CVE-2009-2872 - CVE House
Back to Database
Status published Medium CVE-2009-2872

Cisco IOS 12.0 through 12.4, when IP-based tunnels and the...

Vulnerability Description

Cisco IOS 12.0 through 12.4, when IP-based tunnels and the Cisco Express Forwarding feature are enabled, allows remote attackers to cause a denial of service (device reload) via a malformed packet that is not properly handled during switching from one tunnel to a second tunnel, aka Bug IDs CSCsh97579 and CSCsq31776.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-2872

Credits & Attribution

No credits recorded in the NVD database.

References

More from cisco

View All →
CVE-2025-27091
OpenH264 Decoding Functions Heap Overflow Vulnerability
High 8.6
CVE-2023-25653
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
High 7.5
CVE-2021-33478
The TrustZone implementation in certain Broadcom MediaxChange firmware could allow...
Medium 6.8
CVE-2020-16139
A denial-of-service in Cisco Unified IP Conference Station 7937G 1-4-4-0...
High 7.5
CVE-2020-16138
A denial-of-service issue in Cisco Unified IP Conference Station 7937G...
High 7.5

Affected Vendor

Affected Software

ios
Vulnerable Versions:
12.0, 12.0da, 12.0db, 12.0dc, 12.0s, 12.0sc, 12.0sl, 12.0sp, 12.0st, 12.0sx, 12.0sy, 12.0sz, 12.0t, 12.0w, 12.0wc, 12.0xa, 12.0xb, 12.0xc, 12.0xd, 12.0xe, 12.0xg, 12.0xh, 12.0xi, 12.0xj, 12.0xk, 12.0xl, 12.0xm, 12.0xn, 12.0xq, 12.0xr, 12.0xt, 12.0xv, 12.1, 12.1aa, 12.1ax, 12.1ay, 12.1cx, 12.1da, 12.1db, 12.1dc, 12.1e, 12.1ea, 12.1eb, 12.1ec, 12.1eo, 12.1eu, 12.1ew, 12.1ex, 12.1ey, 12.1ez, 12.1ga, 12.1gb, 12.1t, 12.1xa, 12.1xb, 12.1xc, 12.1xd, 12.1xe, 12.1xf, 12.1xg, 12.1xh, 12.1xi, 12.1xj, 12.1xl, 12.1xm, 12.1xp, 12.1xq, 12.1xr, 12.1xs, 12.1xt, 12.1xu, 12.1xv, 12.1xw, 12.1xx, 12.1xy, 12.1xz, 12.1ya, 12.1yb, 12.1yc, 12.1yd, 12.1ye, 12.1yf, 12.1yh, 12.1yi, 12.2, 12.2b, 12.2bc, 12.2bw, 12.2bx, 12.2by, 12.2bz, 12.2cx, 12.2cy, 12.2cz, 12.2da, 12.2dd, 12.2dx, 12.2ew, 12.2ewa, 12.2ex, 12.2ez, 12.2fz, 12.2ira, 12.2irb, 12.2irc, 12.2ixa, 12.2ixb, 12.2ixc, 12.2ixd, 12.2ixe, 12.2ixf, 12.2ixg, 12.2ixh, 12.2ja, 12.2jk, 12.2mb, 12.2mc, 12.2s, 12.2sb, 12.2sbc, 12.2sca, 12.2scb, 12.2se, 12.2sea, 12.2seb, 12.2sec, 12.2sed, 12.2see, 12.2sef, 12.2seg, 12.2sg, 12.2sga, 12.2sm, 12.2so, 12.2sq, 12.2sra, 12.2srb, 12.2src, 12.2srd, 12.2ste, 12.2su, 12.2sv, 12.2sva, 12.2svd, 12.2sve, 12.2sx, 12.2sxa, 12.2sxb, 12.2sxd, 12.2sxe, 12.2sxf, 12.2sxh, 12.2sxi, 12.2sy, 12.2sz, 12.2t, 12.2tpc, 12.2xa, 12.2xb, 12.2xc, 12.2xd, 12.2xf, 12.2xg, 12.2xh, 12.2xi, 12.2xj, 12.2xk, 12.2xl, 12.2xm, 12.2xo, 12.2xq, 12.2xr, 12.2xs, 12.2xt, 12.2xu, 12.2xv, 12.2ya, 12.2yb, 12.2yc, 12.2yd, 12.2ye, 12.2yg, 12.2yj, 12.2yk, 12.2yl, 12.2ym, 12.2yn, 12.2yo, 12.2yq, 12.2yr, 12.2yt, 12.2yu, 12.2yv, 12.2yw, 12.2yx, 12.2yy, 12.2za, 12.2zb, 12.2zc, 12.2zd, 12.2zf, 12.2zg, 12.2zh, 12.2zj, 12.2zl, 12.2zp, 12.2zu, 12.2zx, 12.2zya, 12.3, 12.3b, 12.3bc, 12.3bw, 12.3ja, 12.3jea, 12.3jeb, 12.3jec, 12.3jk, 12.3jl, 12.3t, 12.3tpc, 12.3va, 12.3xa, 12.3xb, 12.3xc, 12.3xd, 12.3xf, 12.3xg, 12.3xi, 12.3xj, 12.3xk, 12.3xl, 12.3xq, 12.3xr, 12.3xu, 12.3xx, 12.3xy, 12.3xz, 12.3yd, 12.3yf, 12.3yg, 12.3yi, 12.3yj, 12.3yk, 12.3ym, 12.3yq, 12.3ys, 12.3yt, 12.3yu, 12.3yx, 12.3yz, 12.4, 12.4ja, 12.4jda, 12.4jdc, 12.4jdd, 12.4jk, 12.4jl, 12.4jma, 12.4jx, 12.4md, 12.4mda, 12.4sw, 12.4t, 12.4xa, 12.4xb, 12.4xc, 12.4xd, 12.4xe, 12.4xf, 12.4xg, 12.4xj, 12.4xk, 12.4xl, 12.4xm, 12.4xn, 12.4xp, 12.4xq, 12.4xr, 12.4xt, 12.4xv, 12.4xw, 12.4xy, 12.4xz, 12.4ya, 12.4yb, 12.4yd, 12.4ye

Timeline

Official Publish: September 28th, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.