CVE-2005-4437 json
MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not…
published 2005-12-21 20 y ago modified 2026-06-16 4 mo ago also EUVD-2005-4432
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 2.4%
- EPSS 2.4% chance of exploitation in 30 days, percentile 84%
- public exploits
- 0
- none known
Summary
MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.
Exploit prediction
2.39% chance of exploitation in the next 30 days, higher than 84% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
lists.grok.org.uk
/pipermail/full-disclosure/2005-December/040332.html
mailing-list, vendor-advisory
-
vupen.com
/english/advisories/2005/3008
vdb-entry
-
securityfocus.com
/archive/1/419830/100/0/threaded
mailing-list
-
securityfocus.com
/bid/15970
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5741
vdb-entry, signature
-
securityfocus.com
/archive/1/419898/100/0/threaded
mailing-list
-
securityreason.com
/securityalert/274
third-party-advisory
-
marc.info
/?l=full-disclosure&m=113504451523186&w=2
mailing-list
-
securitytracker.com
/id?1015382
vdb-entry
Sources
- CVE List CVE-2005-4437
- NVD CVE-2005-4437
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.