CVE-2009-2871: High severity cisco ios vulnerability

Published Sep 28, 2009

Updated

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002.

Affected Software

17 affected components

Cisco IOS=12.2xnd

Cisco IOS=12.4t

Cisco IOS=12.4xq

Cisco IOS=12.4xj

Cisco IOS=12.4mr

Cisco IOS=12.2xna

Cisco IOS=12.4xf

Cisco IOS=12.4xv

Cisco IOS=12.4xw

Cisco IOS=12.4xz

Cisco IOS=12.4xk

Cisco IOS=12.4sw

Cisco IOS=12.2xnb

Cisco IOS=12.4md

Cisco IOS=12.2xnc

Cisco IOS=12.4xy

Cisco IOS=12.4xr

Event History

Sep 28, 2009

CVE Published

via MITRE·06:20 PM

Data Sourced

via MITRE·06:20 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-2871?

CVE-2009-2871 has a high severity as it allows remote attackers to cause a denial of service through crafted encrypted packets.

How do I fix CVE-2009-2871?

To fix CVE-2009-2871, upgrade to a patched version of Cisco IOS that mitigates this vulnerability.

Which Cisco IOS versions are affected by CVE-2009-2871?

CVE-2009-2871 affects Cisco IOS versions 12.2xnd and 12.4t, including various specific releases under 12.4.

Can CVE-2009-2871 be exploited easily?

Yes, CVE-2009-2871 can potentially be exploited easily by remote attackers with the right crafted packets.

What type of denial of service does CVE-2009-2871 cause?

CVE-2009-2871 can cause a device reload, resulting in a temporary denial of service.