Unscored severity · published Dec 31, 2002
CVE-2002-2208
Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood)…
–
CVSS
4.3%
EPSS
No
On KEV
Description
Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.3% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-2208
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-2208
Exploit
http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html
marc.info
http://marc.info/?l=full-disclosure&m=113504451523186&w=2
Vendor Advisory
http://secunia.com/advisories/7766
securitytracker.com
http://securitytracker.com/id?1005840
Patch
http://www.cisco.com/en/US/tech/tk365/technologies_security_notice09186a008011c5e1.html
Vendor Advisory
http://www.cisco.com/warp/public/707/eigrp_issue.pdf
More from Ios
9.8
CVE-2018-0171
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
9.8
CVE-2017-12240
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
9.8
CVE-2017-3881
Cisco IOS and IOS XE Remote Code Execution Vulnerability
8.8
CVE-2018-0167
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
8.8
CVE-2017-6738
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability