CVE Feed

    Dashboard / CVE / CVE-2009-0638

    CVE-2009-0638

    The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages.

    Published:Aug 20, 2009
    Last Modified:Apr 23, 2026
    EPS:Aug 20, 2009
    EPSS Score:0.015
    CVSS Score:7.8

    Affected Products

    Vendor
    Cisco
    Product
    Catalyst 6500
    Vendor
    Cisco
    Product
    Catalyst 7600
    Vendor
    Cisco
    Product
    Firewall Services Module

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2017-12238 (CVSS 6.5) — A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Cataly…
    CVE-2016-6366 (CVSS 8.8) — Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, A…
    CVE-2012-5037 (CVSS 4.6) — The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to c…
    CVE-2014-2124 (CVSS 7.1) — Cisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst 6500 devices, al…
    CVE-2013-1100 (CVSS 5.4) — The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows rem…
    CVE-2012-4661 (CVSS 9) — Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 s…
    CVE-2012-4660 (CVSS 7.8) — The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Service…
    CVE-2012-4663 (CVSS 7.1) — The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Serv…
    CVE-2012-4662 (CVSS 7.1) — The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Serv…
    CVE-2012-4659 (CVSS 7.1) — The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 ser…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High