Cisco Catalyst vulnerabilities

3 CVEs affecting Cisco Catalyst, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-1166, published 2009-07-29.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-4258, published 2005-12-15. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set…
• CVE-2009-1166, published 2009-07-29. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100 Series, 4100…
• CVE-2005-1942, published 2005-06-10. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol (CDP) messages.