CVE-2008-2171

Published: May 13, 2008Modified: Apr 23, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

Unspecified vulnerability in AlaxalA AX routers allows remote attackers to cause a denial of service (dropped session) via crafted BGP UPDATE messages, leading to route flapping, possibly a related issue to CVE-2007-6372.

Affected (1)

Products: Alaxala: Ax Router

Alaxala

1 product

Ax Router

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Alaxala Ax Router	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://secunia.com/advisories/30054

Source: cve@mitre.org

Vendor Advisory

http://www.kb.cert.org/vuls/id/929656

Source: cve@mitre.org

US Government Resource

http://www.kb.cert.org/vuls/id/MIMG-79UV2A

Source: cve@mitre.org

http://www.securityfocus.com/bid/28999

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/1407/references

Source: cve@mitre.org

http://secunia.com/advisories/30054