CVE-2015-0694

Cisco ASR 9000 devices running software around 5.3.0.BASE are affected by CVE-2015-0694 due to an Object-ACL matching flaw (Bug CSCur28806) that can let an unauthenticated, remote attacker bypass ACL restrictions. Impact is potential access to restricted resources or traffic alteration depending ...

CVE-2015-0694: Improper Access Control

Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access restrictions by using an address that was not supposed to have been allowed, aka Bug ID CSCur28806...