VULNERABILITY INTELLIGENCE

CVE-2009-2863

CVSS score7.1 HIGH
EPSS probability2.47%
CISA KEVNot currently listed
Published2009-09-28
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:N/A:N

Description

Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227.

Weakness classification

  • CWE-287: Improper Authentication

Primary references