CVE-2013-6979

The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which…

published December 23, 2013

CVSS
—
EPSS
4%
Percentile
89.3
In the wild
Unconfirmed
What it is

The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP address, aka Bug ID CSCuj90227.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03602 · 89.3th percentile
Published
2013-12-23T22:00Z
EPSS history
Timeline
  • 23 DEC 22:00Z
    The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which…
    cvelistv5