CVE-1999-0524

CVE-1999-0524 is a long-standing information disclosure vulnerability affecting a broad spectrum of vendors, including Cisco, Microsoft, and Linux, where systems permit ICMP timestamp or netmask responses to arbitrary hosts. Rated as low severity with a CVSS score of 2.1, this flaw allows attackers to gather reconnaissance data such as system time and network mask information, resulting in a partial loss of confidentiality without impacting integrity or availability. Currently, there are no known public exploits or active campaigns targeting this vulnerability, and it is not listed in the CISA Known Exploited Vulnerabilities catalog.