7.8

CVE-2003-0567: cisco ios Improper Input Validation

CVSS: 7.8v2.0HighModified
Published 25-07-2003Last modified 08-08-2024
Open JSON

Vulnerability summary

CVE-2003-0567 is a high (CVSS 7.8) Improper Input Validation vulnerability in cisco ios. EPSS estimates a 16.58% chance of exploitation in the next 30 days, higher than 96.9% of scored vulnerabilities. 4 public exploits are recorded.

Overall risk
45/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v2.0 (NVD)
EPSS score
16.58%
0%100%
Medium · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits4reference, exploit-database

Timeline

  1. 25-07-2003
    PublishedVulnerability first disclosed.
  2. 08-08-2024
    Last modifiedVulnerability information updated.

Description

Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence of IPv4 packets to an interface on the device, causing the input queue on that interface to be marked as full.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

16.58%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

0.00 pp

From 16.58% on 18-09-2026

18-09-202618-10-2026
EPSS score
16.58%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found
  • referenceUnverified

    Exploit Reference (cert.org)

    Maturity: unknown

  • exploit-databasedoshardwareVerified

    Cisco IOS - 'cisco-bug-44020.c' IPv4 Packet Denial of Service

    Maturity: poc

  • exploit-databasedoshardwareVerified

    Cisco IOS - IPv4 Packets Denial of Service

    Maturity: poc

Show all 4 exploits
  • exploit-databasedoshardwareVerified

    Cisco IOS - using hping Remote Denial of Service

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Cisco2 products
  • ios11.0 | 11.1 | 11.1aa | 11.1ca | 11.1cc | 11.2 | 11.2p | 11.2sa | 11.3 | 11.3t | 12.0 | 12.0da | 12.0db | 12.0dc | 12.0s | 12.0sc | 12.0sl | 12.0sp | 12.0st | 12.0sx | 12.0sy | 12.0sz | 12.0t | 12.0w5 | 12.0wc | 12.0wt | 12.0xa | 12.0xb | 12.0xc | 12.0xd | 12.0xe | 12.0xf | 12.0xg | 12.0xh | 12.0xi | 12.0xj | 12.0xk | 12.0xl | 12.0xm | 12.0xn | 12.0xp | 12.0xq | 12.0xr | 12.0xs | 12.0xu | 12.0xv | 12.0xw | 12.1 | 12.1aa | 12.1ax | 12.1ay | 12.1da | 12.1db | 12.1dc | 12.1e | 12.1ea | 12.1eb | 12.1ec | 12.1ev | 12.1ew | 12.1ex | 12.1ey | 12.1m | 12.1t | 12.1xa | 12.1xb | 12.1xc | 12.1xd | 12.1xe | 12.1xf | 12.1xg | 12.1xh | 12.1xi | 12.1xj | 12.1xk | 12.1x\(l\) | 12.1xm | 12.1xp | 12.1xq | 12.1xr | 12.1xs | 12.1xt | 12.1xu | 12.1xv | 12.1xw | 12.1xx | 12.1xy | 12.1xz | 12.1yb | 12.1yc | 12.1yd | 12.1ye | 12.1yf | 12.1yh | 12.1yi | 12.1yj | 12.2 | 12.2b | 12.2bc | 12.2bw | 12.2bx | 12.2bz | 12.2cx | 12.2cy | 12.2da | 12.2dd | 12.2dx | 12.2ja | 12.2mb | 12.2mc | 12.2mx | 12.2s | 12.2sx | 12.2sy | 12.2sz | 12.2t | 12.2xa | 12.2xb | 12.2xc | 12.2xd | 12.2xe | 12.2xf | 12.2xg | 12.2xh | 12.2xi | 12.2xj | 12.2xk | 12.2xl | 12.2xm | 12.2xn | 12.2xq | 12.2xr | 12.2xs | 12.2xt | 12.2xu | 12.2xw | 12.2ya | 12.2yb | 12.2yc | 12.2yd | 12.2yf | 12.2yg | 12.2yh | 12.2yj | 12.2yk | 12.2yl | 12.2ym | 12.2yn | 12.2yo | 12.2yp | 12.2yq | 12.2yr | 12.2ys | 12.2yt | 12.2yu | 12.2yv | 12.2yw | 12.2yx | 12.2yy | 12.2yz | 12.2za | 12.2zb | 12.2zc | 12.2zd | 12.2ze | 12.2zf | 12.2zg | 12.2zh | 12.2zj
  • optical_networking_systems_software3.0 | 3.1.0 | 3.2.0 | 3.3.0 | 3.4.0 | 4.0\(0\)

1 vendor · 2 products

References

6 links