CVE-2009-0637
Summary
| CVE | CVE-2009-0637 |
|---|---|
| State | PUBLISHED |
| Assigner | cisco |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-03-27 16:30:02 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | The SCP server in Cisco IOS 12.2 through 12.4, when Role-Based CLI Access is enabled, does not enforce the CLI view configuration for file transfers, which allows remote authenticated users with an attached CLI view to (1) read or (2) overwrite arbitrary files via an SCP command. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
HighAuthentication
SingleConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:H/Au:S/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cisco | Ios | 12.2 | All | All | All |
| Operating System | Cisco | Ios | 12.2b | All | All | All |
| Operating System | Cisco | Ios | 12.2bc | All | All | All |
| Operating System | Cisco | Ios | 12.2bw | All | All | All |
| Operating System | Cisco | Ios | 12.2bx | All | All | All |
| Operating System | Cisco | Ios | 12.2by | All | All | All |
| Operating System | Cisco | Ios | 12.2bz | All | All | All |
| Operating System | Cisco | Ios | 12.2ca | All | All | All |
| Operating System | Cisco | Ios | 12.2cx | All | All | All |
| Operating System | Cisco | Ios | 12.2cy | All | All | All |
| Operating System | Cisco | Ios | 12.2cz | All | All | All |
| Operating System | Cisco | Ios | 12.2da | All | All | All |
| Operating System | Cisco | Ios | 12.2dd | All | All | All |
| Operating System | Cisco | Ios | 12.2dx | All | All | All |
| Operating System | Cisco | Ios | 12.2ew | All | All | All |
| Operating System | Cisco | Ios | 12.2ewa | All | All | All |
| Operating System | Cisco | Ios | 12.2ex | All | All | All |
| Operating System | Cisco | Ios | 12.2ey | All | All | All |
| Operating System | Cisco | Ios | 12.2ez | All | All | All |
| Operating System | Cisco | Ios | 12.2fx | All | All | All |
| Operating System | Cisco | Ios | 12.2fy | All | All | All |
| Operating System | Cisco | Ios | 12.2fz | All | All | All |
| Operating System | Cisco | Ios | 12.2irb | All | All | All |
| Operating System | Cisco | Ios | 12.2ixa | All | All | All |
| Operating System | Cisco | Ios | 12.2ixb | All | All | All |
| Operating System | Cisco | Ios | 12.2ixc | All | All | All |
| Operating System | Cisco | Ios | 12.2ixd | All | All | All |
| Operating System | Cisco | Ios | 12.2ixe | All | All | All |
| Operating System | Cisco | Ios | 12.2ixf | All | All | All |
| Operating System | Cisco | Ios | 12.2ixg | All | All | All |
| Operating System | Cisco | Ios | 12.2ja | All | All | All |
| Operating System | Cisco | Ios | 12.2jk | All | All | All |
| Operating System | Cisco | Ios | 12.2l | All | All | All |
| Operating System | Cisco | Ios | 12.2mb | All | All | All |
| Operating System | Cisco | Ios | 12.2mc | All | All | All |
| Operating System | Cisco | Ios | 12.2rc | All | All | All |
| Operating System | Cisco | Ios | 12.2s | All | All | All |
| Operating System | Cisco | Ios | 12.2sb | All | All | All |
| Operating System | Cisco | Ios | 12.2sbc | All | All | All |
| Operating System | Cisco | Ios | 12.2sca | All | All | All |
| Operating System | Cisco | Ios | 12.2sga | All | All | All |
| Operating System | Cisco | Ios | 12.2sm | All | All | All |
| Operating System | Cisco | Ios | 12.2so | All | All | All |
| Operating System | Cisco | Ios | 12.2sr | All | All | All |
| Operating System | Cisco | Ios | 12.2sra | All | All | All |
| Operating System | Cisco | Ios | 12.2srb | All | All | All |
| Operating System | Cisco | Ios | 12.2src | All | All | All |
| Operating System | Cisco | Ios | 12.2su | All | All | All |
| Operating System | Cisco | Ios | 12.2sv | All | All | All |
| Operating System | Cisco | Ios | 12.2sva | All | All | All |
| Operating System | Cisco | Ios | 12.2svc | All | All | All |
| Operating System | Cisco | Ios | 12.2svd | All | All | All |
| Operating System | Cisco | Ios | 12.2sve | All | All | All |
| Operating System | Cisco | Ios | 12.2sw | All | All | All |
| Operating System | Cisco | Ios | 12.2sx | All | All | All |
| Operating System | Cisco | Ios | 12.2sxa | All | All | All |
| Operating System | Cisco | Ios | 12.2sxb | All | All | All |
| Operating System | Cisco | Ios | 12.2sxd | All | All | All |
| Operating System | Cisco | Ios | 12.2sxe | All | All | All |
| Operating System | Cisco | Ios | 12.2sxf | All | All | All |
| Operating System | Cisco | Ios | 12.2sy | All | All | All |
