First published: Tue Dec 31 2002(Updated: )
The design of the Hot Standby Routing Protocol (HSRP), as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service (CPU consumption) via a router with the same IP address as the interface on which HSRP is running, which causes a loop.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS | =12.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-2053 has a high severity rating due to its potential to cause denial of service by consuming CPU resources.
To fix CVE-2002-2053, ensure that the router does not have the same IP address as the HSRP interface and update to a secure version of Cisco IOS.
CVE-2002-2053 primarily affects Cisco IOS version 12.1 when using the Hot Standby Routing Protocol.
CVE-2002-2053 is exploited through a denial of service attack that targets CPU consumption on affected routers.
A possible workaround for CVE-2002-2053 is to configure network devices to avoid IP address conflicts with the HSRP interface.