CVE-2014-2146

The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for…

published September 22, 2016

CVSS
—
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for existing sessions, which allows remote attackers to bypass intended resource-access restrictions via spoofed traffic that matches one of these sessions, aka Bug IDs CSCun94946 and CSCun96847.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01255 · 69.1th percentile
Published
2016-09-22T17:00Z
EPSS history
Timeline
  • 22 SEP 17:00Z
    The Zone-Based Firewall (ZBFW) functionality in Cisco IOS, possibly 15.4 and earlier, and IOS XE, possibly 3.13 and earlier, mishandles zone checking for…
    cvelistv5