CVE-2002-2316: Medium severity Cisco CatOS vulnerability
Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2316?
CVE-2002-2316 is considered a moderate vulnerability due to potential exposure of sensitive network information.
How do I fix CVE-2002-2316?
To fix CVE-2002-2316, upgrade to a more secure version of Cisco CatOS that addresses this MAC address learning issue.
Which Cisco CatOS versions are affected by CVE-2002-2316?
CVE-2002-2316 affects Cisco CatOS versions 5.5.5, 6.3.5, and 7.1.2.
What issue does CVE-2002-2316 exploit in Cisco Catalyst switches?
CVE-2002-2316 exploits the failure of Cisco Catalyst switches to learn MAC addresses from a single initial packet, causing unicast traffic to be broadcast.
Can CVE-2002-2316 allow remote attackers to access data?
Yes, CVE-2002-2316 can allow remote attackers to sniff network traffic and potentially capture sensitive information.