CVE-2004-0244

Exp

Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet.

Published: 2004-11-23 Last update: 2026-04-16 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2004-0244 is rated High Exploit Risk (61.4/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 1.20%). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2004-0244

EDB-ID Source Kind Published Link
23638 exploit_db edb 2004-02-03 Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2004-0244

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2025-11-21 1.06% 1.20% +0.15%
2 2025-03-30 0.75% 1.06% +0.31%
3 2025-03-29 0.75%

Full EPSS history (8 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2004-0244

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
4.7 2.0 MEDIUM
AV:L/AC:M/Au:N/C:N/I:N/A:C Click to expand
Access vector (AV:L)
Requires local access to the target system.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:C)
Complete availability impact.
3.4 6.9 [email protected]

Weakness enumeration for CVE-2004-0244

Affected software / configurations for CVE-2004-0244

Vendor Product Version Raw CPE
cisco ios 12.1e cpe:2.3:o:cisco:ios:12.1e:*:*:*:*:*:*:*
cisco ios 12.2sy cpe:2.3:o:cisco:ios:12.2sy:*:*:*:*:*:*:*
cisco ios 12.2za cpe:2.3:o:cisco:ios:12.2za:*:*:*:*:*:*:*

References for CVE-2004-0244

cvelogic Threat Intelligence