PT-2010-1000 · Cisco · Cisco Ios

Published 2010-08-16 · Updated 2012-10-30 · CVE-2012-0338

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 and 15.0

Description The issue concerns the Cisco IOS operating system, which fails to recognize the vrf-also keyword during the execution of access-class commands. This allows a remote attacker to establish a network connection using the TELNET or SSH protocol from arbitrary source IP addresses.

Recommendations For Cisco IOS versions 12.2 through 12.4, consider restricting access to the access-class command until a patch is available. For Cisco IOS version 15.0, restrict access to the access-class command until a patch is available. As a temporary workaround, consider disabling the use of the vrf-also keyword in access-class commands to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2014-00223

CVE-2012-0338

Affected Products

Cisco Ios

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2012-0338 · Security Note
• https://bdu.fstec.ru/vul/2014-00223 · Security Note
• http://securitytracker.com/id?1027005 · Note
• https://supportforums.cisco.com/thread/2030226 · Note
• http://cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/release/notes/caveats_SXF_rebuilds.html · Note
• http://cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXH_rebuilds.html · Note