Actively exploited · Published Aug 19, 2009 · Assigned by cisco

CVE-2009-2055

Medium 5.9 Exploited

In plain English

A medium-severity improper input validation in IOS XR from Cisco. Attackers are actively exploiting it in the wild (listed by CISA on March 25, 2022). The chance it is exploited in the next 30 days is estimated at 3.3% (higher than 89% of all known vulnerabilities). Apply updates per vendor instructions.

Severity (CVSS 3.1)5.9Medium

Exploit odds (30 days)3.3%top 11.4% of all CVEs

Exploited in the wildYesCISA KEV since Mar 25, 2022

Attack toolingNoneno public tooling known

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Apr 15, 2022.

Official description

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References

[nanog] 20090817 RE: Anyone else seeing "(invalid or corrupt AS path) 3 bytes E01100" ? mailing-list, x_refsource_MLIST
1022739 vdb-entry, x_refsource_SECTRACK
20090818 Cisco IOS XR Software Border Gateway Protocol Vulnerability vendor-advisory, x_refsource_CISCO
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2009-2055 government-resource