CVE-2014-2146

Cisco IOS and IOS XE Zone-Based Firewall (ZBFW) features (likely IOS 15.4 and earlier; IOS XE 3.13 and earlier) are affected by a vulnerability in zone checking for existing sessions. This mishandling allows unauthenticated, remote attackers to bypass resource-access restrictions by injecting spo...

Cisco IOS Zone-Based Firewall Feature Security Bypass (CSCun94946)

According to its self-reported version, the Cisco IOS software running on the remote device is affected by a security bypass vulnerability in the Zone-Based Firewall feature due to insufficient zone checking for traffic belonging to existing sessions. An unauthenticated, remote attacker can explo...