CVE-2004-2549
NVD-CWE-OtherPublished: December 31, 2004· Updated: Jun 16, 2026
Official Description
Nortel Wireless LAN (WLAN) Access Point (AP) 2220, 2221, and 2225 allow remote attackers to cause a denial of service (service crash) via a TCP request with a large string, followed by 8 newline characters, to (1) the Telnet service on TCP port 23 and (2) the HTTP service on TCP port 80, possibly due to a buffer overflow.
Technical Analysis
CVE-2004-2549 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.
Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.
A proof-of-concept (PoC) exploit exists for CVE-2004-2549. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.
CVSS v3.1 Vector Breakdown
Affected Vendors & Products
Exploit & PoC Resources
Official Patches & Advisories
All References (14)
Quick Facts
Related CVEs (NVD-CWE-Other)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2004-2549 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts