CVE-2009-0634
Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input queue wedge and…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.83%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input queue wedge and interface outage) via an ICMP packet, aka Bug ID CSCso05337.
- CVSS 2.0
- 7.1 HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
- EPSS
- 2.83% probability · 86th percentile
- CISA KEV
- Not listed
- Affected
- cisco/cisco ios
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/34438Vendor Advisory
- http://securitytracker.com/id?1021898
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtmlVendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtmlVendor Advisory
- http://www.securityfocus.com/bid/34241
- http://www.vupen.com/english/advisories/2009/0851Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49424
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49585
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12043
- http://secunia.com/advisories/34438Vendor Advisory
- http://securitytracker.com/id?1021898
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtmlVendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtmlVendor Advisory
- http://www.securityfocus.com/bid/34241
- http://www.vupen.com/english/advisories/2009/0851Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49424
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49585
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12043
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.