CVE-2005-4826
Estado: ModificadaMedia (6.1)—
Gravedad6.1Media · CVSS 2.0
Probabilidad de explotación0.99 %mayor que el 62 % de las CVE
Explotación activaNono figura en el catálogo de CISA
Exploit públicoNo conocidosin código público localizado
Vulnerabilidad no especificada en la función VLAN Trunking Protocol (VTP) de Cisco IOS 12.1(22)EA3 en conmutadores Catalyst 2950T permite a atacantes remotos provocar una denegación de servicio (reinicio del dispositivo) mediante un paquete de mensaje Subset-Advert manipulado, un problema distinto de CVE-2006-4774, CVE-2006-4775 y CVE-2006-4776.
Traducción automática del texto original de NVD (en inglés).
CVSS
- Puntuación base
- 6.1
- Versión
- 2.0
- Vector
- AV:A/AC:L/Au:N/C:N/I:N/A:C
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días
- 0.99 %
- Percentil entre todas las CVEs puntuadas
- 62
- Fecha de la puntuación
- 22/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-Other
Referencias
Mostrar las 22 referencias
- http://osvdb.org/33013
- http://secunia.com/advisories/23892
- http://securitytracker.com/id?1017568
- http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta
- http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html
- http://www.s21sec.com/en/avisos/s21sec-034-en.txt
- http://www.securityfocus.com/archive/1/458240/100/0/threaded
- http://www.securityfocus.com/archive/1/458554/100/0/threaded
- http://www.securityfocus.com/bid/22268
- http://www.vupen.com/english/advisories/2007/0414
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544
- http://osvdb.org/33013
- http://secunia.com/advisories/23892
- http://securitytracker.com/id?1017568
- http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta
- http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html
- http://www.s21sec.com/en/avisos/s21sec-034-en.txt
- http://www.securityfocus.com/archive/1/458240/100/0/threaded
- http://www.securityfocus.com/archive/1/458554/100/0/threaded
- http://www.securityfocus.com/bid/22268
- http://www.vupen.com/english/advisories/2007/0414
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544
JSON original (NVD)
Mostrar
{
"id": "CVE-2005-4826",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.1,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.5,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2005-12-31T05:00:00.000",
"references": [
{
"url": "http://osvdb.org/33013",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/23892",
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1017568",
"source": "cve@mitre.org"
},
{
"url": "http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta",
"source": "cve@mitre.org"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html",
"source": "cve@mitre.org"
},
{
"url": "http://www.s21sec.com/en/avisos/s21sec-034-en.txt",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/458240/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/archive/1/458554/100/0/threaded",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/22268",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2007/0414",
"source": "cve@mitre.org"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/33013",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/23892",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1017568",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.blackhat.com/html/bh-europe-05/bh-eu-05-speakers.html#Berrueta",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_response09186a00807d1a81.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.s21sec.com/en/avisos/s21sec-034-en.txt",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/458240/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/458554/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/22268",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2007/0414",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5544",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the VLAN Trunking Protocol (VTP) feature in Cisco IOS 12.1(22)EA3 on Catalyst 2950T switches allows remote attackers to cause a denial of service (device reboot) via a crafted Subset-Advert message packet, a different issue than CVE-2006-4774, CVE-2006-4775, and CVE-2006-4776."
}
],
"lastModified": "2026-06-16T22:19:31.513",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios:12.1\\(22\\)ea3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AB440BC6-9FC8-4EFD-B05E-3F5A5A68F8EF"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}