Cisco IOS Software Security Restriction Bypass Vulnerability (CVE-2015-0610)

Cisco IOS Software Security Restriction Bypass Vulnerability (CVE-2015-0610)

Release date:
Updated on:

Affected Systems:
Cisco IOS
Description:
Bugtraq id: 72565
CVE (CAN) ID: CVE-2015-0610

Cisco IOS is an interconnected network operating system used on most Cisco system routers and network switches.

Cisco IOS has a security vulnerability in the access control list of an object group. unauthenticated remote attackers can exploit this vulnerability to bypass the ACL. This vulnerability is triggered if a race condition exists between process switches and Cisco Express Forwarding Switches during ACL evaluation.

<* Source: vendor
*>

Suggestion:
Vendor patch:

Cisco
-----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0610

This article permanently updates the link address: