CVE Catalog

CVE-1999-1548

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.05%

60th percentile - higher than 60% of all known CVEs

Summary

Cabletron SmartSwitch Router (SSR) 8000 with firmware 2.x can only handle 200 ARP requests per second, allowing a denial of service attack to succeed by flooding the router with ARP requests exceeding that limit.

Risk Assessment

An attacker can disrupt network access by exploiting the limitation in ARP request handling, leading to service outages.

Recommendation

It is recommended to update the router's firmware to the latest version to enhance resilience against denial of service attacks.

Original NVD description (English source)

Cabletron SmartSwitch Router (SSR) 8000 firmware 2.x can only handle 200 ARP requests per second allowing a denial of service attack to succeed with a flood of ARP requests exceeding that limit.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS