{"id":"CVE-2004-1464","kind":"vulnerability","aliases":["CVE-2004-1464"],"related":[],"title":"Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal)…","description":"Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device.\n\nCISA required action: Apply updates per vendor instructions.","summary":"Cisco IOS has an unspecified flaw that can block further telnet, reverse telnet, RSH, SSH and sometimes HTTP access to the device. An attacker can lock administrators out of the router or switch, which is a denial of service.","severity":"medium","cvss":5.9,"epss":null,"exploited":true,"exploited_at":"2023-05-19T00:00:00+00:00","products":[{"name":"Cisco IOS","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"cisco ios","fixed":[],"affected":"<= 12.2\\(15\\)zj3","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["cisco-ios","exploited","infrastructure","network-devices","self-hosted"],"not_affected_if":["unknown"],"how_to_check":null,"fix":"Apply the Cisco IOS update per vendor instructions, as CISA requires; the sources do not name the fixed version.","status":"open","published_at":"2004-12-31T05:00:00+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T21:06:44+00:00","updated_at":"2026-10-23T22:29:04+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-23T21:06:44Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Cisco IOS update per vendor instructions, as CISA requires; the sources do not name the fixed version.","reach":"network","impact":"medium","summary":"Cisco IOS has an unspecified flaw that can block further telnet, reverse telnet, RSH, SSH and sometimes HTTP access to the device. An attacker can lock administrators out of the router or switch, which is a denial of service.","category":"infrastructure","who_cares":["cisco-ios","network-devices","self-hosted"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Remote management access to the device is blocked, requiring physical or console recovery.","analyst_note":"Find the affected IOS versions and fixed release in the Cisco advisory for CVE-2004-1464 and check whether it is exploitable remotely without credentials.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["unknown"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000462,"input_tokens":2824,"output_tokens":360,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-1464':22A,25A '-2004':21A,24A '12.2':3A '15':4A 'access':59B,107C 'action':114C 'administr':67B 'allow':7A 'appli':115C 'attack':9A,64B 'block':49B,88C 'case':102C 'caus':11A 'cisa':112C 'cisco':1A,26A,28A,31B,41B,80C,110C 'cisco-io':30B 'contain':82C 'cve':20A,23A 'denial':13A,77B 'devic':37B,62B,111C 'earlier':6A 'exploit':33B 'flaw':46B 'host':40B 'http':58B,106C 'hypertext':103C 'infrastructur':34B 'instruct':119C 'io':2A,32B,42B,81C 'ios':27A,29A 'lock':66B 'may':87C 'network':36B 'network-devic':35B 'per':117C 'protocol':105C 'refus':16A 'remot':8A,93C 'requir':113C 'revers':52B,91C 'router':71B 'rsh':54B,95C 'secur':96C 'self':39B 'self-host':38B 'servic':15A,79B 'shell':94C,97C 'sometim':57B 'ssh':55B,98C 'switch':73B 'telnet':51B,53B,90C,92C 'termin':19A 'transport':104C 'unspecifi':45B,84C 'updat':116C 'vendor':118C 'virtual':18A 'vti':17A 'vulner':85C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2004-12-31T05:00:00+00:00","kev":{"dateAdded":"2023-05-19","dueDate":"2023-06-09","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2004-1464","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2004-1464","severity":null,"published_at":"2023-05-19T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T13:39:30+00:00","note":null},{"source":"nvd","external_id":"CVE-2004-1464","url":"https://nvd.nist.gov/vuln/detail/CVE-2004-1464","severity":null,"published_at":"2004-12-31T05:00:00+00:00","modified_at":"2026-06-16T22:07:45+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}