CVE-2004-0054: Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remot...

Security readout for executives and security teams

This is an old Cisco IOS H.323 processing flaw. A remote attacker could crash affected network devices and possibly run arbitrary code. The public bundle identifies Cisco IOS 11.3T through 12.2T and H.225 protocol testing as the trigger context, but does not provide CVSS, detailed affected inventory, or confirmed active exploitation. Exposure is most likely on legacy Cisco IOS devices in the stated 11.3T through 12.2T range that process H.323/H.225 traffic. The bundle does not identify specific models, configurations, ports, or whether later trains are affected. Prioritize if legacy Cisco IOS systems still support voice or multimedia traffic, especially at network boundaries. For modern environments without those IOS trains, urgency is mainly inventory assurance and legacy retirement. Mitigation focus: Review Cisco advisory cisco-sa-20040113-h323 for fixed software and workarounds.; Inventory Cisco IOS devices running 11.3T through 12.2T.; Limit H.323/H.225 exposure to trusted networks where business-required..

Prepared

Jun 30, 2026, 07:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.