CVE-2009-0626

The SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTPS packet.

• CWE-399

• http://secunia.com/advisories/34438Vendor Advisory
• http://securitytracker.com/id?1021896
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtmlVendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtmlVendor Advisory
• http://www.securityfocus.com/bid/34239
• http://www.vupen.com/english/advisories/2009/0851Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49425
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6919
• http://secunia.com/advisories/34438Vendor Advisory
• http://securitytracker.com/id?1021896
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90424.shtmlVendor Advisory
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtmlVendor Advisory
• http://www.securityfocus.com/bid/34239
• http://www.vupen.com/english/advisories/2009/0851Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49425
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6919

Published

Mar 27, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0620Cisco ACE Application Control Engine Module for Catalyst 650…
• CVE-2009-0621Cisco ACE 4710 Application Control Engine Appliance before A…
• CVE-2009-0622Unspecified vulnerability in Cisco ACE Application Control E…
• CVE-2009-0623Unspecified vulnerability in Cisco ACE Application Control E…
• CVE-2009-0624Unspecified vulnerability in the SNMPv2c implementation in C…
• CVE-2009-0625Unspecified vulnerability in Cisco ACE Application Control E…
• CVE-2009-0627Unspecified vulnerability in Cisco NX-OS before 4.0(1a)N2(1)…
• CVE-2009-0628Memory leak in the SSLVPN feature in Cisco IOS 12.3 through …
• CVE-2009-0629The (1) Airline Product Set (aka ALPS), (2) Serial Tunnel Co…
• CVE-2009-0630The (1) Cisco Unified Communications Manager Express; (2) SI…
• CVE-2009-0631Unspecified vulnerability in Cisco IOS 12.0 through 12.4, wh…
• CVE-2009-0632The IP Phone Personal Address Book (PAB) Synchronizer featur…