Description
Cisco IOS 15.2(04)M and 15.4(03)M lets physical-interface ACLs supersede virtual PPP interface ACLs, which allows remote authenticated users to bypass intended network-traffic restrictions in opportunistic circumstances by using PPP, aka Bug ID CSCur61303.
References
- 20151113 Cisco IOS Software Virtual PPP Interfaces Security Bypass Vulnerability vendor-advisory
- 1034158 vdb-entry