{"id":"CVE-2004-1464","aliases":["EUVD-2004-1458","GHSA-7757-mj68-c29v"],"status":"published","title":"Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY ...","description":"Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.0484,"percentile":0.9206,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:07:45Z","kev":{"date_added":"2023-05-19","due_date":"2023-06-09","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2023-05-19"},{"source":"kev","since":"2023-05-19"}],"products":[{"vendor":"cisco","product":"ios"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17131","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1011079","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.kb.cert.org/vuls/id/384230","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","Patch","Third Party Advisory","US Government Resource"]},{"url":"http://secunia.com/advisories/12395/","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Not Applicable","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/11060","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-1464","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1464"},{"url":"http://secunia.com/advisories/12395"},{"url":"https://github.com/advisories/GHSA-7757-mj68-c29v"}],"sources":{"cve":[{"id":"CVE-2004-1464","description":"Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.","status":"published","published":"2005-02-13T05:00:00Z","modified":"2025-10-22T00:05:57.162Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:54.063504Z"}],"euvd":[{"id":"EUVD-2004-1458","description":"Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.","status":"published","published":"2005-02-13T05:00:00Z","modified":"2025-10-22T00:05:57Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"exploited_since":"2023-05-19","updated_at":"2026-11-02T19:49:38.726368Z"}],"ghsa":[{"id":"GHSA-7757-mj68-c29v","title":"Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY ...","description":"Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.","status":"published","published":"2022-04-29T02:59:39Z","modified":"2025-10-22T03:31:32Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:04:09.843024Z"}],"kev":[{"id":"CVE-2004-1464","title":"Cisco IOS Denial-of-Service Vulnerability","description":"Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device.","kev":{"date_added":"2023-05-19","due_date":"2023-06-09","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2004-1464","description":"Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:07:45.38Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:00:51.985436Z"}]}}