CVE-2009-2871 : Detail

CVE-2009-2871

0.68%V3
Network
2009-09-28
16h20 +00:00
2009-10-01
07h00 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE Other No informations.

Metrics

Metrics Score Severity CVSS Vector Source
V2 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Products Mentioned

Configuraton 0

Cisco>>Ios >> Version 12.2xna

Cisco>>Ios >> Version 12.2xnb

Cisco>>Ios >> Version 12.2xnc

Cisco>>Ios >> Version 12.2xnd

Cisco>>Ios >> Version 12.4md

Cisco>>Ios >> Version 12.4mr

Cisco>>Ios >> Version 12.4sw

Cisco>>Ios >> Version 12.4t

Cisco>>Ios >> Version 12.4xf

Cisco>>Ios >> Version 12.4xj

Cisco>>Ios >> Version 12.4xk

Cisco>>Ios >> Version 12.4xq

Cisco>>Ios >> Version 12.4xr

Cisco>>Ios >> Version 12.4xv

Cisco>>Ios >> Version 12.4xw

Cisco>>Ios >> Version 12.4xy

Cisco>>Ios >> Version 12.4xz

References

http://www.securitytracker.com/id?1022930
Tags : vdb-entry, x_refsource_SECTRACK
http://www.vupen.com/english/advisories/2009/2759
Tags : vdb-entry, x_refsource_VUPEN