CVE-2009-2049: Cisco IOS 12.0(32)S12 through 12.0(32)S13 and 12.0(33)S3 through 12.0(33)S4, 12.0(32)SY8 through 12.0(32)SY...

Security readout for executives and security teams

This Cisco IOS and IOS XE issue can let a remote BGP peer crash and reload an affected router by sending a malformed routing update. Business impact is potential routing interruption, not data theft, and depends on running affected software with RFC4893 BGP 4-byte ASN routing enabled. Exposure is most likely on legacy Cisco routing infrastructure using affected IOS or IOS XE versions with BGP 4-byte autonomous system number support enabled and reachable BGP peering. Organizations not running those versions, or not using BGP/RFC4893, are not indicated as affected by the provided sources. Treat this as high priority for environments with legacy Cisco BGP routers, especially edge or backbone devices. The direct risk is network outage from device reload. No active exploitation is evidenced in the provided bundle, but the operational impact can be material where affected routing infrastructure remains in service. Mitigation focus: Review Cisco advisory guidance for fixed software and supported workarounds.; Inventory Cisco IOS and IOS XE versions against the affected release ranges.; Prioritize upgrades or compensating controls on internet-edge and core BGP routers..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.