PT-1993-1008 · Cisco · Cisco Routers

Publicado 1993-04-22 · Atualizado 2017-12-19 · CVE-1999-1216

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco routers versions 9.17 and earlier

Description The issue allows remote attackers to bypass security restrictions by using certain IP source routed packets that should normally be denied. This is achieved despite the use of the "no ip source-route" command, which is intended to prevent such packets.

Recommendations For versions 9.17 and earlier, consider applying the "no ip source-route" command and ensuring that all access control lists and security configurations are properly set up to deny IP source routed packets. Additionally, review and tighten any existing security restrictions to prevent unauthorized access.

Correção

Identificadores relacionados

CVE-1999-1216

Produtos afetados

Cisco Routers

Referências · 4

• http://ciac.llnl.gov/ciac/bulletins/d-15.shtml · Aviso do Fabricante
• http://cert.org/advisories/CA-1993-07.html · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/541 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1216 · Nota de Segurança