PT-2001-1517 · Cisco · Cisco Switches/Routers

Publicado 2001-05-03 · Atualizado 2008-09-05 · CVE-2001-0288

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco switches and routers versions prior to 12.1

Description The issue allows remote attackers to spoof or hijack TCP connections due to the production of predictable TCP Initial Sequence Numbers (ISNs).

Recommendations For versions prior to 12.1, consider upgrading to a version that does not produce predictable TCP ISNs to prevent TCP connection spoofing or hijacking.

Exploit

Correção

Identificadores relacionados

CVE-2001-0288

Produtos afetados

Cisco Switches/Routers

Referências · 3

• 🔥 https://exploit-db.com/exploits/19522 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-0288 · Nota de Segurança
• http://cisco.com/warp/public/707/ios-tcp-isn-random-pub.shtml · Aviso do Fabricante