CVE-2016-9201

A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. More Information: CSCuz21015. Known Affected Releases: 15.33M3. Known Fixed...

CVE-2016-9201

Cisco IOS and IOS XE Zone-Based Firewall (ZBF) vulnerability (CVE-2016-9201) allows an unauthenticated, remote attacker to bypass policy and pass traffic that should be dropped. Root cause is a logic flaw in ZBF policy processing: if only one egress zone pair exists and no reverse pair, return tr...