PT-2012-3198 · Cisco · Cisco Carrier Routing System

Publicado 2012-08-06 · Atualizado 2020-03-24 · CVE-2012-1342

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Carrier Routing System (CRS) versions 3.9 through 4.1

Description The issue allows remote attackers to bypass ACL entries via fragmented packets.

Recommendations For versions 3.9 through 4.1, update to a version that includes the fix for Bug ID CSCtj10975 to prevent ACL bypass via fragmented packets.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2012-1342

Produtos afetados

Cisco Carrier Routing System

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-1342 · Nota de Segurança
• http://cisco.com/cisco/software/release.html?mdfid=279506669&catid=268437899&flowid=1915&reltype=all&relind=AVAILABLE&release=3.9.2&softwareid=280867577 · Aviso do Fabricante