CVE-2009-2871

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:C
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
ciscoios
12.2xna:xna
ciscoios
12.2xnb:xnb
ciscoios
12.2xnc:xnc
ciscoios
12.2xnd:xnd
ciscoios
12.4md:md
ciscoios
12.4mr:mr
ciscoios
12.4sw:sw
ciscoios
12.4t:t
ciscoios
12.4xf:xf
ciscoios
12.4xj:xj
ciscoios
12.4xk:xk
ciscoios
12.4xq:xq
ciscoios
12.4xr:xr
ciscoios
12.4xv:xv
ciscoios
12.4xw:xw
ciscoios
12.4xy:xy
ciscoios
12.4xz:xz
𝑥
= Vulnerable software versions