AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2009-4118

LOW · CVSS 2.1 EPSS 2.50% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2009-12-01 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

External Security References
packetstormsecurity.org ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2009-4118
Severity
LOW
CVSS
2.1
EPSS
2.50%
Windows Cisco

Original NVD Description

The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running.