imPC@ndo IT

Tracker / CVE-2015-0694

CVE-2015-0694

Medium 5.0

Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access restrictions by using an address that was not supposed to have been allowed, aka Bug ID CSCur28806.

Affected products and versions

cisco asr_9001
cisco asr_9006
cisco asr_9010
cisco asr_9904
cisco asr_9912
cisco asr_9922
cisco ios_xr

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References