| Operating System | Cisco | Ios | 12.2sz | All | All | All |
| Operating System | Cisco | Ios | 12.2t | All | All | All |
| Operating System | Cisco | Ios | 12.2tpc | All | All | All |
| Operating System | Cisco | Ios | 12.2xa | All | All | All |
| Operating System | Cisco | Ios | 12.2xb | All | All | All |
| Operating System | Cisco | Ios | 12.2xc | All | All | All |
| Operating System | Cisco | Ios | 12.2xd | All | All | All |
| Operating System | Cisco | Ios | 12.2xe | All | All | All |
| Operating System | Cisco | Ios | 12.2xf | All | All | All |
| Operating System | Cisco | Ios | 12.2xg | All | All | All |
| Operating System | Cisco | Ios | 12.2xh | All | All | All |
| Operating System | Cisco | Ios | 12.2xi | All | All | All |
| Operating System | Cisco | Ios | 12.2xj | All | All | All |
| Operating System | Cisco | Ios | 12.2xk | All | All | All |
| Operating System | Cisco | Ios | 12.2xl | All | All | All |
| Operating System | Cisco | Ios | 12.2xm | All | All | All |
| Operating System | Cisco | Ios | 12.2xn | All | All | All |
| Operating System | Cisco | Ios | 12.2xo | All | All | All |
| Operating System | Cisco | Ios | 12.2xq | All | All | All |
| Operating System | Cisco | Ios | 12.2xr | All | All | All |
| Operating System | Cisco | Ios | 12.2xs | All | All | All |
| Operating System | Cisco | Ios | 12.2xt | All | All | All |
| Operating System | Cisco | Ios | 12.2xu | All | All | All |
| Operating System | Cisco | Ios | 12.2xv | All | All | All |
| Operating System | Cisco | Ios | 12.2xw | All | All | All |
| Operating System | Cisco | Ios | 12.2ya | All | All | All |
| Operating System | Cisco | Ios | 12.2yb | All | All | All |
| Operating System | Cisco | Ios | 12.2yc | All | All | All |
| Operating System | Cisco | Ios | 12.2yd | All | All | All |
| Operating System | Cisco | Ios | 12.2ye | All | All | All |
| Operating System | Cisco | Ios | 12.2yf | All | All | All |
| Operating System | Cisco | Ios | 12.2yg | All | All | All |
| Operating System | Cisco | Ios | 12.2yh | All | All | All |
| Operating System | Cisco | Ios | 12.2yj | All | All | All |
| Operating System | Cisco | Ios | 12.2yk | All | All | All |
| Operating System | Cisco | Ios | 12.2yl | All | All | All |
| Operating System | Cisco | Ios | 12.2ym | All | All | All |
| Operating System | Cisco | Ios | 12.2yn | All | All | All |
| Operating System | Cisco | Ios | 12.2yo | All | All | All |
| Operating System | Cisco | Ios | 12.2yp | All | All | All |
| Operating System | Cisco | Ios | 12.2yq | All | All | All |
| Operating System | Cisco | Ios | 12.2yr | All | All | All |
| Operating System | Cisco | Ios | 12.2ys | All | All | All |
| Operating System | Cisco | Ios | 12.2yt | All | All | All |
| Operating System | Cisco | Ios | 12.2yu | All | All | All |
| Operating System | Cisco | Ios | 12.2yv | All | All | All |
| Operating System | Cisco | Ios | 12.2yw | All | All | All |
| Operating System | Cisco | Ios | 12.2yx | All | All | All |
| Operating System | Cisco | Ios | 12.2yy | All | All | All |
| Operating System | Cisco | Ios | 12.2yz | All | All | All |
| Operating System | Cisco | Ios | 12.2za | All | All | All |
| Operating System | Cisco | Ios | 12.2zb | All | All | All |
| Operating System | Cisco | Ios | 12.2zc | All | All | All |
| Operating System | Cisco | Ios | 12.2zd | All | All | All |
| Operating System | Cisco | Ios | 12.2ze | All | All | All |
| Operating System | Cisco | Ios | 12.2zf | All | All | All |
| Operating System | Cisco | Ios | 12.2zg | All | All | All |
| Operating System | Cisco | Ios | 12.2zh | All | All | All |
| Operating System | Cisco | Ios | 12.2zj | All | All | All |
| Operating System | Cisco | Ios | 12.2zl | All | All | All |
| Operating System | Cisco | Ios | 12.2zp | All | All | All |
| Operating System | Cisco | Ios | 12.2zu | All | All | All |
| Operating System | Cisco | Ios | 12.2zx | All | All | All |
| Operating System | Cisco | Ios | 12.2zy | All | All | All |
| Operating System | Cisco | Ios | 12.2zya | All | All | All |
| Operating System | Cisco | Ios | 12.4 | All | All | All |
| Operating System | Cisco | Ios | 12.4ja | All | All | All |
| Operating System | Cisco | Ios | 12.4jda | All | All | All |
| Operating System | Cisco | Ios | 12.4jk | All | All | All |
| Operating System | Cisco | Ios | 12.4jl | All | All | All |
| Operating System | Cisco | Ios | 12.4jma | All | All | All |
