CVE-2009-2873
published 2009-09-28CVE-2009-2873: Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service…
PriorityP430high7.1CVSS 2.0
AVNACMAuNCNINAC
EPSS
1.68%
74.6th percentile
Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via malformed packets, aka Bug ID CSCsx70889.
Affected
305 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
| cisco | ios | — | — |
CVSS provenance
nvdv2.07.1HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
vendor_cisco7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IOS Software Tunnels Vulnerability
vendor_cisco·2009-09-23·CVSS 7.1
CVE-2009-2872 [HIGH] CWE-399 Cisco IOS Software Tunnels Vulnerability
Cisco IOS Software Tunnels Vulnerability
Cisco devices running affected versions of Cisco IOS Software are
vulnerable to a denial of service (DoS) attack if configured for IP tunnels and
Cisco Express Forwarding.
Cisco has released software updates that address this vulnerability.
This advisory is posted at
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090923-tunnels.
Note: The September 23, 2009, Cisco IOS Security Advisory bundled
publication includes eleven Security Advisories. Ten of the advisories address
vulnerabilities in Cisco IOS Software, and one advisory addresses a
vulnerability in Cisco Unified Communications Manager. Each advisory lists the
releases that correct the vulnerability or vulnerabilities detailed in the
advisory.
Indi
Cisco
Cisco IOS Software Tunnels Vulnerability
vendor_cisco
CVE-2009-2873 Cisco IOS Software Tunnels Vulnerability
CVE-2009-2873: Cisco IOS Software Tunnels Vulnerability
Cisco devices running affected versions of Cisco IOS Software are vulnerable to a denial of service (DoS) attack if configured for IP tunnels and Cisco Express Forwarding. Cisco has released software updates that address this vulnerability. This advisory is posted at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20090923-tunnels . Note: The September 23, 2009, Cisco IOS Security Advisory bundled publication includes eleven Security Advisories. Ten of the advisories address vulnerabilities in Cisco IOS Software, and one advisory addresses a vulnerability in Cisco Unified Communications Manager. Each advisory lists the releases that correct the vulnerability or vulnerabilities detailed in the adv
GHSA
GHSA-hf63-h777-fqg6: Cisco IOS 12
ghsa_unreviewed·2022-05-02
CVE-2009-2873 [HIGH] GHSA-hf63-h777-fqg6: Cisco IOS 12
Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via malformed packets, aka Bug ID CSCsx70889.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/58334http://tools.cisco.com/security/center/viewAlert.x?alertId=18895http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080af8113.htmlhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080af8115.shtmlhttp://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.htmlhttp://www.securitytracker.com/id?1022930http://www.vupen.com/english/advisories/2009/2759http://osvdb.org/58334http://tools.cisco.com/security/center/viewAlert.x?alertId=18895http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080af8113.htmlhttp://www.cisco.com/en/US/products/products_security_advisory09186a0080af8115.shtmlhttp://www.cisco.com/web/about/security/intelligence/Cisco_ERP_sep09.htmlhttp://www.securitytracker.com/id?1022930http://www.vupen.com/english/advisories/2009/2759
2009-09-28
Published