---
id: "CVE-2004-1464"
kind: "vulnerability"
aliases: ["CVE-2004-1464"]
title: "Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal)\u2026"
severity: "medium"
cvss: 5.9
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Cisco IOS", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "cisco ios", "fixed": [], "affected": "<= 12.2\\(15\\)zj3", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["cisco-ios", "exploited", "infrastructure", "network-devices", "self-hosted"]
not_affected_if: ["unknown"]
published_at: "2004-12-31T05:00:00+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2004-1464", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2004-1464", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY (virtual terminal)…

Cisco IOS has an unspecified flaw that can block further telnet, reverse telnet, RSH, SSH and sometimes HTTP access to the device. An attacker can lock administrators out of the router or switch, which is a denial of service.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Cisco IOS affected ? fixed ?
- vendor:cisco ios affected <= 12.2\(15\)zj3 fixed ?

## Fix

Apply the Cisco IOS update per vendor instructions, as CISA requires; the sources do not name the fixed version.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2004-1464
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2004-1464

## From the sources

Cisco IOS contains an unspecified vulnerability that may block further telnet, reverse telnet, Remote Shell (RSH), Secure Shell (SSH), and in some cases, Hypertext Transport Protocol (HTTP) access to the Cisco device.

CISA required action: Apply updates per vendor instructions.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_