CVE-2009-2867

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted SIP transit packet, aka Bug ID CSCsr18691.

Vulnerabilidad sin especificar en Cisco IOS 1v2.2XNA, v12.2XNB, v12.2XNC, v12.2XND, v12.4T, v12.4XZ y v12.4YA. Cuando la función "Policy Firewall SIP Inspection" está activada, permite a usuarios remotos provocar una denegación de servicio (recarga del dispositivo) a través de un paquete de tránsito SIP modificado. También conocido como Bug ID CSCsr18691.

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2009-08-19 CVE Reserved
2009-09-24 CVE Published
2023-03-07 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (5)

URL	Tag	Source
http://www.securitytracker.com/id?1022930	Vdb Entry
http://www.vupen.com/english/advisories/2009/2759	Vdb Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7254	Signature

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://tools.cisco.com/security/center/viewAlert.x?alertId=18886	2017-09-19
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8130.shtml	2017-09-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2xna Search vendor "Cisco" for product "Ios" and version "12.2xna"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2xnb Search vendor "Cisco" for product "Ios" and version "12.2xnb"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2xnc Search vendor "Cisco" for product "Ios" and version "12.2xnc"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.2xnd Search vendor "Cisco" for product "Ios" and version "12.2xnd"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4t Search vendor "Cisco" for product "Ios" and version "12.4t"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4xz Search vendor "Cisco" for product "Ios" and version "12.4xz"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4ya Search vendor "Cisco" for product "Ios" and version "12.4ya"		-		Affected
Cisco Search vendor "Cisco"		Ios Search vendor "Cisco" for product "Ios"				12.4yb Search vendor "Cisco" for product "Ios" and version "12.4yb"		-		Affected