PT-1993-1008 · Cisco · Cisco Routers

Published 1993-04-22 · Updated 2017-12-19 · CVE-1999-1216

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco routers versions 9.17 and earlier

Description The issue allows remote attackers to bypass security restrictions by using certain IP source routed packets that should normally be denied. This is achieved despite the use of the "no ip source-route" command, which is intended to prevent such packets.

Recommendations For versions 9.17 and earlier, consider applying the "no ip source-route" command and ensuring that all access control lists and security configurations are properly set up to deny IP source routed packets. Additionally, review and tighten any existing security restrictions to prevent unauthorized access.

Fix

Related Identifiers

CVE-1999-1216

Affected Products

Cisco Routers

References · 4

• http://ciac.llnl.gov/ciac/bulletins/d-15.shtml · Vendor Advisory
• http://cert.org/advisories/CA-1993-07.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-1999-1216 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/541 · Note