CVE-2009-2868

Published: Sep 28, 2009Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service (Phase 1 SA exhaustion) via crafted requests, aka Bug IDs CSCsy07555 and CSCee72997.

Affected (40)

Products: Cisco: Ios

Cisco

1 product

Ios

Configuration A

40 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 12.2ex
Cisco Ios	Version 12.2ira
Cisco Ios	Version 12.2irb
Cisco Ios	Version 12.2irc
Cisco Ios	Version 12.2sb
Cisco Ios	Version 12.2sca
Cisco Ios	Version 12.2scb
Cisco Ios	Version 12.2se
Cisco Ios	Version 12.2sra
Cisco Ios	Version 12.2srb
Cisco Ios	Version 12.2src
Cisco Ios	Version 12.2srd
Cisco Ios	Version 12.2sxh
Cisco Ios	Version 12.2sxi
Cisco Ios	Version 12.2xna
Cisco Ios	Version 12.2xnb
Cisco Ios	Version 12.2xnc
Cisco Ios	Version 12.2xnd
Cisco Ios	Version 12.3t
Cisco Ios	Version 12.3xl
Cisco Ios	Version 12.3xr
Cisco Ios	Version 12.3xs
Cisco Ios	Version 12.3xx
Cisco Ios	Version 12.3ya
Cisco Ios	Version 12.3yd
Cisco Ios	Version 12.3yf
Cisco Ios	Version 12.3yg
Cisco Ios	Version 12.3yh
Cisco Ios	Version 12.3yi
Cisco Ios	Version 12.3yq
Cisco Ios	Version 12.3ys
Cisco Ios	Version 12.3yt
Cisco Ios	Version 12.3yu
Cisco Ios	Version 12.3yx
Cisco Ios	Version 12.3yz
Cisco Ios	Version 12.4
Cisco Ios	Version 12.4t
Cisco Ios	Version 12.4xb
Cisco Ios	Version 12.4xc
Cisco Ios	Version 12.4xd