VulnerabilityModified

CVE-1999-1548

Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit.

MEDIUM 5.0EPSS 1.05%

Does this matter?

Lower severity and a low EPSS score (1.05%). Track it; it rarely justifies an emergency change on its own.

Description

Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit.

CVSS 2.0: 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS: 1.05% probability · 62th percentile
CISA KEV: Not listed
Affected: cabletron/smartswitch router 8000 firmware
Source: cve@mitre.org

References

http://razor.bindview.com/publish/advisories/adv_Cabletron.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/821
http://razor.bindview.com/publish/advisories/adv_Cabletron.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/821

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.