CVEvulnerability

CVE-2015-6366

5.0 MEDIUM Published 2015-11-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-11-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-284

Description

Cisco IOS 15.2(04)M6 and 15.4(03)S lets physical-interface ACLs supersede tunnel-interface ACLs, which allows remote attackers to bypass intended network-traffic restrictions in opportunistic circumstances by using a tunnel, aka Bug ID CSCur01042.

Affected configurations

• cisco ios 15.2\(4\)m6 • cisco ios 15.4\(3\)s

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References