Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Cisco IOS OSM can be crashed by crafted packets

CVE-2002-2239 · published 23 years ago
Summary

The Optical Service Module in Cisco Catalyst 6500 and 7600 switches running IOS versions 12.1(8)E through 12.1(13.4)E can be forced to stop responding if it receives a specially formed network packet. This results in a denial of service, meaning the device may hang and require a reboot. Apply the latest software updates from Cisco or disable the OSM feature until a fix is installed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco ios 12.1e
cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*
Original advisory text
The Cisco Optical Service Module (OSM) for the Catalyst 6500 and 7600 series running Cisco IOS 12.1(8)E through 12.1(13.4)E allows remote attackers to cause a denial of service (hang) via a malform...
The Cisco Optical Service Module (OSM) for the Catalyst 6500 and 7600 series running Cisco IOS 12.1(8)E through 12.1(13.4)E allows remote attackers to cause a denial of service (hang) via a malformed packet.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.8 High
Exploitation
2% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published31 Dec 2002
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2002-2239 · NVD
Track software like this
Free during beta