Unscored severity · published Mar 27, 2009
CVE-2009-0629
The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial Tunnel Code (aka BSTUN), (4) Native Client Interface Architecture (NCIA) support, (5)…
–
CVSS
4%
EPSS
No
On KEV
Description
The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Code (aka STUN), (3) Block Serial Tunnel Code (aka BSTUN), (4) Native Client Interface Architecture (NCIA) support, (5) Data-link switching (aka DLSw), (6) Remote Source-Route Bridging (RSRB), (7) Point to Point Tunneling Protocol (PPTP), (8) X.25 for Record Boundary Preservation (RBP), (9) X.25 over TCP (XOT), and (10) X.25 Routing features in Cisco IOS 12.2 and 12.4 allows remote attackers to cause a denial of service (device reload) via a series of crafted TCP packets.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IO
Ios · Cisco
12.2; 12.2b; 12.2bc; 12.2bw; 12.2bx; 12.2by; +34 more · source: NVD
IX
Ios XR · Cisco
12.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0629
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0629
Third Party Advisory
http://secunia.com/advisories/34438
Third Party Advisory
http://securitytracker.com/id?1021903
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904cb.shtml
Third Party Advisory
http://www.securityfocus.com/bid/34238
Third Party Advisory
http://www.vupen.com/english/advisories/2009/0851
More from Ios
9.8
CVE-2018-0171
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
9.8
CVE-2017-12240
Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability
9.8
CVE-2017-3881
Cisco IOS and IOS XE Remote Code Execution Vulnerability
8.8
CVE-2018-0167
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
8.8
CVE-2017-6738
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability