CVE-2005-3774: cisco pix
Vulnerability summary
CVE-2005-3774 is a medium (CVSS 5.0) vulnerability in cisco pix. EPSS estimates a 18.21% chance of exploitation in the next 30 days, higher than 97.2% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 23-11-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Cisco PIX 6.3 and 7.0 allows remote attackers to cause a denial of service (blocked new connections) via spoofed TCP packets that cause the PIX to create embryonic connections that that would not produce a valid connection with the end system, including (1) SYN packets with invalid checksums, which do not result in a RST; or, from an external interface, (2) one byte of "meaningless data," or (3) a TTL that is one less than needed to reach the internal destination.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
18.21%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 18.21% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundCisco PIX - Spoofed TCP SYN Packets Remote Denial of Service
Maturity: poc
Cisco PIX - TCP SYN Packet Denial of Service
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Cisco1 product
- pix6.3 | 7.0
1 vendor · 1 product
References
16 links- lists.grok.org.uk/pipermail/full-disclosure/2005-November/038983.htmlMailing ListX Refsource FULLDISC
Show all 16 references
- lists.grok.org.uk/pipermail/full-disclosure/2005-November/038971.htmlMailing ListX Refsource FULLDISCVendor Advisory