{"id":"CVE-2009-0638","aliases":["EUVD-2009-0641","GHSA-jmpc-v965-868j"],"status":"published","title":"The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0...","description":"The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages.","severity":{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02853,"percentile":0.86815,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2009-08-20T22:00:00Z","modified":"2026-06-16T23:05:28Z","products":[{"vendor":"cisco","product":"firewall_services_module"}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080af0d1d.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36085","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52591","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://securitytracker.com/id?1022747","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://secunia.com/advisories/36373","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/2329","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0638"},{"url":"https://github.com/advisories/GHSA-jmpc-v965-868j"}],"sources":{"cve":[{"id":"CVE-2009-0638","description":"The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages.","status":"published","published":"2009-08-20T22:00:00Z","modified":"2024-08-07T04:40:05.123Z","updated_at":"2026-11-02T14:33:25.896677Z"}],"euvd":[{"id":"EUVD-2009-0641","description":"The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages.","status":"published","published":"2009-08-20T22:00:00Z","modified":"2024-08-07T04:40:05Z","updated_at":"2026-11-03T01:39:25.189813Z"}],"ghsa":[{"id":"GHSA-jmpc-v965-868j","title":"The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0...","description":"The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages.","status":"published","published":"2022-05-02T03:17:03Z","modified":"2023-01-31T05:06:51Z","updated_at":"2026-11-02T14:49:06.344022Z"}],"nvd":[{"id":"CVE-2009-0638","description":"The Cisco Firewall Services Module (FWSM) 2.x, 3.1 before 3.1(16), 3.2 before 3.2(13), and 4.0 before 4.0(6) for Cisco Catalyst 6500 switches and Cisco 7600 routers allows remote attackers to cause a denial of service (traffic-handling outage) via a series of malformed ICMP messages.","status":"published","published":"2009-08-21T11:02:41.64Z","modified":"2026-06-16T23:05:28.25Z","cvss":[{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:36.596719Z"}]}}