CVE-2005-1058: Cisco IOS

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Cisco IOS 12.2T, 12.3 and 12.3T, when processing an ISAKMP profile that specifies XAUTH authentication after Phase 1 negotiation, may not process certain attributes in the ISAKMP profile that specifies XAUTH, which allows remote attackers to bypass XAUTH and move to Phase 2 negotiations.

Affected products

• Cisco IOS: version 12.2t only; version 12.3 only; version 12.3t only

Published 2005-05-02. Last modified 2026-06-16.