CVE-2002-2208: Cisco IOS

High severity, CVSS 7.8. EPSS: 4.3% chance of exploitation in the next 30 days.

Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.

Affected products

• Cisco IOS: version 11.3 only; version 12.0 only; version 12.1 only; version 12.2 only
• Extended Interior Gateway Routing Protocol Extended Interior Gateway Routing Protocol: version 1.2 only

Published 2002-12-31. Last modified 2026-06-16.