SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2005-0356

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the…

MEDIUM 5.0EPSS 82.8%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 82.8%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.

Description

Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a spoofed packet with a large timer value, which causes the host to discard later packets because they appear to be too old.

CVSS 2.0
5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS
82.76% probability · 100th percentile
CISA KEV
Not listed
Affected
cisco/agent desktop · cisco/e-mail manager · cisco/emergency responder · cisco/intelligent contact manager · cisco/interactive voice response · cisco/ip contact center enterprise · cisco/ip contact center express · cisco/meetingplace · cisco/personal assistant · cisco/remote monitoring suite option · cisco/secure access control server · cisco/support tools · cisco/web collaboration option · hitachi/alaxala · cisco/call manager · cisco/unity server · cisco/mgx 8230 · cisco/mgx 8250 · cisco/ciscoworks access control list manager · cisco/ciscoworks common management foundation · +40 more
Source
cret@cert.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.