Lucene search

[email protected]CVE-2009-2862

HistorySep 28, 2009 - 7:30 p.m.

CVE-2009-2862

2009-09-2819:30:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cisco

ios

acls

security vulnerability

cve-2009-2862

access control

remote attack

6.9 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

71.7%

JSON

The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122, and CSCsu50252.

CPENameOperatorVersion
cisco:ioscisco ioseq12.2xnd
cisco:ioscisco ioseq12.4t
cisco:ioscisco ioseq12.4ya
cisco:ioscisco ioseq12.4xz
cisco:ioscisco ioseq12.2xnb
cisco:ioscisco ioseq12.4md
cisco:ioscisco ioseq12.2xnc

CPE	Name	Operator	Version
cisco:ios	cisco ios	eq	12.2xnd
cisco:ios	cisco ios	eq	12.4t
cisco:ios	cisco ios	eq	12.4ya
cisco:ios	cisco ios	eq	12.4xz
cisco:ios	cisco ios	eq	12.2xnb
cisco:ios	cisco ios	eq	12.4md
cisco:ios	cisco ios	eq	12.2xnc

References

osvdb.org/58338

tools.cisco.com/security/center/viewAlert.x?alertId=18876

www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtml

www.securityfocus.com/bid/36495

www.securitytracker.com/id?1022933

www.vupen.com/english/advisories/2009/2759

Social References

6.9 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

71.7%

JSON

Related for CVE-2009-2862

cisco1 securityvulns2 prion1 nessus1