CVE-2009-2866
published 2009-09-28CVE-2009-2866: Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet, aka…
PriorityP336high7.8CVSS 2.0
AVNACLAuNCNINAC
EPSS
2.94%
85.7th percentile
Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet, aka Bug ID CSCsz38104.
Affected
73 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
vendor_cisco7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-vx94-4rqx-r6q8: Unspecified vulnerability in Cisco IOS 12
ghsa_unreviewed·2022-05-02
CVE-2009-2866 [HIGH] GHSA-vx94-4rqx-r6q8: Unspecified vulnerability in Cisco IOS 12
Unspecified vulnerability in Cisco IOS 12.2 through 12.4 allows remote attackers to cause a denial of service (device reload) via a crafted H.323 packet, aka Bug ID CSCsz38104.
Cisco
Cisco IOS Software H.323 Denial of Service Vulnerability
vendor_cisco·2009-09-23·CVSS 7.8
CVE-2009-2866 [HIGH] CWE-399 Cisco IOS Software H.323 Denial of Service Vulnerability
Cisco IOS Software H.323 Denial of Service Vulnerability
The H.323 implementation in Cisco IOS®
Software contains a vulnerability that can be exploited remotely to cause a
device that is running Cisco IOS Software to reload.
Cisco has released software updates that address this vulnerability. There are no workarounds to mitigate the vulnerability apart
from disabling H.323 if the device that is running Cisco IOS Software does not
need to run H.323 for VoIP services.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090923-h323.
Note: The September 23, 2009, Cisco IOS Security Advisory bundled
publication includes eleven Security Advisories. Ten of the advisories address
vulnerabilities in Cisco IOS Software, and one advi
Cisco
Cisco IOS Software H.323 Denial of Service Vulnerability
vendor_cisco
CVE-2009-2866 Cisco IOS Software H.323 Denial of Service Vulnerability
CVE-2009-2866: Cisco IOS Software H.323 Denial of Service Vulnerability
The H.323 implementation in Cisco IOS � Software contains a vulnerability that can be exploited remotely to cause a device that is running Cisco IOS Software to reload. Cisco has released software updates that address this vulnerability. There are no
CWE: CWE-399, CWE-399
Bug IDs: CSCsz38104, CSCsz38104
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/58337http://tools.cisco.com/security/center/viewAlert.x?alertId=18885http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811a.shtmlhttp://www.securityfocus.com/bid/36494http://www.securitytracker.com/id?1022930http://www.vupen.com/english/advisories/2009/2759https://exchange.xforce.ibmcloud.com/vulnerabilities/53446http://osvdb.org/58337http://tools.cisco.com/security/center/viewAlert.x?alertId=18885http://www.cisco.com/en/US/products/products_security_advisory09186a0080af811a.shtmlhttp://www.securityfocus.com/bid/36494http://www.securitytracker.com/id?1022930http://www.vupen.com/english/advisories/2009/2759https://exchange.xforce.ibmcloud.com/vulnerabilities/53446
2009-09-28
Published