Cisco Sn 5420 Storage Router Firmware vulnerabilities

6 CVEs affecting Cisco Sn 5420 Storage Router Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-0356, published 2005-05-31.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-0356, published 2005-05-31. Medium severity, CVSS 5.0. EPSS: 82.8% chance of exploitation in the next 30 days. Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a…
• CVE-2002-1597, published 2002-01-09. Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days. Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (halt) via a fragmented packet to the Gigabit interface.
• CVE-2002-1595, published 2002-01-09. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. Cisco SN 5420 Storage Router 1.1(5) and earlier allows attackers to read configuration files without authorization.
• CVE-2002-1596, published 2002-01-09. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via an HTTP request with large headers.
• CVE-2001-1038, published 2001-07-11. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Cisco SN 5420 Storage Router 1.1(3) and earlier allows remote attackers to cause a denial of service (reboot) via a series of connections to TCP port 8023.
• CVE-2001-1037, published 2001-01-08. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. Cisco SN 5420 Storage Router 1.1(3) and earlier allows local users to access a developer's shell without a password and execute certain restricted commands without being logged.