What’s Vulnerable › Vulnerabilities

CVE-2002-1024

• Severity: high (CVSS 7.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-10-04 · updated 2026-06-16
• Weakness: CWE-399

Description

Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144).

Affected products

• Cisco Catos: 5.3(1)csx, 5.3(1a)csx, 5.3(2)csx, 5.3(3)csx, 5.3(4)csx, 5.3(5)csx (+26)
• Cisco Css11000 Content Services Switch: all versions
• Cisco IOS: 12.0s, 12.0sp, 12.0st, 12.0xb, 12.0xm, 12.0xv (+58)
• Cisco Pix Firewall Software: 5.2, 5.3, 6.0, 6.1, 6.2

References

• http://www.cisco.com/warp/public/707/SSH-scanning.shtml
• http://www.iss.net/security_center/static/9437.php
• http://www.kb.cert.org/vuls/id/290140
• http://www.securityfocus.com/bid/5114
• http://www.cisco.com/warp/public/707/SSH-scanning.shtml
• http://www.iss.net/security_center/static/9437.php
• http://www.kb.cert.org/vuls/id/290140
• http://www.securityfocus.com/bid/5114

Get alerted when CVE-2002-1024 or the next vulnerability affects your stack