© 2026 vulntracker.io

CVE-2009-0637

N/A

Published: March 27, 2009 at 04:00 PM UTC

Updated: June 16, 2026 at 11:05 PM UTC

2 products affected across 1 vendorIOSIOS Xr

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 3%

Description

The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to (1) read or (2) overwrite arbitrary files via an SCP command.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

IOS · Cisconpm

95%

12.2 12.2b 12.2bc 12.2bw 12.2bx 12.2by 12.2bz 12.2ca 12.2cx 12.2cy 12.2cz 12.2da 12.2dd 12.2dx 12.2ew 12.2ewa 12.2ex 12.2ey 12.2ez 12.2fx 12.2fy 12.2fz 12.2irb 12.2ixa 12.2ixb 12.2ixc 12.2ixd 12.2ixe 12.2ixf 12.2ixg 12.2ja 12.2jk 12.2l 12.2mb 12.2mc 12.2rc 12.2s 12.2sb 12.2sbc 12.2sca 12.2sga 12.2sm 12.2so 12.2sr 12.2sra 12.2srb 12.2src 12.2su 12.2sv 12.2sva 12.2svc 12.2svd 12.2sve 12.2sw 12.2sx 12.2sxa 12.2sxb 12.2sxd 12.2sxe 12.2sxf 12.2sy 12.2sz 12.2t 12.2tpc 12.2xa 12.2xb 12.2xc 12.2xd 12.2xe 12.2xf 12.2xg 12.2xh 12.2xi 12.2xj 12.2xk 12.2xl 12.2xm 12.2xn 12.2xo 12.2xq 12.2xr 12.2xs 12.2xt 12.2xu 12.2xv 12.2xw 12.2ya 12.2yb 12.2yc 12.2yd 12.2ye 12.2yf 12.2yg 12.2yh 12.2yj 12.2yk 12.2yl 12.2ym 12.2yn 12.2yo 12.2yp 12.2yq 12.2yr 12.2ys 12.2yt 12.2yu 12.2yv 12.2yw 12.2yx 12.2yy 12.2yz 12.2za 12.2zb 12.2zc 12.2zd 12.2ze 12.2zf 12.2zg 12.2zh 12.2zj 12.2zl 12.2zp 12.2zu 12.2zx 12.2zy 12.2zya 12.4 12.4(1)12.4(1b)12.4(1c)12.4(2)mr 12.4(2)mr1 12.4(2)t 12.4(2)t1 12.4(2)t2 12.4(2)t3 12.4(2)t4 12.4(2)xa 12.4(2)xb 12.4(2)xb2 12.4(23)12.4(3)12.4(3)t2 12.4(3a)12.4(3b)12.4(3d)12.4(4)mr 12.4(4)t 12.4(4)t2 12.4(5)12.4(5b)12.4(6)t 12.4(6)t1 12.4(7)12.4(7a)12.4(8)12.4(9)t 12.4ja 12.4jda 12.4jk 12.4jl 12.4jma 12.4jmb 12.4jx 12.4md 12.4mr 12.4s 12.4sw 12.4t 12.4xa 12.4xb 12.4xc 12.4xd 12.4xe 12.4xf 12.4xg 12.4xj 12.4xk 12.4xl 12.4xm 12.4xn 12.4xp 12.4xt 12.4xv 12.4xw 12.4xy

IOS Xr · Cisco

95%

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (7)

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/34438

VDB Entryx_refsource_SECTRACKThird Party Advisory

Source: [email protected]

http://securitytracker.com/id?1021899

x_refsource_CONFIRMVendor Advisory

Source: [email protected]

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a90469.shtml

Vendor Advisoryx_refsource_CISCO

Source: [email protected]

http://www.cisco.com/en/US/products/products_security_advisory09186a0080a904c8.shtml

VDB Entryx_refsource_BIDThird Party Advisory

Source: [email protected]

http://www.securityfocus.com/bid/34247

VDB Entryx_refsource_VUPENNot Applicable

Source: [email protected]

http://www.vupen.com/english/advisories/2009/0851

VDB Entryx_refsource_XFThird Party Advisory

Source: [email protected]

https://exchange.xforce.ibmcloud.com/vulnerabilities/49423

CVSS

7.1HIGH[email protected]

Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-264

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card