Unscored CVE-2012-0362 EUVD-2012-0398GHSA-47x8-856c-g54q

The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time keyword, which allows …

Published May 2, 2012 · Updated Aug 6, 2024 · Assigned by cisco

Description

The extended ACL functionality in Cisco IOS 12.2(58)SE2 and 15.0(1)SE discards all lines that end with a log or time keyword, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending network traffic, aka Bug ID CSCts01106.

References

[cisco-nsp] 20120202 Ambiguous ACL "log" in 12.2(58)SE2? mailing-list
1027005 vdb-entry