Unrated severityNVD Advisory· Published Dec 31, 2002· Updated Jun 16, 2026

CVE-2002-2316

Description

Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing.

Affected products

Cisco Systems, Inc./Catos3 versions
cpe:2.3:o:cisco:catos:5.5\(5\):*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:cisco:catos:5.5\(5\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:6.3\(5\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:catos:7.1\(2\):*:*:*:*:*:*:*
Cisco Systems, Inc./Catalyst 4000 series switchesllm-fuzzy
Range: 5.5.5, 6.3.5, 7.1.2

Patches

Vulnerability mechanics

References

archives.neohapsis.com/archives/bugtraq/2002-05/0190.htmlnvdExploit
archives.neohapsis.com/archives/bugtraq/2002-06/0209.htmlnvdExploit
www.iss.net/security_center/static/9148.phpnvd
www.securityfocus.com/bid/4790nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000