All vulnerabilities
CVE-2004-1464KEV
Cisco IOS Denial-of-Service Vulnerability
- Severity
- Medium5.9CVSS 3.1, Medium
- EPSS
- 5%
- Published
- 13 Feb 2005
- Updated
- 16 Jun 2026
Description
Title, description and vendor guidance are quoted from the source records.
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
Weakness: CWE-400
Known exploited
Added to CISA KEV on 19 May 2023
Federal remediation due date: 9 Jun 2023
Required action: Apply updates per vendor instructions.
Exploit prediction
5% probability of exploitation in the next 30 days (percentile 92%).
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Patcharo shows this vulnerability for information but does not match versions for this product yet.
- n/a n/a · n/a
References
Provenance
Every fact on this page comes from the sources below. Nothing is written by an AI.
- CVE Program record
- CVE Program record · 27 Sept 2026, 23:46 UTC · Parser patcharo-cve5/1.1.0
- CISA Known Exploited Vulnerabilities
- CISA Known Exploited Vulnerabilities · 27 Sept 2026, 23:42 UTC · Parser patcharo-kev/1.0.0
- NVD
- NVD · 27 Sept 2026, 23:44 UTC · Parser patcharo-nvd/1.0.0
- FIRST EPSS
- FIRST EPSS · 27 Sept 2026, 23:46 UTC · Parser patcharo-epss/1.0.0
Last verified: 28 Sept 2026, 02:31 UTC