CVE-2009-2870: Cisco IOS

High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Cisco IOS 12.2 through 12.4, when the Cisco Unified Border Element feature is enabled, allows remote attackers to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID CSCsx25880.

Affected products

• Cisco IOS: version 12.3yk only; version 12.3ys only; version 12.3yt only; version 12.4gc only; version 12.4mr only; version 12.4t only; …

Published 2009-09-28. Last modified 2026-06-16.