CVE-2009-2871

Published: Sep 28, 2009Modified: Apr 23, 2026

7.8

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Exploitability: 10.0 / Impact: 6.9

Source: NVD

Description

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002.

Affected (17)

Products: Cisco: Ios

Cisco

1 product

Ios

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 12.2xna
Cisco Ios	Version 12.2xnb
Cisco Ios	Version 12.2xnc
Cisco Ios	Version 12.2xnd
Cisco Ios	Version 12.4md
Cisco Ios	Version 12.4mr
Cisco Ios	Version 12.4sw
Cisco Ios	Version 12.4t
Cisco Ios	Version 12.4xf
Cisco Ios	Version 12.4xj
Cisco Ios	Version 12.4xk
Cisco Ios	Version 12.4xq
Cisco Ios	Version 12.4xr
Cisco Ios	Version 12.4xv
Cisco Ios	Version 12.4xw
Cisco Ios	Version 12.4xy
Cisco Ios	Version 12.4xz