VULNERABILITY INTELLIGENCE

CVE-1999-1306

CVSS score7.5 HIGH

EPSS probability1.39%

CISA KEVNot currently listed

Published1992-12-10

Last modified2026-06-16

CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the "established" keyword is set, which could allow attackers to bypass filters.

Primary references

cve@mitre.org — Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, US Government Resource