cbcvebase.
CVE-2004-1464
published 2004-12-31

CVE-2004-1464: Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection…

PriorityP269medium5.9CVSS 3.1
AVNACHPRNUINSUCNINAH
KEVITW
CISA Known Exploited Vulnerabilitydue 2023-06-09
Exploited in the wild
EPSS
5.13%
91.3th percentile
Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.

Affected

2 ranges
VendorProductVersion rangeFixed in
ciscoios<= 12.2\(15\)zj3
ciscotelnet

Detection & IOCsextracted from sources · hover to see the quote

port23 (Telnet)
  • Monitor for sudden loss of VTY access (Telnet, SSH, RSH, HTTP) to Cisco IOS devices while packet forwarding and routing protocols remain operational — this asymmetry is a strong indicator of active exploitation.
  • Track impact on DLSw and protocol translation connections in addition to standard management plane protocols, as these may also be blocked by exploitation.
  • ·Only new management sessions are blocked; sessions established before exploitation remain active and unaffected.
  • ·HTTP management access may also be blocked in some cases, broadening the management plane impact beyond just terminal-based protocols.

CVSS provenance

nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
vulncheck5.9MEDIUM
cisa5.9MEDIUM
vendor_cisco5.0MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.