CVE-2009-2055

No fix known ExploitedEPSS 3%CVSS 5.9

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.

Published 2009-08-19 · In CISA KEV since 2022-03-25 · CVE record · OSV

Products: cisco ios_xr