CVE-2009-2862
The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214,…
Does this matter?
Lower severity and a low EPSS score (2.25%). Track it; it rarely justifies an emergency change on its own.
Description
The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122, and CSCsu50252.
- CVSS 2.0
- 4.3 MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N
- EPSS
- 2.25% probability · 82th percentile
- CISA KEV
- Not listed
- Affected
- cisco/ios
- Source
- psirt@cisco.com
References
- http://osvdb.org/58338Broken Link
- http://tools.cisco.com/security/center/viewAlert.x?alertId=18876Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtmlVendor Advisory
- http://www.securityfocus.com/bid/36495Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1022933Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2009/2759Permissions Required
- http://osvdb.org/58338Broken Link
- http://tools.cisco.com/security/center/viewAlert.x?alertId=18876Vendor Advisory
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtmlVendor Advisory
- http://www.securityfocus.com/bid/36495Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1022933Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2009/2759Permissions Required
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.