CVEvulnerability

CVE-2004-1464

5.9 MEDIUM Known exploited Published 2004-12-31 Modified 2026-06-16 Official page ↗

CISA Known Exploited Vulnerability

Cisco IOS Denial-of-Service Vulnerability — Cisco IOS

Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device.

Added to KEV
2023-05-19
Remediation due
2023-06-09
Ransomware use
Unknown
Required action
Apply updates per vendor instructions.
Notes
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040827-telnet; https://nvd.nist.gov/vuln/detail/CVE-2004-1464
Status
Analyzed
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-400

Description

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.

Affected configurations

• cisco ios (<= 12.2\(15\)zj3)

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References