Is CVE-2009-0622 actively exploited?

CVE-2009-0622 has no public evidence of in-the-wild exploitation as of 2026-04-23.

What is the CVSS score for CVE-2009-0622?

CVE-2009-0622 has a CVSS score of 9 (UNKNOWN severity). Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C.

How do I patch CVE-2009-0622?

Patch guidance is available from cisco security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2009-0622.

CVE-2009-0622 - remediation guidance & executive summary

Q: Which products are affected by CVE-2009-0622?

3 products: cisco application control engine module, cisco application control engine module, cisco ace 4710.

Description

Unspecified vulnerability in Cisco ACE Application Control Engine Module for Catalyst 6500 Switches and 7600 Routers before A2(1.2) and Cisco ACE 4710 Application Control Engine Appliance before A1(8a) allows remote authenticated users to execute arbitrary operating-system commands through a command line interface (CLI).

CVSS Metrics

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Access Vector: network
Access Cmplx: low
Auth: single
Confidentiality: complete
Integrity: complete
Availability: complete
Weaknesses: NVD-CWE-Other

Metadata

Primary Vendor: CISCO
Published: 2/26/2009
Last Modified: 4/23/2026
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

cisco : application_control_engine_modulecisco : application_control_engine_modulecisco : ace_4710

Remediation Guidance

Executive Summary

View on NIST NVD