Vulnerability in Cisco iOS

CVE-2004-0589

Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of service (device reload) via malformed BGP (1) OPEN or (2) UPDATE messages.

EPSS: 0.030 (86.1th percentile) — read the EPSS interpretation.

Affected products

Public proof-of-concept exploits

References

  • cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Patch, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (Broken Link, x_refsource_OVAL, signature, vdb-entry)
  • cve@mitre.org (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)

Frequently asked questions

What is CVE-2004-0589?
CVE-2004-0589 is a vulnerability in Cisco iOS. Published 2004-08-06.
Is CVE-2004-0589 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.