CVE-2005-4436: Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS after 12.3(2), 12.3(3)B...

Security readout for executives and security teams

This CVE describes a denial-of-service weakness in EIGRP routing behavior. A malicious or spoofed routing neighbor message could disrupt affected routing devices, potentially causing network instability or outages. The source bundle does not provide CVSS scoring, confirmed exploitation, or a complete affected-product matrix. Exposure is most likely in environments running EIGRP on affected Cisco IOS trains or related products. Risk depends on whether untrusted systems can send EIGRP neighbor traffic to routing interfaces. The bundle does not identify all affected products or fixed versions. Treat as a network availability risk. It is not described as data theft or code execution, but routing disruption can affect many services at once. Prioritize validation where EIGRP supports critical connectivity. Mitigation focus: Check Cisco and product-vendor guidance for affected releases and fixed software.; Inventory routers and routing domains that run EIGRP.; Limit EIGRP neighbor formation to trusted routing links only..

Prepared

Jun 29, 2026, 15:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.