CVE-2005-3481Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco IOS

2 documents2 sources
Severity
9.3CRITICALNVD
EPSS
5.1%
top 10.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 3
Latest updateMay 1

Description

Cisco IOS 12.0 to 12.4 might allow remote attackers to execute arbitrary code via a heap-based buffer overflow in system timers. NOTE: this issue does not correspond to a specific vulnerability, rather a general weakness that only increases the feasibility of exploitation of any vulnerabilities that might exist. Such design-level weaknesses normally are not included in CVE, so perhaps this issue should be REJECTed.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

NVDcisco/ios228 versions+227

🔴Vulnerability Details

1
GHSA
GHSA-q69w-f877-cj83: Cisco IOS 122022-05-01