CVE-2004-1112: cisco security_agent
Vulnerability summary
CVE-2004-1112 is a medium (CVSS 5.1) vulnerability in cisco security_agent. EPSS estimates a 1.50% chance of exploitation in the next 30 days, higher than 74.1% of scored vulnerabilities.
Timeline
- 01-12-2004PublishedVulnerability first disclosed.
- 08-08-2024Last modifiedVulnerability information updated.
Description
The buffer overflow trigger in Cisco Security Agent (CSA) before 4.0.3 build 728 waits five minutes for a user response before terminating the process, which could allow remote attackers to bypass the buffer overflow protection by sending additional buffer overflow attacks within the five minute timeout period.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.50%
Chance of exploitation in the next 30 days
Percentile
74%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.50% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Cisco1 product
- security_agent3 | 4.0 | 4.0.1 | 4.0.2 | 4.0.3
Okena1 product
- stormwatch3.x
2 vendors · 2 products
References
4 links- www.ciac.org/ciac/bulletins/p-036.shtmlThird Party AdvisoryGovernment ResourceX Refsource CIACVendor Advisory