CVE-2004-1464

cisco ios

Published 31 Dec 2004 · updated 16 Jun 2026 · Analyzed

5.9 Medium · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 19 May 2023, with a remediation deadline of 9 Jun 2023 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.

References

secunia.com/advisories/12395/ · Broken Link, Vendor Advisory
securitytracker.com/id?1011079 · Broken Link, Third Party Advisory, VDB Entry
www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml · Not Applicable, Vendor Advisory
www.kb.cert.org/vuls/id/384230 · Patch, Third Party Advisory, US Government Resource
www.securityfocus.com/bid/11060 · Broken Link, Third Party Advisory, VDB Entry
exchange.xforce.ibmcloud.com/vulnerabilities/17131 · Third Party Advisory, VDB Entry
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-1464 · US Government Resource