CVE-2004-1464KEV

Cisco IOS Denial-of-Service Vulnerability

Severity: Medium5.9CVSS 3.1, Medium
Known exploited: Known exploitedFederal remediation due date: 9 Jun 2023
Exploit prediction: 5%
Published: 13 Feb 2005Updated 16 Jun 2026 · Last verified 29 Sept 2026

Description

Title, description and vendor guidance are quoted from the source records.

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.

Weakness: CWE-400

Known exploited

Added to CISA KEV on 19 May 2023

Federal remediation due date: 9 Jun 2023

Required action: Apply updates per vendor instructions.

Exploit prediction

5% probability of exploitation in the next 30 days (percentile 92%).

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Patcharo shows this vulnerability for information but does not match versions for this product yet.

n/a n/a · n/a

References

cisco-ios-telnet-dos(17131)(opens in a new tab)

Provenance

Every fact on this page comes from the sources below. Nothing is written by an AI.

CVE Program record: CVE Program record · 29 Sept 2026 at 21:17 UTC · Parser patcharo-cve5/1.1.0
CISA Known Exploited Vulnerabilities: CISA Known Exploited Vulnerabilities · 29 Sept 2026 at 21:17 UTC · Parser patcharo-kev/1.0.0
NVD: NVD · 27 Sept 2026 at 23:44 UTC · Parser patcharo-nvd/1.0.0
FIRST EPSS: FIRST EPSS · 30 Sept 2026 at 00:17 UTC · Parser patcharo-epss/1.0.0

Last verified: 29 Sept 2026 at 21:17 UTC