CVE-2004-1464: Cisco IOS Denial-of-Service Vulnerability

Severity: medium (CVSS 5.9 v3.1)
Exploited in the wild: yes — in CISA KEV since 2023-05-19
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16
Weakness: CWE-400

Description

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.

Affected products

Cisco IOS: through 12.2\(15\)zj3

References

http://secunia.com/advisories/12395/
http://securitytracker.com/id?1011079
http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml
http://www.kb.cert.org/vuls/id/384230
http://www.securityfocus.com/bid/11060
https://exchange.xforce.ibmcloud.com/vulnerabilities/17131
http://secunia.com/advisories/12395/
http://securitytracker.com/id?1011079
http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml
http://www.kb.cert.org/vuls/id/384230
http://www.securityfocus.com/bid/11060
https://exchange.xforce.ibmcloud.com/vulnerabilities/17131

Get alerted when CVE-2004-1464 or the next vulnerability affects your stack