CVE-2005-4437

CVE-2005-4437 describes a flaw in MD5 Neighbor Authentication for EIGRP 1.2 in Cisco IOS 11.3 and later, where the Message Authentication Code is excluded from the checksum. This allows remote attackers to replay EIGRP HELLO messages or trigger a denial of service via spoofed neighbor announcements, leading to an ARP storm. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.