9

CVE-2009-0628: cisco cisco_ios

CVSS: 9.0v2.0HighModified
Published 27-03-2009Last modified 07-08-2024
Open JSON

Vulnerability summary

CVE-2009-0628 is a high (CVSS 9.0) vulnerability in cisco cisco_ios. EPSS estimates a 1.93% chance of exploitation in the next 30 days, higher than 79.6% of scored vulnerabilities.

Overall risk
70/100
0100
High · default modelHow is this calculated?
CVSS score
9.0/10
010
High · v2.0 (NVD)
EPSS score
1.93%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 27-03-2009
    PublishedVulnerability first disclosed.
  2. 07-08-2024
    Last modifiedVulnerability information updated.

Description

Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (memory consumption and device crash) by disconnecting an SSL session in an abnormal manner, leading to a Transmission Control Block (TCB) leak.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

1.93%

Chance of exploitation in the next 30 days

Percentile

80%

Versus all other CVEs

30-day change

0.00 pp

From 1.93% on 18-09-2026

18-09-202618-10-2026
EPSS score
1.93%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco1 product
  • cisco_ios12.3 | 12.3:b | 12.3:bc | 12.3:bw | 12.3:eu | 12.3:ja | 12.3:jea | 12.3:jeb | 12.3:jec | 12.3:jk | 12.3:jl | 12.3:jx | 12.3:t | 12.3:tpc | 12.3:va | 12.3:xa | 12.3:xb | 12.3:xc | 12.3:xd | 12.3:xe | 12.3:xf | 12.3:xg | 12.3:xh | 12.3:xi | 12.3:xj | 12.3:xk | 12.3:xq | 12.3:xr | 12.3:xs | 12.3:xu | 12.3:xw | 12.3:xy | 12.3:ya | 12.3:yd | 12.3:yf | 12.3:yg | 12.3:yh | 12.3:yi | 12.3:yj | 12.3:yk | 12.3:ym | 12.3:yq | 12.3:ys | 12.3:yt | 12.3:yu | 12.3:yx | 12.3:yz | 12.4 | 12.4:ja | 12.4:jk | 12.4:jma | 12.4:jmb | 12.4:jmc | 12.4:jx | 12.4:md | 12.4:mr | 12.4:sw | 12.4:t | 12.4:xa | 12.4:xb | 12.4:xc | 12.4:xd | 12.4:xe | 12.4:xf | 12.4:xg | 12.4:xj | 12.4:xk

1 vendor · 1 product

References

8 links