Lucene search

CiscoCVE-2015-6366

HistoryNov 13, 2015 - 3:59 a.m.

CVE-2015-6366

2015-11-1303:59:02

CWE-284

cisco

web.nvd.nist.gov

cisco

ios

network security

remote attack

tunnel interface

bug id cscur01042

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

49.6%

JSON

Cisco IOS 15.2(04)M6 and 15.4(03)S lets physical-interface ACLs supersede tunnel-interface ACLs, which allows remote attackers to bypass intended network-traffic restrictions in opportunistic circumstances by using a tunnel, aka Bug ID CSCur01042.

Affected configurations

Nvd

Node

ciscoiosMatch15.2\(4\)m6

ciscoiosMatch15.4\(3\)s

VendorProductVersionCPE
ciscoios15.2(4)m6cpe:2.3:o:cisco:ios:15.2\(4\)m6:*:*:*:*:*:*:*
ciscoios15.4(3)scpe:2.3:o:cisco:ios:15.4\(3\)s:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios	15.2(4)m6	cpe:2.3:o:cisco:ios:15.2\(4\)m6:::::::*
cisco	ios	15.4(3)s	cpe:2.3:o:cisco:ios:15.4\(3\)s:::::::*

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151112-ios2

www.securitytracker.com/id/1034141

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

49.6%

JSON

Related for CVE-2015-6366