CVE-2009-0628: Cisco IOS

High severity, CVSS 9.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block (TCB) leak.

Affected products

• Cisco Cisco IOS: version 12.3 only; version 12.4 only

Published 2009-03-27. Last modified 2026-06-16.