CVE-2004-1464: Cisco IOS Denial-of-Service Vulnerability
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.
Other sources
Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable Telnet and reverse Telnet services on affected devices if they are not required (stop listening on Telnet/reverse-Telnet ports).
Cisco IOS (Telnet/reverse-Telnet service) telnet_enabled = disabled - Compensating control
Restrict or block access to Telnet and reverse Telnet ports (and other management ports) to trusted management hosts/networks using network ACLs, firewall rules, or an out-of-band management network.
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1464?
CVE-2004-1464 has a severity rating of medium, as it allows for denial of service attacks against Cisco IOS devices.
How do I fix CVE-2004-1464?
To mitigate CVE-2004-1464, upgrade your Cisco IOS to a version beyond 12.2(15) that addresses this vulnerability.
What systems are affected by CVE-2004-1464?
CVE-2004-1464 affects Cisco IOS versions 12.2(15) and earlier.
Can CVE-2004-1464 be exploited remotely?
Yes, CVE-2004-1464 can be exploited remotely via crafted TCP connections to the Telnet or reverse Telnet port.
What type of impact does CVE-2004-1464 have?
The impact of CVE-2004-1464 is denial of service, where further VTY connections are refused.