CVE-2004-1464

MEDIUM CISA KEV

CVSS v3.1: 5.9 · EPSS: 0.0170 (82.3 percentile) · CISA KEV: Yes

CISA KEVNetworkNo privilegesNo user interactionResource Exhaustion (DoS)Vendor advisory ref

Source data as of:

At a glance

Severity
MEDIUM
CVSS
5.9 v3.1 · NVD
EPSS
0.0170 (82.3 percentile) · FIRST.org
CISA KEV
Yes KEV added: 2023-05-19
Type
Resource Exhaustion (DoS) · NVD CWE
Attack conditions (CVSS vector)
NetworkNo privilegesNo user interaction · Source: NVD Vector
Affected vendors
cisco
Published
2004-12-31 · Modified: 2026-04-16

CVSS / EPSS / KEV

CVSS v3.1 5.9 / 10 MEDIUM Source: NVD
EPSS 0.0170 82.3 percentile Source: FIRST.org
CISA KEV Yes KEV added: 2023-05-19 Source: CISA

Source — CVSS: NVD · EPSS: FIRST.org · KEV: CISA. Data & Sources

Description

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.

Record details

CVE ID
CVE-2004-1464
CVSS (v3.1)
5.9 (MEDIUM)
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability subscore
2.2
Impact subscore
3.6
EPSS
0.0170 (82.3 percentile) — 2026-04-17
CISA KEV
Yes — KEV added: 2023-05-19, Remediation due (CISA): 2023-06-09
Known ransomware use
Unknown
Weakness (CWE)
CWE-400
Affected vendors
cisco
Affected configurations (CPE)
1
Published
2004-12-31
Modified
2026-04-16
Status
Analyzed

References

Reference URLs as listed by NVD, grouped by a mechanical match on the link's host/pattern. Labels describe the link type only.