Unscored severity · published Jun 10, 2005
CVE-2005-1942
Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol (CDP) messages
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cisco switches that support 802.1x security allow remote attackers to bypass port security and gain access to the VLAN via spoofed Cisco Discovery Protocol (CDP) messages.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Catalyst · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1942
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1942
marc.info
http://marc.info/?l=bugtraq&m=111842833009771&w=2
www.cisco.com
http://www.cisco.com/warp/public/707/cisco-sn-20050608-8021x.shtml
Vendor Advisory
http://www.fishnetsecurity.com/csirt/disclosure/cisco/Cisco+802.1x+Advisory.pdf
Vendor Advisory
http://www.securitytracker.com/alerts/2005/Jun/1014135.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/20939
More from Catalyst
–
CVE-2009-1166
The administrative web interface on the Cisco Wireless LAN Controller (WLC) platform 4.x before 4.2.205.0 and 5.x before 5.2.191.0, as used in Cisco 1500 Series, 2000 Series, 2100…
–
CVE-2005-4258
Unspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and…