medium5.9Known exploited
CVE-2004-1464
Cisco IOS Denial-of-Service Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2023-05-19. Federal due date: 2023-06-09.
Apply updates per vendor instructions.
Impact
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Ios | through 12.2\(15\)zj3 |
Weakness classification
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://secunia.com/advisories/12395/
- http://securitytracker.com/id?1011079
- http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml
- http://www.kb.cert.org/vuls/id/384230
- http://www.securityfocus.com/bid/11060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17131
- http://secunia.com/advisories/12395/
- http://securitytracker.com/id?1011079
- http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml
- http://www.kb.cert.org/vuls/id/384230
- http://www.securityfocus.com/bid/11060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17131
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-1464