CVE-2012-0339

EPSS 0.24%
Published 02.05.2012 10:09:22
Last modified 11.04.2025 00:51:21
Source psirt@cisco.com
Teams watchlist Login
Open Login

Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish TELNET connections from arbitrary source IP addresses via a standard TELNET client, aka Bug ID CSCsi77774.

Affected products Warnungen 0 Metrics 2 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Ios Version12.2

Cisco ≫ Ios Version12.3

Cisco ≫ Ios Version12.4

Cisco ≫ Ios Version15.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.24%	0.447

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securitytracker.com/id?1027005

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/release/notes/caveats_SXF_rebuilds.html

https://nvd.nist.gov/vuln/detail/CVE-2012-0339

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-0339

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-0339

EUVD