VDB
CVE-2004-0551
CVE-2004-0551
PUBLISHED
CVSS 5 MEDIUM
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack."
EPSS 0.64% · 71.0th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
0.64%
71.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | catalyst_4500 | |
| cisco | catalyst_4507r | |
| cisco | catalyst_2902 | |
| cisco | catalyst_6000_ws-svc-nam-1 | 2.2\(1a\), 3.1\(1a\) |
| cisco | catalyst_4912g | |
| cisco | catalyst_2926f | |
| cisco | catalyst_2926gl | |
| n/a | n/a | n/a |
| cisco | catos | 6.1\(1b\), 7.1\(2\), 7.5\(1\) |
| cisco | catalyst_5000 | |
| cisco | catalyst_2980g-a | |
| cisco | catalyst_4000 | |
| cisco | catalyst_2948 | |
| cisco | catalyst_6000_ws-x6380-nam | 3.1\(1a\), 2.1\(2\) |
| cisco | catalyst_2980g | |
| cisco | catalyst_2926gs | |
| cisco | catalyst_2948g-l3 | |
| cisco | catalyst_2926 | |
| cisco | catalyst_6000_ws-svc-nam-2 | *, 2.2\(1a\) |
| cisco | catalyst_2901 |
…and 5 more
Timeline
- Jun 15, 2004 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- VU#245190 third-party-advisory
- 20040609 Cisco CatOS Telnet, HTTP and SSH Vulnerability vendor-advisory
- cisco-catalyst-ack-dos(16370) vdb
- https://nvd.nist.gov/vuln/detail/CVE-2004-0551 advisory