CVE-2004-1464
medium · 5.9Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2023-05-19Remediation due 2023-06-09
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
5.9
CVSS
4.8%
EPSS (exploit prob.)
92nd
EPSS percentile
2004-12-31
Published
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | ios | <= 12.2\(15\)zj3 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/12395/
- http://securitytracker.com/id?1011079
- http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml
- http://www.kb.cert.org/vuls/id/384230
- http://www.securityfocus.com/bid/11060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17131
- http://secunia.com/advisories/12395/
- http://securitytracker.com/id?1011079
- http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml
- http://www.kb.cert.org/vuls/id/384230
- http://www.securityfocus.com/bid/11060
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17131
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-1464
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2004-1464