CVE-2009-0638

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-08-21 · updated 2026-06-16

Description

The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages.

Affected products

Cisco Firewall Services Module: 2.1_(0.208), 2.2, 2.2(1), 2.3, 2.3(1), 3.1 (+8)

References

http://secunia.com/advisories/36373
http://securitytracker.com/id?1022747
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af0d1d.shtml
http://www.securityfocus.com/bid/36085
http://www.vupen.com/english/advisories/2009/2329
https://exchange.xforce.ibmcloud.com/vulnerabilities/52591
http://secunia.com/advisories/36373
http://securitytracker.com/id?1022747
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af0d1d.shtml
http://www.securityfocus.com/bid/36085
http://www.vupen.com/english/advisories/2009/2329
https://exchange.xforce.ibmcloud.com/vulnerabilities/52591

Get alerted when CVE-2009-0638 or the next vulnerability affects your stack