CVE-2009-0638: Cisco Firewall Services Module

High severity, CVSS 7.8. EPSS: 2.9% chance of exploitation in the next 30 days.

The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages.

Affected products

• Cisco Firewall Services Module: version 2.1_(0.208) only; version 2.2 only; version 2.2(1) only; version 2.3 only; version 2.3(1) only; version 3.1 only; …

Published 2009-08-21. Last modified 2026-06-16.