7.1

CVE-2009-2863

Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Version12.0xk
Cisco ≫ Ios Version12.0xr
Cisco ≫ Ios Version12.1
Cisco ≫ Ios Version12.1e
Cisco ≫ Ios Version12.1ex
Cisco ≫ Ios Version12.1t
Cisco ≫ Ios Version12.1xc
Cisco ≫ Ios Version12.1xh
Cisco ≫ Ios Version12.1xi
Cisco ≫ Ios Version12.1xj
Cisco ≫ Ios Version12.1xm
Cisco ≫ Ios Version12.1xp
Cisco ≫ Ios Version12.1xr
Cisco ≫ Ios Version12.1yb
Cisco ≫ Ios Version12.1yd
Cisco ≫ Ios Version12.1yf
Cisco ≫ Ios Version12.1yi
Cisco ≫ Ios Version12.2
Cisco ≫ Ios Version12.2b
Cisco ≫ Ios Version12.2bw
Cisco ≫ Ios Version12.2cz
Cisco ≫ Ios Version12.2dd
Cisco ≫ Ios Version12.2ex
Cisco ≫ Ios Version12.2ey
Cisco ≫ Ios Version12.2fz
Cisco ≫ Ios Version12.2ira
Cisco ≫ Ios Version12.2irb
Cisco ≫ Ios Version12.2irc
Cisco ≫ Ios Version12.2ixa
Cisco ≫ Ios Version12.2ixb
Cisco ≫ Ios Version12.2ixc
Cisco ≫ Ios Version12.2ixd
Cisco ≫ Ios Version12.2ixe
Cisco ≫ Ios Version12.2ixf
Cisco ≫ Ios Version12.2ixg
Cisco ≫ Ios Version12.2s
Cisco ≫ Ios Version12.2sbc
Cisco ≫ Ios Version12.2se
Cisco ≫ Ios Version12.2sec
Cisco ≫ Ios Version12.2sed
Cisco ≫ Ios Version12.2see
Cisco ≫ Ios Version12.2sef
Cisco ≫ Ios Version12.2seg
Cisco ≫ Ios Version12.2sg
Cisco ≫ Ios Version12.2sga
Cisco ≫ Ios Version12.2sq
Cisco ≫ Ios Version12.2sra
Cisco ≫ Ios Version12.2srb
Cisco ≫ Ios Version12.2src
Cisco ≫ Ios Version12.2su
Cisco ≫ Ios Version12.2sx
Cisco ≫ Ios Version12.2sxa
Cisco ≫ Ios Version12.2sxb
Cisco ≫ Ios Version12.2sxd
Cisco ≫ Ios Version12.2sxe
Cisco ≫ Ios Version12.2sxf
Cisco ≫ Ios Version12.2sxh
Cisco ≫ Ios Version12.2sxi
Cisco ≫ Ios Version12.2t
Cisco ≫ Ios Version12.2tpc
Cisco ≫ Ios Version12.2xa
Cisco ≫ Ios Version12.2xb
Cisco ≫ Ios Version12.2xd
Cisco ≫ Ios Version12.2xe
Cisco ≫ Ios Version12.2xg
Cisco ≫ Ios Version12.2xj
Cisco ≫ Ios Version12.2xk
Cisco ≫ Ios Version12.2xl
Cisco ≫ Ios Version12.2xm
Cisco ≫ Ios Version12.2xo
Cisco ≫ Ios Version12.2xq
Cisco ≫ Ios Version12.2xt
Cisco ≫ Ios Version12.2xv
Cisco ≫ Ios Version12.2xw
Cisco ≫ Ios Version12.2ya
Cisco ≫ Ios Version12.2yb
Cisco ≫ Ios Version12.2yc
Cisco ≫ Ios Version12.2ye
Cisco ≫ Ios Version12.2yf
Cisco ≫ Ios Version12.2yh
Cisco ≫ Ios Version12.2yl
Cisco ≫ Ios Version12.2ym
Cisco ≫ Ios Version12.2yn
Cisco ≫ Ios Version12.2yq
Cisco ≫ Ios Version12.2yu
Cisco ≫ Ios Version12.2yv
Cisco ≫ Ios Version12.2yx
Cisco ≫ Ios Version12.2yz
Cisco ≫ Ios Version12.2zd
Cisco ≫ Ios Version12.2zh
Cisco ≫ Ios Version12.2zj
Cisco ≫ Ios Version12.2zl
Cisco ≫ Ios Version12.2zy
Cisco ≫ Ios Version12.2zya
Cisco ≫ Ios Version12.3
Cisco ≫ Ios Version12.3b
Cisco ≫ Ios Version12.3jk
Cisco ≫ Ios Version12.3t
Cisco ≫ Ios Version12.3tpc
Cisco ≫ Ios Version12.3va
Cisco ≫ Ios Version12.3xa
Cisco ≫ Ios Version12.3xc
Cisco ≫ Ios Version12.3xd
Cisco ≫ Ios Version12.3xe
Cisco ≫ Ios Version12.3xf
Cisco ≫ Ios Version12.3xg
Cisco ≫ Ios Version12.3xk
Cisco ≫ Ios Version12.3xl
Cisco ≫ Ios Version12.3xq
Cisco ≫ Ios Version12.3xr
Cisco ≫ Ios Version12.3xx
Cisco ≫ Ios Version12.3ya
Cisco ≫ Ios Version12.3yd
Cisco ≫ Ios Version12.3yg
Cisco ≫ Ios Version12.3yh
Cisco ≫ Ios Version12.3yi
Cisco ≫ Ios Version12.3yk
Cisco ≫ Ios Version12.3ym
Cisco ≫ Ios Version12.3yt
Cisco ≫ Ios Version12.3yz
Cisco ≫ Ios Version12.4
Cisco ≫ Ios Version12.4mr
Cisco ≫ Ios Version12.4t
Cisco ≫ Ios Version12.4xa
Cisco ≫ Ios Version12.4xd
Cisco ≫ Ios Version12.4xe
Cisco ≫ Ios Version12.4xf
Cisco ≫ Ios Version12.4xj
Cisco ≫ Ios Version12.4xk
Cisco ≫ Ios Version12.4xt
Cisco ≫ Ios Version12.4xv
Cisco ≫ Ios Version12.4xw
Cisco ≫ Ios Version12.4xy
Cisco ≫ Ios Version12.4xz
Cisco ≫ Ios Version12.4ya
Cisco ≫ Ios Version12.4yb
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.47% 0.824
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.1 8.6 6.9
AV:N/AC:M/Au:N/C:C/I:N/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://osvdb.org/58340
http://tools.cisco.com/security/center/viewAlert.x?alertId=18882
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8132.shtml
Vendor Advisory
http://www.securityfocus.com/bid/36491
http://www.securitytracker.com/id?1022935
https://exchange.xforce.ibmcloud.com/vulnerabilities/53453