Cisco Router vulnerabilities

4 CVEs affecting Cisco Router, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-1999-0843, published 1999-11-04.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-1999-1216, published 1993-04-22. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Cisco routers 9.17 and earlier allow remote attackers to bypass security restrictions via certain IP source routed packets that should normally be denied using the "no ip source-route" command.
• CVE-1999-0453, published 1999-01-01. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. An attacker can identify a CISCO device by sending a SYN packet to port 1999, which is for the Cisco Discovery Protocol (CDP).
• CVE-1999-0222, published 1999-03-01. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. Denial of service in Cisco IOS web server allows attackers to reboot the router using a long URL.
• CVE-1999-0843, published 1999-11-04. Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days. Denial of service in Cisco routers running NAT via a PORT command from an FTP client to a Telnet port.