Unscored severity · published Sep 1, 1999
CVE-1999-1129
Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cisco Catalyst 2900 Virtual LAN (VLAN) switches allow remote attackers to inject 802.1q frames into another VLAN by forging the VLAN identifier in the trunking tag.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
C2
Catalyst 2900 Vlan · Cisco
All versions, or not specified · source: NVD
IO
Ios · Cisco
11.2(8)sa5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-1129
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-1129
Vendor Advisory
http://www.cisco.com/univercd/cc/td/doc/product/lan/28201900/1928v8x/eescg8x/aleakyv.htm
Patch
http://www.securityfocus.com/archive/1/26008
Patch
http://www.securityfocus.com/bid/615
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/3294
More from Catalyst 2900 Vlan
–
CVE-2012-3918
Cisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service…