CVE-2012-0362

The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106.

Score

CVSS 2.0 4.3 Medium

Status

Modified - psirt@cisco.com

Published

2012-05-02

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Ios (Cisco)

References

• http://puck.nether.net/pipermail/cisco-nsp/2012-February/083517.html
• http://www.securitytracker.com/id?1027005