Description
Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access restrictions by using an address that was not supposed to have been allowed, aka Bug ID CSCur28806.
References
- 20150409 Cisco Aggregate Services Router 9000 ASR9K Security Bypass Vulnerability vendor-advisory
- 1032059 vdb-entry