CVEvulnerability

CVE-1999-1466

7.5 HIGH Published 1992-12-10 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1992-12-10
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Vulnerability in Cisco routers versions 8.2 through 9.1 allows remote attackers to bypass access control lists when extended IP access lists are used on certain interfaces, the IP route cache is enabled, and the access list uses the "established" keyword.

Affected configurations

• cisco ios 8.2 • cisco ios 8.3 • cisco ios 9.0 • cisco ios 9.1

References