CVE-2009-2055

Katalog CVE

CVSS 5.9 · Medium KEV · sudah dieksploitasi EPSS 3,3%

Kerentanan Improper Input Validation pada cisco ios xr. Skor CVSS 3.1 5.9 (Medium) menurut CISA ADP. Masuk katalog KEV CISA pada 25 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.

Rincian

Terbit di NVD

19 Agustus 2009

Terakhir diubah

16 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.9 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-20: Improper Input Validation

EPSS (30 hari)

3,3% peluang dieksploitasi; lebih tinggi dari 88,2% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

Masuk KEV

25 Maret 2022

Tenggat CISA

15 April 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml patch · advisory vendor
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-2055 pemerintah AS
• http://mailman.nanog.org/pipermail/nanog/2009-August/012719.html mailing list
• http://securitytracker.com/id?1022739 broken link