CVE-1999-0524
MEDIUM 4.0EPSS 32.2%
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
- CVSS v3.1 CNA
- 4.0 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N - CVSS v2.0 NVD
- 2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 32.15% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2000-02-04
- Updated
- 2026-05-28
Proof-of-concept exploits (3)
- Ransc0rp1on/ICMP-Timestamp-POC0★ · 2025-09-12
- threatlabindonesia/CVE-1999-0524-ICMP-Timestamp-and-Address-Mask-Request-Exploit3★ · 2024-11-25
- biontdv/CVE-1999-0524-POC1★ · 2026-07-14
Security advisories
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- http://kb.vmware.com/selfservice/microsites/search.do?cmd=displayKC&externalId=1434
- https://exchange.xforce.ibmcloud.com/vulnerabilities/306
- https://exchange.xforce.ibmcloud.com/vulnerabilities/322
- https://kc.mcafee.com/corporate/index?page=content&id=SB10053