VulnerabilityModified
CVE-2002-2053
The design of the Hot Standby Routing Protocol (HSRP), as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service (CPU consumption) via a router with the same IP address as the interface on which HSRP is…
MEDIUM 5.0EPSS 1.59%
Does this matter?
Lower severity and a low EPSS score (1.59%). Track it; it rarely justifies an emergency change on its own.
Description
The design of the Hot Standby Routing Protocol (HSRP), as implemented on Cisco IOS 12.1, when using IRPAS, allows remote attackers to cause a denial of service (CPU consumption) via a router with the same IP address as the interface on which HSRP is running, which causes a loop.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 1.59% probability · 74th percentile
- CISA KEV
- Not listed
- Affected
- cisco/ios
- Source
- cve@mitre.org
References
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0027.html
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0050.html
- http://www.iss.net/security_center/static/9283.php
- http://www.securityfocus.com/bid/4949
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0027.html
- http://archives.neohapsis.com/archives/bugtraq/2002-06/0050.html
- http://www.iss.net/security_center/static/9283.php
- http://www.securityfocus.com/bid/4949
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.