Vulnerability in Cisco iOS

CVE-2009-2868

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when certificate-based authentication is enabled for IKE, allows remote attackers to cause a denial of service (Phase 1 SA exhaustion) via crafted requests, aka Bug IDs CSCsy07555 and CSCee72997.

EPSS: 0.017 (75.2th percentile) — read the EPSS interpretation.

Affected products

Cisco Ios — versions 12.2ex, 12.2ira, 12.2irb
N/a — versions n/a

References

psirt@cisco.com (vdb-entry, x_refsource_VUPEN)
psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)