Vulnerability in Cisco iOS

CVE-2009-2862

The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122, and CSCsu50252.

EPSS: 0.023 (81.1th percentile) — read the EPSS interpretation.

Affected products

Cisco Ios — versions 12.2xnb, 12.2xnc, 12.2xnd
N/a — versions n/a

References

psirt@cisco.com (x_refsource_OSVDB, vdb-entry, Broken Link)
psirt@cisco.com (Permissions Required, vdb-entry, x_refsource_VUPEN)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)