VulnerabilityModified

CVE-2005-0197

Cisco IOS 12.1T, 12.2, 12.2T, 12.3 and 12.3T, with Multi Protocol Label Switching (MPLS) installed but disabled, allows remote attackers to cause a denial of service (device reload) via a crafted packet sent to the disabled interface.

MEDIUM 6.1EPSS 1.70%

Does this matter?

Lower severity and a low EPSS score (1.70%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 6.1 MEDIUMAV:A/AC:L/Au:N/C:N/I:N/A:C
EPSS: 1.70% probability · 76th percentile
CISA KEV: Not listed
Weakness: CWE-16
Affected: cisco/ios
Source: cve@mitre.org

References

http://secunia.com/advisories/14031
http://securitytracker.com/id?1013015
http://www.cisco.com/warp/public/707/cisco-sa-20050126-les.shtmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/583638Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/12369
http://www.us-cert.gov/cas/techalerts/TA05-026A.htmlPatch, Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/19071
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5662
http://secunia.com/advisories/14031
http://securitytracker.com/id?1013015
http://www.cisco.com/warp/public/707/cisco-sa-20050126-les.shtmlPatch, Vendor Advisory
http://www.kb.cert.org/vuls/id/583638Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/12369
http://www.us-cert.gov/cas/techalerts/TA05-026A.htmlPatch, Third Party Advisory, US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/19071
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5662

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.