Vulnerabilities > Extended Interior Gateway Routing Protocol > Extended Interior Gateway Routing Protocol > 1.2

DATE CVE VULNERABILITY TITLE RISK
2005-12-21 CVE-2005-4437 Unspecified vulnerability in Extended Interior Gateway Routing Protocol Extended Interior Gateway Routing Protocol 1.2
MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
7.5
2005-12-21 CVE-2005-4436 Remote Denial Of Service vulnerability in Cisco EIGRP Protocol Unauthenticated Goodbye Packet
Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS after 12.3(2), 12.3(3)B, and 12.3(2)T and other products, allows remote attackers to cause a denial of service by sending a "spoofed neighbor announcement" with (1) mismatched k values or (2) "goodbye message" Type-Length-Value (TLV).
7.8
2002-12-31 CVE-2002-2208 Denial Of Service vulnerability in Cisco IOS EIGRP Announcement ARP
Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
7.8