Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2004-1749: Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing config

36
Routine
MEDIUM 5.0MITIGATE

CVE-2004-1749 is a medium-severity flaw (CVSS 5.0) affecting attack mitigator. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service (CPU consumption) via a large number of HTTP requests.

Why this priority

  • No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score5.0 (Medium)
EPSS exploit chance1.6% (top 24%)
CISA exploited listNo
Published2004-07-22
Last modified2026-06-16
Publisher (CNA): MITRE · Vendor: toplayer

Share: LinkedIn · X · Reddit

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

toplayer attack mitigator MITIGATE
Affected: 5500_3.11.008
Fixed in: no fixed release known
Safe to downgrade to: a release before 5500_3.11.008
Firmware
Install the latest firmware from the vendor advisory; if none, apply the vendor workaround.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2004-1749?

attack mitigator: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2004-1749 being exploited?

CVE-2004-1749 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2004-1749 affect?

CVE-2004-1749 affects attack mitigator. Severity is medium (CVSS 5.0). Attack Mitigator IPS 5500 3.11.008, and possibly other versions, when configured in a one-armed routing configuration, allows remote attackers to cause a denial of service (CPU consumption) via a large number of HTTP requests.

How urgent is CVE-2004-1749?

Priority 36/100. No elevated risk signals yet.

References

← Back to latest CVEs

Get the weekly exploited-CVE digest by emailThe CVEs being attacked this week and how to fix them. No spam, unsubscribe any time.