PT-2016-6896 · Cisco · Cisco Ios

Published 2016-10-05 · Updated 2017-07-30 · CVE-2016-6422

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2(33)SXJ9

Description The issue is related to the improper handling of certain operators, flags, and keywords in TCAM share ACLs, allowing remote attackers to bypass intended access restrictions. This is due to the improper implementation of PACL logic for ACEs that include a greater than operator, a less than operator, a tcp flag, the established keyword, or the range keyword. An attacker could exploit this by sending packets that meet one or more filter criteria through an affected device, potentially bypassing the filters defined in the PACL for a targeted system.

Recommendations For Cisco IOS version 12.2(33)SXJ9, update to a newer version that addresses this issue, as software updates have been released by Cisco. As a temporary workaround, consider restricting access to the vulnerable TCAM share ACL functionality until a patch is applied. Additionally, applying the available workarounds could help mitigate this issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-6422

Affected Products

Cisco Ios

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-6422 · Security Note
• https://osv.dev/vulnerability/CVE-2016-6422 · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-catalyst · Vendor Advisory
• http://securityfocus.com/bid/93404 · Note
• http://securitytracker.com/id/1036954 · Note