CVE-1999-1306

Description

Cisco IOS 9.1 and earlier does not properly handle extended IP access lists when the IP route cache is enabled and the established keyword is set, which could allow attackers to bypass filters.

Risk Information

Base Score

6.5

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.179

Associated Vulnerability

No records found

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234