CVE-2004-1464
Medium 5.9 Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Cisco IOS Denial-of-Service Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
Metrics
- CVSS 3.1
-
5.9 (MEDIUM)
Score source: NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS — exploit probability
- 5% (percentile: 92) as of 1 November 2026
- CWE
- CWE-400
Affected products
cisco: ios
References
- http://secunia.com/advisories/12395/ Broken LinkVendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml Not ApplicableVendor Advisory
- http://secunia.com/advisories/12395/ Broken LinkVendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml Not ApplicableVendor Advisory
- http://www.kb.cert.org/vuls/id/384230 PatchThird Party AdvisoryUS Government Resource
- http://www.kb.cert.org/vuls/id/384230 PatchThird Party AdvisoryUS Government Resource
- http://securitytracker.com/id?1011079 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/11060 Broken LinkThird Party AdvisoryVDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17131 Third Party AdvisoryVDB Entry
- http://securitytracker.com/id?1011079 Broken LinkThird Party AdvisoryVDB Entry