# CVE-2004-1464

Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal) connections), via a crafted TCP connection to the Telnet or reverse Telnet port.

- Page: https://www.vulneraibility.com/cve/CVE-2004-1464
- CVSS: 5.9
- Known exploited: yes, in CISA KEV since 2023-05-19; CISA due date 2023-06-09
- EPSS: 4.84% (percentile 92.1)
- CISA SSVC: exploitation active, automatable no, technical impact partial (assessed 2025-02-07)
- Weakness: CWE-400
- Published: 2004-12-31

## Affected

- cisco:ios

## References

- [other] https://exchange.xforce.ibmcloud.com/vulnerabilities/17131
- [other] http://securitytracker.com/id?1011079
- [advisory] http://www.kb.cert.org/vuls/id/384230
- [advisory] http://secunia.com/advisories/12395/
- [advisory] http://www.cisco.com/warp/public/707/cisco-sa-20040827-telnet.shtml
- [other] http://www.securityfocus.com/bid/11060
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2004-1464

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.