CVE-2008-2169

Published: May 13, 2008Modified: Apr 23, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Unspecified vulnerability in Avici routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372.

Affected (7)

Products: Avici: Router · Hitachi: Gr2000, Gr3000, Gr4000

1 product

3 products

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Avici Router	All versions
Hitachi Gr2000	Version 1b
Hitachi Gr2000	Version 2b
Hitachi Gr2000	Version 2b+
Hitachi Gr2000	Version bh
Hitachi Gr3000	All versions
Hitachi Gr4000	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

http://www.kb.cert.org/vuls/id/929656

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/bid/28999

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/929656

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/bid/28999

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.