Unscored CVE-2013-6979 EUVD-2013-6780GHSA-rvr7-79c9-w4jr

The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network config…

Published Dec 23, 2013 · Updated Aug 6, 2024 · Assigned by cisco

Description

The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP address, aka Bug ID CSCuj90227.

References

cisco-iosxe-cve20136979-sec-bypass(89901) vdb-entry
1029537 vdb-entry
101351 vdb-entry
64502 vdb-entry
20131223 Cisco IOS XE Software Telnet Authentication Bypass Vulnerability vendor-advisory