CVE-2002-2208
Published Dec 31, 2002
Last updated 6 years ago
Overview
- Description
- Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 7.8
- Impact score
- 6.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:extended_interior_gateway_routing_protocol:extended_interior_gateway_routing_protocol:1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77E7830C-3505-41C5-B073-D2F73261CE17"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios:11.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33CCFFC6-9D26-4C39-AF76-0B8FCDE743CF"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F86F790-6247-42F2-9487-3D60A2842F52"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F2F9EC5-EDA2-4C99-BBF1-2F2C92AACE95"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4BC49F2-3DCB-45F0-9030-13F6415EE178"
}
],
"operator": "OR"
}
]
}
]