CVE-2002-1768: Cisco IOS

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service (CPU consumption) via randomly sized UDP packets to the Hot Standby Routing Protocol (HSRP) port 1985.

Affected products

• Cisco IOS: version 11.1 only; version 11.2 only; version 12.0 only; version 12.1 only; version 12.2 only

Published 2002-12-31. Last modified 2026-06-16.