CVE-2002-1768: Medium severity Cisco IOS vulnerability

Published Dec 31, 2002

Updated

Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service (CPU consumption) via randomly sized UDP packets to the Hot Standby Routing Protocol (HSRP) port 1985.

Affected Software

5 affected components

Cisco IOS=11.1

Cisco IOS=11.2

Cisco IOS=12.0

Cisco IOS=12.1

Cisco IOS=12.2

Event History

Dec 31, 2002

CVE Published

05:00 AM

Jun 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1768?

CVE-2002-1768 has a medium severity rating as it can lead to a denial of service by consuming CPU resources on affected systems.

How do I fix CVE-2002-1768?

To fix CVE-2002-1768, ensure that HSRP support is enabled on your Cisco IOS device or upgrade to a version that mitigates this vulnerability.

What products are affected by CVE-2002-1768?

CVE-2002-1768 affects Cisco IOS versions 11.1 through 12.2 when HSRP support is not enabled.

Can CVE-2002-1768 be exploited remotely?

Yes, CVE-2002-1768 can be exploited remotely by sending specially crafted UDP packets to the HSRP port.

What type of attack is associated with CVE-2002-1768?

CVE-2002-1768 is associated with a denial of service attack that targets Cisco IOS devices.