VULNERABILITY INTELLIGENCE

CVE-2015-0694

CVSS score5 MEDIUM
EPSS probability1.63%
CISA KEVNot currently listed
Published2015-04-11
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access restrictions by using an address that was not supposed to have been allowed, aka Bug ID CSCur28806.

Weakness classification

  • CWE-284: Improper Access Control

Primary references