CVE-2002-2208

HIGH 7.8CVE-2002-2208 · Published 31/12/2002 · updated 16/06/2026

In short

CVE-2002-2208 is a HIGH (CVSS 7.8) vulnerability affecting extended interior gateway routing protocol (extended interior gateway routing protocol).
Chance of exploitation in the next 30 days (EPSS): 4.3%, higher than 91.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
extended interior gateway routing protocol extended_interior_gateway_routing_protocol	`= 1.2`	No fix yet

Description

Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.

References

lists.grok.org.uk/pipermail/full-disclosure/2005-December/040330.html · Exploit
marc.info
secunia.com/advisories/7766 · Vendor Advisory
securitytracker.com/id
cisco.com/en/US/tech/tk365/technologies_security_notice09186a008011c5e1.html · Patch
cisco.com/warp/public/707/eigrp_issue.pdf · Vendor Advisory
osvdb.org/18055
securityfocus.com/archive/1/304034 · Vendor Advisory
securityfocus.com/archive/1/304044 · Patch
securityfocus.com/archive/1/419898/100/0/threaded
securityfocus.com/bid/6443
exchange.xforce.ibmcloud.com/vulnerabilities/10903

More vulnerabilities in extended interior gateway routing protocol

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free