CVE-2004-0244

Severity: medium (CVSS 4.7 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-11-23 · updated 2026-06-16
Weakness: CWE-20

Description

Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet.

Affected products

Cisco IOS: 12.1e, 12.2sy, 12.2za

References

http://secunia.com/advisories/10780
http://www.cisco.com/warp/public/707/cisco-sa-20040203-cat6k.shtml
http://www.kb.cert.org/vuls/id/810062
http://www.securityfocus.com/bid/9562
https://exchange.xforce.ibmcloud.com/vulnerabilities/15013
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5828
http://secunia.com/advisories/10780
http://www.cisco.com/warp/public/707/cisco-sa-20040203-cat6k.shtml
http://www.kb.cert.org/vuls/id/810062
http://www.securityfocus.com/bid/9562
https://exchange.xforce.ibmcloud.com/vulnerabilities/15013
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5828

Get alerted when CVE-2004-0244 or the next vulnerability affects your stack