CVE-2009-2862

Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, 12.4YA - Access Control Bypass via Crafted Requests

Title source: llm

Description

The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122, and CSCsu50252.

References (6)

Core 6

Core References

Broken Link vdb-entry x_refsource_osvdb

http://osvdb.org/58338

Permissions Required vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2009/2759

Broken Link, Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1022933

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/36495

Vendor Advisory vendor-advisory x_refsource_cisco

http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8119.shtml

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=18876

Scores

EPSS 0.0225

EPSS Percentile 81.1%

Details

Status published

Products (7)

cisco/ios 12.2xnb

cisco/ios 12.2xnc

cisco/ios 12.2xnd

cisco/ios 12.4md

cisco/ios 12.4t

cisco/ios 12.4xz

cisco/ios 12.4ya

Published Sep 28, 2009

Tracked Since Feb 18, 2026