CVE-2009-2867: Cisco IOS

High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Cisco IOS 12.2XNA, 12.2XNB, 12.2XNC, 12.2XND, 12.4T, 12.4XZ, and 12.4YA, when Zone-Based Policy Firewall SIP Inspection is enabled, allows remote attackers to cause a denial of service (device reload) via a crafted SIP transit packet, aka Bug ID CSCsr18691.

Affected products

• Cisco IOS: version 12.2xna only; version 12.2xnb only; version 12.2xnc only; version 12.2xnd only; version 12.4t only; version 12.4xz only; …

Published 2009-09-28. Last modified 2026-06-16.