CVE-2002-0813: Heap-based buffer overflow in the TFTP server capability in Cisco IOS 11.1, 11.2, and 11.3 allows remote at...

Security readout for executives and security teams

This flaw affects old Cisco IOS devices where the built-in TFTP server can mishandle an overly long filename. A remote attacker could reset the device, and the CVE also reports possible configuration modification. It matters mainly for environments still running IOS 11.1, 11.2, or 11.3 with TFTP reachable. Exposure is likely limited to legacy Cisco IOS 11.1, 11.2, or 11.3 systems where the TFTP server capability is enabled and reachable from untrusted or broad network segments. Prioritize any internet-facing or broadly reachable legacy Cisco IOS devices. The vulnerability is old, but the impact includes device reset and possible configuration changes, which can affect network availability and control. Mitigation focus: Inventory Cisco IOS 11.1, 11.2, and 11.3 devices.; Check Cisco’s advisory for fixed releases and supported remediation.; Disable the IOS TFTP server capability where it is not operationally required..

Prepared

Jun 30, 2026, 12:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.