CVE-2004-1464 Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
MediumCVSS 5.9
EPSS 4.8%
CISA KEV
added 2023-05-19 · due 2023-06-09
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
CISA Known Exploited Vulnerability
- Date added
- 2023-05-19
- Due date (FCEB)
- 2023-06-09
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios | <= 12.2\(15\)zj3 | No fix listed |
References
- 12395 broken-link third-party-advisory vendor-advisory
- 1011079 broken-link third-party-advisory vdb-entry
- 20040827 Cisco Telnet Denial of Service Vulnerability not-applicable vendor-advisory
- VU#384230 patch third-party-advisory us-government-resource
- 11060 broken-link third-party-advisory vdb-entry
- cisco-ios-telnet-dos(17131) third-party-advisory vdb-entry
- www.cisa.gov government-resource us-government-resource