CVE-2002-1024: Cisco Catos

High severity, CVSS 7.1. EPSS: 3.3% chance of exploitation in the next 30 days.

Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144).

Affected products

• Cisco Catos: version 5.3(1)csx only; version 5.3(1a)csx only; version 5.3(2)csx only; version 5.3(3)csx only; version 5.3(4)csx only; version 5.3(5)csx only; …
• Cisco CSS11000 Content Services Switch: any version
• Cisco IOS: version 12.0s only; version 12.0sp only; version 12.0st only; version 12.0xb only; version 12.0xm only; version 12.0xv only; …
• Cisco Pix Firewall Software: version 5.2 only; version 5.3 only; version 6.0 only; version 6.1 only; version 6.2 only

Published 2002-10-04. Last modified 2026-06-16.