Cisco Catalyst 2900 vulnerabilities

3 CVEs affecting Cisco Catalyst 2900, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-3918, published 2014-04-23.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2001-0566, published 2001-08-14. Medium severity, CVSS 5.0. EPSS: 6.4% chance of exploitation in the next 30 days. Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP is disabled.
• CVE-2005-4258, published 2005-12-15. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set…
• CVE-2012-3918, published 2014-04-23. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service (serial-interface outage) via…