medium Known exploitedREV. 01

CVE-2004-1464Cisco routers — the management lines filled up

A crafted connection to the telnet port of Cisco's router software (IOS) occupies the virtual terminal lines, and further remote logins are refused. Releases 12.2(15) and earlier are affected, and other access paths go with it.

YOUR NEXT MOVE

Move the device to a supported release, and reach management over a dedicated path with the telnet and reverse telnet ports closed to everyone else.

Read the risk

THE VITAL STATS
CVSS score
5.9/ 10
CVSS v3.1
EPSS probability
5%
Likelihood of exploitation
Attack complexity
High
Conditions needed to exploit
Known exploited
Yes — CISA KEV
CVE published
2004-12-31
Added to KEV
2023-05-19
Exploit published
Not recorded
Confidence
high
Kill chain
impact
MITRE ATT&CK
T1499
Severity
medium

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Attacker needsNetwork access to the device's telnet or reverse telnet port.

Behind the card

5 REFERENCES
Field-level provenanceTRACE THE SOURCES +

Which source supports each field, when it was retrieved, and who extracted it.

FieldsSourceRetrievedExtractorConfidence
cvss, exploitation.attack_complexity, exploitation.exploit_available, references, published_atnvd.nist.gov2026-09-24scrty-crds-pipeline/0.1high
exploitation.known_exploited, exploitation.kev_addedcisa.gov2026-09-24scrty-crds-pipeline/0.1high
epssapi.first.org2026-09-24scrty-crds-pipeline/0.1high
title, summary, severity, remediation, mitre_attack, kill_chain, recommended_action, confidence, tags, exploitation.prerequisitesnvd.nist.gov2026-09-24claude-codehigh

Printing history

THE RECORD
  1. r1Initial base card

First printing. This card has not been reprinted since publication.

crds:cve-2004-1464 · CRDS 0.1 · Issued 2026-09-24