Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability

MOYENNE 5.9EXPLOITED (CISA KEV)CVE-2009-2055 · Published 19/08/2009 · updated 16/06/2026

Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 25/03/2022. Patch affected systems as an emergency.

En bref

CVE-2009-2055 est une vulnérabilité MOYENNE (CVSS 5.9).
Exploitée activement : la CISA l'a ajoutée au catalogue KEV le 25/03/2022.
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.3%, plus élevée que 88.6% des vulnérabilités.
Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.

Package	Affected versions	Patched versions
IOS XR Cisco	Versions not published yet (product named by CISA KEV)

Description

Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session reset) via a BGP UPDATE message with an invalid attribute, as demonstrated in the wild on 17 August 2009.

References

mailman.nanog.org/pipermail/nanog/2009-August/012719.html · Mailing List
securitytracker.com/id · Broken Link
cisco.com/en/US/products/products_security_advisory09186a0080af150f.shtml · Patch
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2009-2055

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free