CVE-2004-0230

mediumpriority · attend · 58EPSS 0.803 · 100 %ileexploit · functionalDEEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

7 exploits · functional

Likely / severe?

80.3% (100th) EPSS

CVSS 5 · medium

Is it mine?

66 products

Check your exposure

Who says so?

4 sources

enisa_euvd · fstec_bdu · nvd · pepperl_fuchs_psirt

EPSS · scored 2026-10-23

TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

No vendor fix yet; a mitigation is available.

Mitigationpepperl_fuchs_psirt
External protective measures are required: Disable the webserver after configuration, if possible, by following these steps: - Enable SSH via the web server. - Login to the SSH server. - Disable the webserver via SSH portal. - Reboot the device. or: - Use HTTPS rather than HTTP while using the webserver. - Minimize network exposure for affected products and ensure that they are not accessible via the Internet. - Isolate affected products from the corporate network. - If remote access is required, use secure methods such as virtual private networks(VPNs). Pepperl+Fuchs will provide an update to address some of these vulnerabilities in the future.

cvss

Technical severity, 0–10. One row per scoring source.

5.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USexploitability 10 · impact 2.9

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Psecondary · Pepperl+Fuchs PSIRT DE

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:P/E:Hsecondary · CVSS-BT (t0sche)

v3.15.3mediumAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Lsecondary · FSTEC (BDU) RU

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-331USCWE-400US

exploits (7)

Public proof-of-concept and weaponised exploit code.

EDB-24030Multiple Vendor - TCP Sequence Number Approximation (1)functional · exploit_db
EDB-24031Multiple Vendor - TCP Sequence Number Approximation (2)functional · exploit_db
EDB-24032Multiple Vendor - TCP Sequence Number Approximation (3)functional · exploit_db
EDB-24033Multiple Vendor - TCP Sequence Number Approximation (4)functional · exploit_db
EDB-276Microsoft Windows XP/2000 - TCP Connection Resetfunctional · exploit_db
EDB-291TCP Connection Reset - Remote Denial of Servicefunctional · exploit_db

affected products (66)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Fanuc Corp. Fanuc≤ 32ifstec_bduRU
Juniper Networks Inc. JunOSall versionsfstec_bduRU
McAfee Inc. McAfee Data Loss Prevention≤ 9.2.2fstec_bduRU
McAfee Inc. McAfee Data Loss Prevention≤ 8.6fstec_bduRU
McAfee Inc. McAfee Data Loss Prevention≤ 9.2.1fstec_bduRU
McAfee Inc. McAfee Data Loss Prevention≤ 9.2.0fstec_bduRU
Oracle Corp. Solaris≤ 10fstec_bduRU
Oracle Corp. Solaris≤ 11fstec_bduRU
The NetBSD Project NetBSD≤ 1.5.2fstec_bduRU
The NetBSD Project NetBSD≤ 1.5.1fstec_bduRU
The NetBSD Project NetBSD≤ 2.0fstec_bduRU
The NetBSD Project NetBSD≤ 1.5.3fstec_bduRU
The NetBSD Project NetBSD≤ 1.5fstec_bduRU
The NetBSD Project NetBSD≤ 1.6fstec_bduRU
The NetBSD Project NetBSD≤ 1.6.1fstec_bduRU
The NetBSD Project NetBSD≤ 1.6.2fstec_bduRU
АО «НППКТ» ОСОН ОСнова Оnyx≤ 2.7fstec_bduRU
juniper junos< 11.4nvdUScpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*
juniper junos= 11.4nvdUScpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*

showing 20 of 66

advisories (1)

Vendor and ecosystem advisories describing this.

VDE-2024-017Pepperl+Fuchs: ICE2- * and ICE3- * are affected by multiple vulnerabilities2024-04-10csaf · pepperl_fuchs_psirtDE
Critical vulnerabilities have been discovered in the product due to outdated software components.The impact of the vulnerabilities on the affected device may result in Denial of service Bypassing of authentication Information disclosure

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

enisa_euvd fstec_bdu nvd pepperl_fuchs_psirt NVD CVE.org MITRE

published 2004-08-18modified 2026-10-09

references (48)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan