PT-2015-4754 · Cisco · Cisco Ios

Publicado 2015-02-11 · Atualizado 2017-09-08 · CVE-2015-0610

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.5(2)T and earlier

Description A race condition in the object-group ACL feature allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching. The vulnerability is due to a race condition between process switching and CEF switching while evaluating ACLs with object groups. An attacker could exploit this vulnerability by sending enough traffic through an affected router to trigger the race condition. The attacker may need access to trusted, internal networks behind a firewall to send enough traffic to trigger a race condition on the targeted device.

Recommendations For Cisco IOS versions 15.5(2)T and earlier, update to a newer version that includes the fix for this issue, as confirmed by Cisco in their security notice. As a temporary workaround, consider restricting access to the affected router to minimize the risk of exploitation.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2015-0610

Produtos afetados

Cisco Ios

Referências · 7

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20150211-CVE-2015-0610 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0610 · Aviso do Fabricante
• http://tools.cisco.com/security/center/viewAlert.x?alertId=37423 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/100807 · Nota
• http://securityfocus.com/bid/72565 · Nota
• http://securitytracker.com/id/1031732 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-0610 · Nota de Segurança