Vulnerability record · CVE-2004-0551 · published 6 August 2004
CVE-2004-0551: Cisco catos vulnerability
Cisco · Catos
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack."
Description
Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack."
AV:N/AC:L/Au:N/C:N/I:N/A:P
Affected products
24 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
Catalyst 2901 Cisco
Catalyst 2902 Cisco
Catalyst 2926 Cisco
Catalyst 2926f Cisco
Catalyst 2926gl Cisco
Catalyst 2926gs Cisco
Catalyst 2926t Cisco
Catalyst 2948 Cisco
Catalyst 2948 Ge Tx Cisco
Catalyst 2948g L3 Cisco
Catalyst 2980g Cisco
Catalyst 2980g A Cisco
Catalyst 4000 Cisco
Catalyst 4500 Cisco
Catalyst 4503 Cisco
Catalyst 4506 Cisco
Catalyst 4507r Cisco
Catalyst 4510r Cisco
Catalyst 4912g Cisco
Catalyst 5000 Cisco
Catalyst 6000 Ws Svc Nam 1 Cisco
Catalyst 6000 Ws Svc Nam 2 Cisco
Catalyst 6000 Ws X6380 Nam Cisco
Catos Cisco
References
| Link | Tags |
|---|---|
| http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml | |
| http://www.kb.cert.org/vuls/id/245190 | Third Party AdvisoryUS Government Resource |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/16370 | |
| http://www.cisco.com/warp/public/707/cisco-sa-20040609-catos.shtml | |
| http://www.kb.cert.org/vuls/id/245190 | Third Party AdvisoryUS Government Resource |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/16370 |
Track CVE-2004-0551 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2004-0551), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.
