CVE-2004-0714
First published: Wed Jul 21 2004(Updated: )
Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports (UDP 162 and a randomly chosen UDP port), which allows remote attackers to cause a denial of service (device reload and memory corruption).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS | =12.0\(27\)s | |
| Cisco IOS | =12.3\(4\)xd1 | |
| Cisco IOS | =12.1e | |
| Cisco IOS | =12.3\(5a\) | |
| Cisco IOS | =12.3xg | |
| Cisco IOS | =12.0sv | |
| Cisco IOS | =12.2\(20\)s1 | |
| Cisco IOS | =12.2\(21a\) | |
| Cisco IOS | =12.3xd | |
| Cisco IOS | =12.1\(20\)e1 | |
| Cisco IOS | =12.1\(20\)ea1 | |
| Cisco IOS | =12.1eo | |
| Cisco IOS | =12.3\(4\)t2 | |
| Cisco IOS | =12.3\(5a\)b | |
| Cisco IOS | =12.1\(20\)ec | |
| Cisco IOS | =12.1\(20\)ec1 | |
| Cisco IOS | =12.3t | |
| Cisco IOS | =12.3 | |
| Cisco IOS | =12.3\(5\) | |
| Cisco IOS | =12.3\(4\)t3 | |
| Cisco IOS | =12.1eu | |
| Cisco IOS | =12.1\(20\)e2 | |
| Cisco IOS | =12.3\(2\)t3 | |
| Cisco IOS | =12.0\(27\)sv | |
| Cisco IOS | =12.1eb | |
| Cisco IOS | =12.3xf | |
| Cisco IOS | =12.1\(20\)ew | |
| Cisco IOS | =12.3\(4\)t | |
| Cisco IOS | =12.2zq | |
| Cisco IOS | =12.1ec | |
| Cisco IOS | =12.0\(23\)s5 | |
| Cisco IOS | =12.3\(6\) | |
| Cisco IOS | =12.1\(20\)e | |
| Cisco IOS | =12.3xc | |
| Cisco IOS | =12.3\(4\)xd | |
| Cisco IOS | =12.3\(4\)t1 | |
| Cisco IOS | =12.3xe | |
| Cisco IOS | =12.0\(24\)s4 | |
| Cisco IOS | =12.0\(26\)s1 | |
| Cisco IOS | =12.0\(27\)sv1 | |
| Cisco IOS | =12.1\(20\)ew1 | |
| Cisco IOS | =12.3\(5b\) | |
| Cisco IOS | =12.0\(24\)s5 | |
| Cisco IOS | =12.2\(23\) | |
| Cisco IOS | =12.3xq | |
| Cisco IOS | =12.3\(2\)xc2 | |
| Cisco IOS | =12.3xh | |
| Cisco IOS | =12.2\(12h\) | |
| Cisco IOS | =12.0s | |
| Cisco IOS | =12.3\(2\)xc1 | |
| Cisco IOS | =12.1ea | |
| Cisco IOS | =12.3b | |
| Cisco IOS | =12.1ew | |
| Cisco IOS | =12.2 | |
| Cisco IOS | =12.0\(23\)s4 | |
| Cisco IOS | =12.2sw | |
| Cisco IOS | =12.2\(20\)s | |
| Cisco IOS | =12.2\(12g\) | |
| Cisco IOS | =12.3xk | |
| Cisco IOS | =12.2\(21\) | |
| Cisco IOS | =12.1\(20\)eo | |
| Cisco IOS | =12.2s | |
| Cisco ONS 15454 system software | ||
| Cisco Optical Network Controller | =3.3.0 | |
| Cisco Optical Network Controller | =3.4.0 | |
| Cisco Optical Network Controller | =4.0.0 | |
| Cisco Optical Network Controller | =3.1.0 | |
| Cisco Optical Network Controller | =3.2.0 | |
| Cisco Optical Network Controller | =4.1\(2\) | |
| Cisco Optical Network Controller | =4.1\(3\) | |
| Cisco Optical Network Controller | =4.0\(2\) | |
| Cisco Optical Network Controller | =4.1.0 | |
| Cisco Optical Network Controller | =4.1\(0\) | |
| Cisco Optical Network Controller | =4.1\(1\) | |
| Cisco Optical Network Controller | =4.0\(1\) | |
| Cisco Optical Network Controller | =3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/10186
- http://www.us-cert.gov/cas/techalerts/TA04-111B.html
- http://www.kb.cert.org/vuls/id/162451
- http://www.cisco.com/warp/public/707/cisco-sa-20040420-snmp.shtml
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15921
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5845
Frequently Asked Questions
What is the severity of CVE-2004-0714?
