Auth bypass in Cisco Ios

CVE-2012-4658

The ios-authproxy implementation in Cisco IOS before 15.1(1)SY3 allows remote attackers to cause a denial of service (webauth and HTTP service outage) via vectors that trigger incorrectly terminated HTTP sessions, aka Bug ID CSCtz99447.

Vulnerability class: Broken Authentication

EPSS: 0.013 (67.1th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 15.1, 15.1\(1\)sy, 15.1\(1\)sy1
  • N/a — versions n/a

Weakness classification (CWE)

References