Cisco Catalyst 2900 Vlan vulnerabilities

2 CVEs affecting Cisco Catalyst 2900 Vlan, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-3918, published 2014-04-23.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-1999-1129, published 1999-09-01. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag.
• CVE-2012-3918, published 2014-04-23. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service (serial-interface outage) via…