Unscored CVE-2015-6366 EUVD-2015-6308GHSA-686v-2qvh-3m6r

Cisco IOS 15.2(04)M6 and 15.4(03)S lets physical-interface ACLs supersede tunnel-interface ACLs, which allows remote attackers to bypass in…

Published Nov 13, 2015 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco IOS 15.2(04)M6 and 15.4(03)S lets physical-interface ACLs supersede tunnel-interface ACLs, which allows remote attackers to bypass intended network-traffic restrictions in opportunistic circumstances by using a tunnel, aka Bug ID CSCur01042.

References

1034141 vdb-entry
20151112 Cisco IOS Software Tunnel Interfaces Security Bypass Vulnerability vendor-advisory