=12.3ys
Cisco IOS=12.3yt
Cisco IOS=12.4gc
Cisco IOS=12.4mr
Cisco IOS=12.4t
Cisco IOS=12.4xa
Cisco IOS=12.4xc
Cisco IOS=12.4xd
Cisco IOS=12.4xe
Cisco IOS=12.4xl
Cisco IOS=12.4xm
Cisco IOS=12.4xp
Cisco IOS=12.4xt
Cisco IOS=12.4xv
Cisco IOS=12.4xw
Cisco IOS=12.4xy
Cisco IOS=12.4xz
Cisco IOS=12.4ya
Event History
Sep 28, 2009
CVE Published
via MITRE·06:20 PM
Data Sourced
via MITRE·06:20 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2870?
CVE-2009-2870 is classified as a medium severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2009-2870?
To fix CVE-2009-2870, upgrade the Cisco IOS to a version that does not contain the vulnerability.
3
Which Cisco IOS versions are affected by CVE-2009-2870?
CVE-2009-2870 affects Cisco IOS versions 12.2 through 12.4 when the Cisco Unified Border Element feature is enabled.
4
What type of attack can exploit CVE-2009-2870?
CVE-2009-2870 can be exploited via crafted SIP messages leading to device reload and denial of service.
5
Is there a workaround for CVE-2009-2870?
There is no official workaround for CVE-2009-2870; upgrading the software is recommended.