CVE-2001-0288: High severity Cisco IOS vulnerability
Published May 3, 2001
·Updated
Cisco switches and routers running IOS 12.1 and earlier produce predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
Affected Software
1 affected component
Cisco IOS<=12.1
Remediation
Event History
May 3, 2001
CVE Published
04:00 AM
May 7, 2001
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-0288?
CVE-2001-0288 is considered a medium severity vulnerability due to its potential for TCP connection spoofing.
2
How do I fix CVE-2001-0288?
To mitigate CVE-2001-0288, upgrade to a Cisco IOS version later than 12.1 that generates random TCP Initial Sequence Numbers.
3
What systems are impacted by CVE-2001-0288?
CVE-2001-0288 affects Cisco switches and routers running IOS versions 12.1 and earlier.
4
Can CVE-2001-0288 be exploited remotely?
Yes, CVE-2001-0288 can be exploited remotely by attackers able to spoof TCP connections.
5
What is the nature of the vulnerability in CVE-2001-0288?
CVE-2001-0288 involves predictable TCP Initial Sequence Numbers, allowing for potential connection hijacking.