CVE-2004-0714 is classified as a high-severity vulnerability due to its potential to cause a denial of service and impact the availability of affected systems.
How do I fix CVE-2004-0714?
To mitigate CVE-2004-0714, it is recommended to upgrade to the latest supported version of Cisco IOS that addresses this vulnerability.
What systems are affected by CVE-2004-0714?
CVE-2004-0714 affects multiple versions of Cisco IOS, specifically from 12.0S through 12.3T across various device models.
What type of attack does CVE-2004-0714 facilitate?
CVE-2004-0714 facilitates a denial of service attack that can lead to device reloads and memory corruption.
Are there known exploits for CVE-2004-0714?
Yes, there are known exploits for CVE-2004-0714 that attackers can use to exploit the vulnerability remotely.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/weakness
- agent/remedy
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco ios
- version/cisco ios/12.0\(27\)s
- version/cisco ios/12.3\(4\)xd1
- version/cisco ios/12.1e
- version/cisco ios/12.3\(5a\)
- version/cisco ios/12.3xg
- version/cisco ios/12.0sv
- version/cisco ios/12.2\(20\)s1
- version/cisco ios/12.2\(21a\)
- version/cisco ios/12.3xd
- version/cisco ios/12.1\(20\)e1
- version/cisco ios/12.1\(20\)ea1
- version/cisco ios/12.1eo
- version/cisco ios/12.3\(4\)t2
- version/cisco ios/12.3\(5a\)b
- version/cisco ios/12.1\(20\)ec
- version/cisco ios/12.1\(20\)ec1
- version/cisco ios/12.3t
- version/cisco ios/12.3
- version/cisco ios/12.3\(5\)
- version/cisco ios/12.3\(4\)t3
- version/cisco ios/12.1eu
- version/cisco ios/12.1\(20\)e2
- version/cisco ios/12.3\(2\)t3
- version/cisco ios/12.0\(27\)sv
- version/cisco ios/12.1eb
- version/cisco ios/12.3xf
- version/cisco ios/12.1\(20\)ew
- version/cisco ios/12.3\(4\)t
- version/cisco ios/12.2zq
- version/cisco ios/12.1ec
- version/cisco ios/12.0\(23\)s5
- version/cisco ios/12.3\(6\)
- version/cisco ios/12.1\(20\)e
- version/cisco ios/12.3xc
- version/cisco ios/12.3\(4\)xd
- version/cisco ios/12.3\(4\)t1
- version/cisco ios/12.3xe
- version/cisco ios/12.0\(24\)s4
- version/cisco ios/12.0\(26\)s1
- version/cisco ios/12.0\(27\)sv1
- version/cisco ios/12.1\(20\)ew1
- version/cisco ios/12.3\(5b\)
- version/cisco ios/12.0\(24\)s5
- version/cisco ios/12.2\(23\)
- version/cisco ios/12.3xq
- version/cisco ios/12.3\(2\)xc2
- version/cisco ios/12.3xh
- version/cisco ios/12.2\(12h\)
- version/cisco ios/12.0s
- version/cisco ios/12.3\(2\)xc1
- version/cisco ios/12.1ea
- version/cisco ios/12.3b
- version/cisco ios/12.1ew
- version/cisco ios/12.2
- version/cisco ios/12.0\(23\)s4
- version/cisco ios/12.2sw
- version/cisco ios/12.2\(20\)s
- version/cisco ios/12.2\(12g\)
- version/cisco ios/12.3xk
- version/cisco ios/12.2\(21\)
- version/cisco ios/12.1\(20\)eo
- version/cisco ios/12.2s
- canonical/cisco ons 15454 system software
- canonical/cisco optical network controller
- version/cisco optical network controller/3.3.0
- version/cisco optical network controller/3.4.0
- version/cisco optical network controller/4.0.0
- version/cisco optical network controller/3.1.0
- version/cisco optical network controller/3.2.0
- version/cisco optical network controller/4.1\(2\)
- version/cisco optical network controller/4.1\(3\)
- version/cisco optical network controller/4.0\(2\)
- version/cisco optical network controller/4.1.0
- version/cisco optical network controller/4.1\(0\)
- version/cisco optical network controller/4.1\(1\)
- version/cisco optical network controller/4.0\(1\)
- version/cisco optical network controller/3.0