CVE-2012-0338
Cisco IOS 12.2-12.4 and 15.0 - Unauthenticated SSH Access Bypass via VRF-Also Keyword Misconfiguration
Title source: llmDescription
Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH connections from arbitrary source IP addresses via a standard SSH client, aka Bug ID CSCsv86113.
References (3)
Core 3
Core References
Various Sources x_refsource_confirm
https://supportforums.cisco.com/thread/2030226
Release Notes x_refsource_confirm
http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXH_rebuilds.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1027005
Scores
EPSS
0.0132
EPSS Percentile
67.5%
Details
CWE
CWE-20
Status
published
Products (4)
cisco/ios
12.2
cisco/ios
12.3
cisco/ios
12.4
cisco/ios
15.0
Published
May 02, 2012
Tracked Since
Feb 18, 2026