cyfenced.com →

[ CVE-2004-1464 · Published 31 Dec 2004 ]

Cisco IOS Denial-of-Service Vulnerability

Exploited · CISA KEV CVSS 5.9 EPSS 5%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2023-05-19

[ Description ]Official description

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.

CISA: Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 9 Jun 2023): Apply updates per vendor instructions.

[ References ]References