| Operating System | Cisco | Ios | 12.4jmb | All | All | All |
| Operating System | Cisco | Ios | 12.4jx | All | All | All |
| Operating System | Cisco | Ios | 12.4md | All | All | All |
| Operating System | Cisco | Ios | 12.4mr | All | All | All |
| Operating System | Cisco | Ios | 12.4s | All | All | All |
| Operating System | Cisco | Ios | 12.4sw | All | All | All |
| Operating System | Cisco | Ios | 12.4t | All | All | All |
| Operating System | Cisco | Ios | 12.4xa | All | All | All |
| Operating System | Cisco | Ios | 12.4xb | All | All | All |
| Operating System | Cisco | Ios | 12.4xc | All | All | All |
| Operating System | Cisco | Ios | 12.4xd | All | All | All |
| Operating System | Cisco | Ios | 12.4xe | All | All | All |
| Operating System | Cisco | Ios | 12.4xf | All | All | All |
| Operating System | Cisco | Ios | 12.4xg | All | All | All |
| Operating System | Cisco | Ios | 12.4xj | All | All | All |
| Operating System | Cisco | Ios | 12.4xk | All | All | All |
| Operating System | Cisco | Ios | 12.4xl | All | All | All |
| Operating System | Cisco | Ios | 12.4xm | All | All | All |
| Operating System | Cisco | Ios | 12.4xn | All | All | All |
| Operating System | Cisco | Ios | 12.4xp | All | All | All |
| Operating System | Cisco | Ios | 12.4xt | All | All | All |
| Operating System | Cisco | Ios | 12.4xv | All | All | All |
| Operating System | Cisco | Ios | 12.4xw | All | All | All |
| Operating System | Cisco | Ios | 12.4xy | All | All | All |
| Operating System | Cisco | Ios | 12.4\(1b\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(1c\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(1\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(23\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(2\)mr | All | All | All |
| Operating System | Cisco | Ios | 12.4\(2\)mr1 | All | All | All |
| Operating System | Cisco | Ios | 12.4\(2\)t | All | All | All |
| Operating System | Cisco | Ios | 12.4\(2\)t1 | All | All | All |
| Operating System | Cisco | Ios | 12.4\(2\)t2 | All | All | All |
| Operating System | Cisco | Ios | 12.4\(2\)t3 | All | All | All |
| Operating System | Cisco | Ios | 12.4\(2\)t4 | All | All | All |
| Operating System | Cisco | Ios | 12.4\(2\)xa | All | All | All |
| Operating System | Cisco | Ios | 12.4\(2\)xb | All | All | All |
| Operating System | Cisco | Ios | 12.4\(2\)xb2 | All | All | All |
| Operating System | Cisco | Ios | 12.4\(3a\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(3b\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(3d\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(3\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(3\)t2 | All | All | All |
| Operating System | Cisco | Ios | 12.4\(4\)mr | All | All | All |
| Operating System | Cisco | Ios | 12.4\(4\)t | All | All | All |
| Operating System | Cisco | Ios | 12.4\(4\)t2 | All | All | All |
| Operating System | Cisco | Ios | 12.4\(5b\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(5\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(6\)t | All | All | All |
| Operating System | Cisco | Ios | 12.4\(6\)t1 | All | All | All |
| Operating System | Cisco | Ios | 12.4\(7a\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(7\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(8\) | All | All | All |
| Operating System | Cisco | Ios | 12.4\(9\)t | All | All | All |
| Operating System | Cisco | Ios Xr | 12.4 | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco IOS Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | Vendor Advisory |
| IBM X-Force Exchange | af854a3a-2127-422b-91ae-364da2661108 | exchange.xforce.ibmcloud.com | Third Party Advisory, VDB Entry |
| Cisco IOS Secure Copy Remote Privilege Escalation Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Cisco Security Advisory: Cisco IOS Software Secure Copy Privilege Escalation Vulnerability - Cisco Systems | af854a3a-2127-422b-91ae-364da2661108 | www.cisco.com | Vendor Advisory |
| Cisco IOS Secure Copy Server Bug Lets Remote Authenticated Users Gain Elevated Privileges - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | securitytracker.com | Third Party Advisory, VDB Entry |
| Webmail : Solution de messagerie professionnelle - OVHcloud- OVH | af854a3a-2127-422b-91ae-364da2661108 | www.vupen.com | Not Applicable |
| Summary of Cisco IOS Software Bundled Advisories, March 25, 2009 - Cisco Systems | af854a3a-2127-422b-91ae-364da2661108 | www.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.