CVEvulnerability
CVE-2015-0610
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-02-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-362
Description
Race condition in the object-group ACL feature in Cisco IOS 15.5(2)T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCun21071.
Affected configurations
• cisco ios (<= 15.5\(2\)t)
• cisco ios 15.5\(1\)t
• cisco ios 15.5\(1\)t1
• cisco ios 15.5t
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0610 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37423 Vendor Advisory
- http://www.securityfocus.com/bid/72565 www.securityfocus.com
- http://www.securitytracker.com/id/1031732 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100807 exchange.xforce.ibmcloud.com
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0610 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=37423 Vendor Advisory
- http://www.securityfocus.com/bid/72565 www.securityfocus.com
- http://www.securitytracker.com/id/1031732 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100807 exchange.xforce.ibmcloud.com