CVE-2009-2871: Cisco IOS

High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in Cisco IOS 12.2 and 12.4, when SSLVPN sessions, SSH sessions, or IKE encrypted nonces are enabled, allows remote attackers to cause a denial of service (device reload) via a crafted encrypted packet, aka Bug ID CSCsq24002.

Affected products

• Cisco IOS: version 12.2xna only; version 12.2xnb only; version 12.2xnc only; version 12.2xnd only; version 12.4md only; version 12.4mr only; …

Published 2009-09-28. Last modified 2026-06-16.