CVE-2009-2055mediumunder attackCWE-20

CVE-2009-2055

Published · Updated

Follow this CVE+ Monitor Cisco IOS XR

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

43Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Attendcvss 5.9epss 3.3%
from disclosure to weapon
Published on NVDAug 19
CISA KEV+4601d
Action required by CISAfederal deadline: 2022-04-15

Apply updates per vendor instructions.

In short

Cisco IOS XR is vulnerable to a denial of service attack when it receives a specially crafted BGP UPDATE message with an invalid attribute. An attacker can remotely reset user sessions without needing special access.

Technical detail

The vulnerability exists in Cisco IOS XR versions 3.4.0 through 3.8.1 in the BGP protocol handler, where insufficient validation (CWE-20) of UPDATE message attributes allows remote attackers to trigger a session reset. Attack vector is network-based via BGP, with no authentication required; impact is session termination and temporary unavailability.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
n/a · n/a