Cisco Catos vulnerabilities

17 CVEs affecting Cisco Catos, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-4963, published 2008-11-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2001-0041, published 2001-02-16. High severity, CVSS 7.8. EPSS: 12.1% chance of exploitation in the next 30 days. Memory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet authentication attempts.
CVE-2002-1222, published 2002-10-28. High severity, CVSS 7.1. EPSS: 8.6% chance of exploitation in the next 30 days. Buffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of service (reset) via a long HTTP request.
CVE-2006-4775, published 2006-09-14. High severity, CVSS 7.8. EPSS: 5.1% chance of exploitation in the next 30 days. The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of 0x7FFFFFFF, which is…
CVE-2002-1024, published 2002-10-04. High severity, CVSS 7.1. EPSS: 3.3% chance of exploitation in the next 30 days. Cisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was designed to exploit the SSH CRC32 attack detection…
CVE-2004-0551, published 2004-08-06. Medium severity, CVSS 5.0. EPSS: 3.1% chance of exploitation in the next 30 days. Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid…
CVE-2007-5134, published 2007-09-27. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send packets to an…
CVE-2001-1071, published 2001-10-09. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. Cisco IOS 12.2 and earlier running Cisco Discovery Protocol (CDP) allows remote attackers to cause a denial of service (memory consumption) via a flood of CDP neighbor announcements.
CVE-2005-4258, published 2005-12-15. High severity, CVSS 7.8. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set…
CVE-2003-0216, published 2003-05-12. High severity, CVSS 9.3. EPSS: 1.9% chance of exploitation in the next 30 days. Unknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a password.
CVE-2007-5651, published 2007-10-23. High severity, CVSS 7.1. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP devices), IOS 12.1…

Latest

CVE-2008-4963, published 2008-11-06. High severity, CVSS 7.1. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the VTP operating mode is not transparent, allows remote attackers to cause a denial of…
CVE-2004-1775, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write…
CVE-2003-1002, published 2004-01-05. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via an SNMPv3 message when snmp-server is…
CVE-2003-1001, published 2004-01-05. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. Buffer overflow in the Cisco Firewall Services Module (FWSM) in Cisco Catalyst 6500 and 7600 series devices allows remote attackers to cause a denial of service (crash and reload) via HTTP auth…