CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2009-20555.9/MEDIUMEPSS 3.3%CISA KEV
2009-08-19

Cisco IOS XR BGP UPDATE Attribute Validation Denial of Service Vulnerability (CVE-2009-2055)

[Affected Scope] Cisco IOS XR Software versions 3.4.0 through 3.8.1 running on routing platforms

[Impact] Remote attackers can trigger a denial of service (BGP session reset) by sending a crafted BGP UPDATE message with an invalid attribute, leading to routing instability

[Mitigation] Apply official Cisco software patches or implement infrastructure ACLs and BGP TTL Security to restrict unauthorized BGP peer connections

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse