CVE-2009-0623: Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 760...

Security readout for executives and security teams

A remotely reachable SSH service on affected Cisco ACE devices can be abused to force a device reload. For organizations still using Cisco ACE for application delivery, this is an availability risk, not a confirmed data theft issue in the provided sources. Exposure is most likely where affected Cisco ACE devices still exist and their SSH service is reachable by untrusted networks or broad internal segments. Organizations without Cisco ACE deployments are not exposed based on the supplied sources. Prioritize if Cisco ACE still supports production application delivery or sits in critical traffic paths. A successful attack can disrupt availability by reloading the device, but evidence for active exploitation is not present in the supplied sources. Mitigation focus: Identify any Cisco ACE Module or ACE 4710 deployments.; Upgrade ACE Module software to A2(1.3) or later.; Upgrade ACE 4710 software to A3(2.1) or later..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.