Vulnerability Intelligence Report
CVE-2004-0551
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack."
No Active Exploit Signals
CVSS Base Score
5.0
MEDIUM
EPSS Probability:3.13%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| cisco | catos | 2.1\(1\), 2.1\(2\), 2.1\(3\), 2.1\(4\), 2.1\(5\), 2.1\(6\), 2.1\(7\), 2.1\(8\), 2.1\(9\), 2.1\(10\), 2.1\(11\), 2.1\(12\), 2.2\(1\), 2.2\(2\), 2.3\(1\), 2.4\(1\), 2.4\(2\), 2.4\(3\), 2.4\(4\), 2.4\(5\), 2.4\(5a\), 3.0\(7\), 3.1\(1\), 3.1\(2\), 3.1\(2a\), 3.2\(1\), 3.2\(1b\), 3.2\(2\), 3.2\(3\), 3.2\(4\), 3.2\(5\), 3.2\(6\), 3.2\(7\), 3.2\(8\)gdr, 4.1\(1\), 4.1\(2\), 4.1\(3\), 4.2\(1\), 4.2\(2\), 4.3\(1a\), 4.4\(1\), 4.5\(1\), 4.5\(2\), 4.5\(3\), 4.5\(4\), 4.5\(5\), 4.5\(6\), 4.5\(6a\), 4.5\(7\), 4.5\(8\), 4.5\(9\), 4.5\(10\), 4.5\(11\), 4.5\(12\), 4.5\(12a\), 4.5\(13\), 4.5\(13a\), 4.5\(14\), 5.1\(1\), 5.1\(1\)csx, 5.1\(1a\), 5.1\(1a\)csx, 5.1\(2a\), 5.1\(2b\), 5.2\(1\), 5.2\(1\)csx, 5.2\(2\), 5.2\(2\)csx, 5.2\(3\), 5.2\(3\)csx, 5.2\(3a\)csx, 5.2\(4\), 5.2\(5\), 5.2\(6\), 5.2\(7\), 5.2\(7a\), 5.3\(1a\)csx, 5.3\(2\)csx, 5.3\(3\)csx, 5.3\(4\)csx, 5.3\(5\)csx, 5.3\(5a\)csx, 5.3\(6\)csx, 5.3\(6a\)csx, 5.4, 5.4\(1\), 5.4\(1\)deferred, 5.4\(2\), 5.4\(2a\), 5.4\(3\), 5.4\(4\), 5.4\(4a\), 5.5, 5.5\(1\), 5.5\(1a\), 5.5\(2\), 5.5\(3\), 5.5\(4\), 5.5\(4a\), 5.5\(4b\), 5.5\(5\), 5.5\(6\), 5.5\(6a\), 5.5\(7\), 5.5\(7a\), 5.5\(8\), 5.5\(8a\), 5.5\(8a\)cv, 5.5\(9\), 5.5\(10\), 5.5\(10a\), 5.5\(11\), 5.5\(11a\), 5.5\(12\), 5.5\(12a\), 5.5\(13\), 5.5\(13.5\), 5.5\(13a\), 5.5\(14\), 5.5\(15\), 5.5\(16\), 5.5\(16.2\), 5.5\(17\), 5.5\(18\), 5.5\(19\), 6.1, 6.1\(1\), 6.1\(1a\), 6.1\(1b\), 6.1\(1c\), 6.1\(1d\), 6.1\(1e\), 6.1\(2\), 6.1\(2a\), 6.1\(3\), 6.1\(3a\), 6.1\(4\), 6.1\(4b\), 6.2\(1\), 6.2\(1a\), 6.2\(2\), 6.2\(2a\), 6.2\(3\), 6.2\(3a\), 6.3\(1\), 6.3\(1a\), 6.3\(2\), 6.3\(2a\), 6.3\(3\), 6.3\(3\)x, 6.3\(3\)x1, 6.3\(3a\), 6.3\(4\), 6.3\(4a\), 6.3\(5\), 6.3\(5.10\), 6.3\(6\), 6.3\(7\), 6.3\(8\), 6.3\(8.3\), 6.3\(9\), 6.3\(10\), 6.4\(1\), 6.4\(2\), 6.4\(3\), 6.4\(4a\), 6.4\(5\), 6.4\(6\), 6.4\(7\), 6.4\(8\), 7.1\(1\), 7.1\(1a\), 7.1\(2\), 7.1\(2a\), 7.2\(0.65\), 7.2\(1\), 7.2\(2\), 7.3, 7.3\(1\), 7.3\(2\), 7.4, 7.4\(0.2\)clr, 7.4\(0.63\), 7.4\(1\), 7.4\(2\), 7.4\(3\), 7.5, 7.5\(1\), 7.6, 7.6\(1\), 7.6\(2\), 7.6\(3\), 7.6\(4\), 7.6\(5\), 8.1, 8.1\(2\), 8.1\(3\), 8.2, 8.2\(1\), 8.3\(1\)glx, 8.3glx, 4.5\(4b\), 4.5.10, 5.1, 5.2, 5.2\(1a\), 5.3\(1\)csx, 6.1\(2.13\), 6.2\(0.110\), 6.2\(0.111\), 6.3\(0.7\)pan, 7.1 |
| cisco | catalyst_2901 | all |
| cisco | catalyst_2902 | all |
| cisco | catalyst_2926 | all |
| cisco | catalyst_2926f | all |
| cisco | catalyst_2926gl | all |
| cisco | catalyst_2926gs | all |
| cisco | catalyst_2926t | all |
| cisco | catalyst_2948 | all |
| cisco | catalyst_2948-ge-tx | all |
| cisco | catalyst_2948g-l3 | all |
| cisco | catalyst_2980g | all |
| cisco | catalyst_2980g-a | all |
| cisco | catalyst_4000 | all |
| cisco | catalyst_4500 | all |
| cisco | catalyst_4503 | all |
| cisco | catalyst_4506 | all |
| cisco | catalyst_4507r | all |
| cisco | catalyst_4510r | all |
| cisco | catalyst_4912g | all |
| cisco | catalyst_5000 | all |
| cisco | catalyst_6000_ws-svc-nam-1 | 2.2\(1a\), 3.1\(1a\) |
| cisco | catalyst_6000_ws-svc-nam-2 | 2.2\(1a\), 3.1\(1a\) |
| cisco | catalyst_6000_ws-x6380-nam | 2.1\(2\), 3.1\(1a\) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
3.131%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2004-06-11T00:00:00 |
| Published | 2004-06-15T04:00:00 |
| Patch Date | 2004-06-09 |
| Last Updated | 2024-08-08T00:24:26 |
Community Chatter & Buzz