RCE in Cisco Ace 4710
CVE-2009-0625
Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.2) and Cisco ACE 4710 Application Control Engine Appliance before A1(8.0) allows remote attackers to cause a denial of service (device reload) via a crafted SNMPv3 packet.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.017 (74.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Ace_4710
- Cisco Application_control_engine_module
- Cisco Catalyst — versions 6500, 7600
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_BID)