Unscored severity · published Dec 31, 2002
CVE-2002-2316
Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Catos · Cisco
5.5(5); 6.3(5); 7.1(2) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-2316
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-2316
Exploit
http://archives.neohapsis.com/archives/bugtraq/2002-05/0190.html
Exploit
http://archives.neohapsis.com/archives/bugtraq/2002-06/0209.html
www.iss.net
http://www.iss.net/security_center/static/9148.php
www.securityfocus.com
http://www.securityfocus.com/bid/4790
More from Catos
–
CVE-2008-4963
Unspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the VTP operating mode is not transparent, allows remote attackers to…
–
CVE-2007-5651
Unspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 Wireless Bridges (Wireless EAP…
–
CVE-2007-5134
Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band Channel (EOBC) internal communication, which might allow remote attackers to send…
–
CVE-2006-4775
The VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update with a revision value of…
–
CVE-2004-1775
Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device…