CVE-2012-0339
Cisco IOS 12.2-12.4 and 15.0 - Unauthenticated TELNET Access Bypass via VRF-Also Keyword Mishandling
Title source: llmDescription
Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary source IP addresses via a standard TELNET client, aka Bug ID CSCsi77774.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1027005
Release Notes x_refsource_confirm
http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/release/notes/caveats_SXF_rebuilds.html
Scores
EPSS
0.0103
EPSS Percentile
59.8%
Details
CWE
CWE-20
Status
published
Products (4)
cisco/ios
12.2
cisco/ios
12.3
cisco/ios
12.4
cisco/ios
15.0
Published
May 02, 2012
Tracked Since
Feb 18, 2026