CVE-2009-0634

CVE-2009-0634 is a high-severity vulnerability in Cisco Cisco Ios with a CVSS 2.0 base score of 7.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

• Severity: High (CVSS 2.0 base score 7.1)
• EPSS exploit prediction: 3% (85th percentile)
• Actively exploited: Not listed in CISA KEV
• Affected product: Cisco Cisco Ios
• Published: 2009-03-27
• Last modified: 2026-06-16

Description

Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input queue wedge and interface outage) via an ICMP packet, aka Bug ID CSCso05337.

Frequently asked questions

What is CVE-2009-0634?

Multiple unspecified vulnerabilities in the home agent (HA) implementation in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco IOS 12.3 through 12.4 allow remote attackers to cause a denial of service (input queue wedge and interface outage) via an ICMP packet, aka Bug ID CSCso05337.

How severe is CVE-2009-0634?

CVE-2009-0634 has a CVSS 2.0 base score of 7.1, rated high severity.

Is CVE-2009-0634 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 3% (85th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2009-0634?

CVE-2009-0634 primarily affects Cisco Cisco Ios. In total, 67 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2009-0634?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2009-0634 published?

CVE-2009-0634 was published on 2009-03-27 and last updated on 2026-06-16.

References

• http://secunia.com/advisories/34438
• http://securitytracker.com/id?1021898
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a9042f.shtml
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml
• http://www.securityfocus.com/bid/34241
• http://www.vupen.com/english/advisories/2009/0851
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49424
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49585
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12043

Affected products (67)

• cpe:2.3:o:cisco:cisco_ios:12.3:*:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:b:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:bc:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:bw:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:eu:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:ja:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:jea:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:jeb:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:jec:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:jk:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:jl:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:jx:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:t:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:tpc:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:va:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xa:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xb:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xc:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xd:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xe:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xf:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xg:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xh:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xi:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xj:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xk:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xq:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xr:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xs:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xu:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xw:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:xy:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:ya:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:yd:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:yf:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:yg:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:yh:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:yi:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:yj:*:*:*:*:*:*
• cpe:2.3:o:cisco:cisco_ios:12.3:yk:*:*:*:*:*:*

More vulnerabilities in Cisco Cisco Ios

• CVE-2009-0628 — Critical (CVSS 9.0): Memory leak in the SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service…
• CVE-2008-1152 — High (CVSS 7.8): The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of…
• CVE-2009-0633 — High (CVSS 7.1): Multiple unspecified vulnerabilities in the (1) Mobile IP NAT Traversal feature and (2) Mobile IPv6 subsystem in Cisco…
• CVE-2008-1153 — High (CVSS 7.1): Cisco IOS 12.1, 12.2, 12.3, and 12.4, with IPv4 UDP services and the IPv6 protocol enabled, allows remote attackers to…
• CVE-2015-4204 — Medium (CVSS 6.8): Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000 devices allows remote…
• CVE-2008-1156 — Medium (CVSS 5.1): Unspecified vulnerability in the Multicast Virtual Private Network (MVPN) implementation in Cisco IOS 12.0, 12.2, 12.3,…

All CVEs affecting Cisco Cisco Ios →