CVEvulnerability

CVE-2009-2863

7.1 HIGH Published 2009-09-28 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-09-28
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:C/I:N/A:N
Weaknesses
CWE-287

Description

Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227.

Affected configurations

• cisco ios 12.0xk • cisco ios 12.0xr • cisco ios 12.1 • cisco ios 12.1e • cisco ios 12.1ex • cisco ios 12.1t • cisco ios 12.1xc • cisco ios 12.1xh • cisco ios 12.1xi • cisco ios 12.1xj • cisco ios 12.1xm • cisco ios 12.1xp • cisco ios 12.1xr • cisco ios 12.1yb • cisco ios 12.1yd • cisco ios 12.1yf • cisco ios 12.1yi • cisco ios 12.2 • cisco ios 12.2b • cisco ios 12.2bw • cisco ios 12.2cz • cisco ios 12.2dd • cisco ios 12.2ex • cisco ios 12.2ey • cisco ios 12.2fz • cisco ios 12.2ira • cisco ios 12.2irb • cisco ios 12.2irc • cisco ios 12.2ixa • cisco ios 12.2ixb • cisco ios 12.2ixc • cisco ios 12.2ixd • cisco ios 12.2ixe • cisco ios 12.2ixf • cisco ios 12.2ixg • cisco ios 12.2s • cisco ios 12.2sbc • cisco ios 12.2se • cisco ios 12.2sec • cisco ios 12.2sed • cisco ios 12.2see • cisco ios 12.2sef • cisco ios 12.2seg • cisco ios 12.2sg • cisco ios 12.2sga • cisco ios 12.2sq • cisco ios 12.2sra • cisco ios 12.2srb • cisco ios 12.2src • cisco ios 12.2su • cisco ios 12.2sx • cisco ios 12.2sxa • cisco ios 12.2sxb • cisco ios 12.2sxd • cisco ios 12.2sxe • cisco ios 12.2sxf • cisco ios 12.2sxh • cisco ios 12.2sxi • cisco ios 12.2t • cisco ios 12.2tpc … and 76 more

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References