← Vulnerability feed

Vulnerability record · CVE-2002-2316 · published 31 December 2002

CVE-2002-2316: Cisco catos vulnerability

Cisco · Catos

Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing.

5.0 CVSS 2.0 Medium EPSS 1.2% · top 31.9%
5.0CVSS 2.0 base score
1.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References, 4 tagged exploit
16 Jun 2026Last modified by NVD

Description

Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing.

AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/bugtraq/2002-05/0190.html Exploit
http://archives.neohapsis.com/archives/bugtraq/2002-06/0209.html Exploit
http://www.iss.net/security_center/static/9148.php
http://www.securityfocus.com/bid/4790
http://archives.neohapsis.com/archives/bugtraq/2002-05/0190.html Exploit
http://archives.neohapsis.com/archives/bugtraq/2002-06/0209.html Exploit
http://www.iss.net/security_center/static/9148.php
http://www.securityfocus.com/bid/4790

Track CVE-2002-2316 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2003-0216Cisco catos improper authentication vulnerabilityUnknown vulnerability in Cisco Catalyst 7.5(1) allows local users to bypass authentication and gain access to the enable mode without a password.EPSS 1.9%7.8CVE-2006-4775Cisco ios vulnerabilityThe VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(19) and CatOS allows remote attackers to cause a denial of service by sending a VTP update…EPSS 5.0%7.8CVE-2005-4258Cisco catalyst vulnerabilityUnspecified Cisco Catalyst Switches allow remote attackers to cause a denial of service (device crash) via an IP packet with the same source and dest…EPSS 2.1%7.8CVE-2001-0041Cisco catos vulnerabilityMemory leak in Cisco Catalyst 4000, 5000, and 6000 series switches allows remote attackers to cause a denial of service via a series of failed telnet…EPSS 12%7.1CVE-2008-4963Cisco catos vulnerabilityUnspecified vulnerability in the VLAN Trunking Protocol (VTP) implementation on Cisco IOS and CatOS, when the VTP operating mode is not transparent, …EPSS 1.7%7.1CVE-2007-5651Cisco catos vulnerabilityUnspecified vulnerability in the Extensible Authentication Protocol (EAP) implementation in Cisco IOS 12.3 and 12.4 on Cisco Access Points and 1310 W…EPSS 1.8%7.1CVE-2002-1222Cisco catos memory buffer overflow vulnerabilityBuffer overflow in the embedded HTTP server for Cisco Catalyst switches running CatOS 5.4 through 7.3 allows remote attackers to cause a denial of se…EPSS 8.6%7.1CVE-2002-1024Cisco ios vulnerabilityCisco IOS 12.0 through 12.2, when supporting SSH, allows remote attackers to cause a denial of service (CPU consumption) via a large packet that was …EPSS 3.3%

Source: NIST National Vulnerability Database (record CVE-2002-2316), CISA KEV, FIRST EPSS (scores of 2026-10-11). This page is refreshed as NVD updates the record.