Cisco Catalyst 3500 Xl vulnerabilities

2 CVEs affecting Cisco Catalyst 3500 Xl, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-4258, published 2005-12-15.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2000-0945, published 2000-12-19. High severity, CVSS 10.0. EPSS: 72.6% chance of exploitation in the next 30 days. The web configuration interface for Catalyst 3500 XL switches allows remote attackers to execute arbitrary commands without authentication when the enable password is not set, via a URL containing…
• CVE-2005-4258, published 2005-12-15. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set…