CVE-2005-0197 — Path Traversal in Cisco IOS

CWE-16CWE-22 — Path Traversal4 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
1.2%
top 21.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco IOSCisco Routers
Timeline
PublishedMay 2
Latest updateMay 1

Description

Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS) installed but disabled, allows remote attackers to cause a denial of service (device reload) via a crafted packet sent to the disabled interface.

CVSS vector

AV:A/AC:L/C:N/I:N/A:CExploitability: 6.5 | Impact: 6.9

Affected Packages2 packages

▶NVDcisco/ios5 versions+4

Patches

Patch: www.cisco.com ↗Patch: www.kb.cert.org ↗Patch: www.us-cert.gov ↗

🔴Vulnerability Details

1
GHSA
GHSA-p6j5-5ppm-w335: Cisco IOS 12↗2022-05-01
▶

📋Vendor Advisories

2
Cisco
Crafted Packet Causes Reload on Cisco Routers↗2005-01-26
▶
Cisco
Crafted Packet Causes Reload on Cisco Routers↗
▶