PT-2002-3091 · Cisco · Ios+1

Published 2002-12-31 · Updated 2024-08-08 · CVE-2002-2379

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco AS5350 IOS version 12.2(11)T

Description The issue allows remote attackers to cause a denial of service (crash) via a port scan, possibly due to an ssh bug, when access control lists (ACLs) are applied and possibly with ssh running. Note that this issue could not be reproduced by the vendor.

Recommendations For Cisco AS5350 IOS version 12.2(11)T, consider disabling ssh or restricting access to it as a temporary workaround until a patch is available. Additionally, review and adjust access control lists (ACLs) to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2002-2379

Affected Products

Cisco As5350

Ios

References · 12

• 🔥 https://exploit-db.com/exploits/21971 · Exploit
• http://cisco.com/en/US/products/hw/univgate/ps501/products_security_notice09186a008024dba2.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-2379 · Security Note
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00397.html · Note
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00420.html · Note
• https://t.me/cvenotify/89868 · Telegram Post
• http://iss.net/security_center/static/10522.php · Note
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00411.html · Note
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00413.html · Note
• https://t.me/cvenotify/80123 · Telegram Post
• http://securityfocus.com/bid/6059 · Note
• https://t.me/cvenotify/76353 · Telegram Post