CVE Vulnerabilities

CVE-2012-0362

Published: May 02, 2012 | Modified: Oct 30, 2012
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106.

Affected Software

Name Vendor Start Version End Version
Ios Cisco 12.2(58)ses (including) 12.2(58)ses (including)
Ios Cisco 15.0(1)se (including) 15.0(1)se (including)

References