VULNERABILITY INTELLIGENCE
CVE-2009-2862
CVSS score4.3 NONE
EPSS probability2.25%
CISA KEVNot currently listed
Published2009-09-28
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
The Object Groups for Access Control Lists (ACLs) feature in Cisco IOS 12.2XNB, 12.2XNC, 12.2XND, 12.4MD, 12.4T, 12.4XZ, and 12.4YA allows remote attackers to bypass intended access restrictions via crafted requests, aka Bug IDs CSCsx07114, CSCsu70214, CSCsw47076, CSCsv48603, CSCsy54122, and CSCsu50252.
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- psirt@cisco.com — Broken Link
- psirt@cisco.com — Vendor Advisory
- psirt@cisco.com — Vendor Advisory
- psirt@cisco.com — Third Party Advisory, VDB Entry
- psirt@cisco.com — Broken Link, Third Party Advisory, VDB Entry
- psirt@cisco.com — Permissions Required
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required