CVE-2015-0610

Race condition in the object-group ACL feature in Cisco IOS 15.5(2)T and earlier allows remote attackers to bypass intended access restrictions via crafted network traffic that triggers improper handling of the timing of process switching and Cisco Express Forwarding (CEF) switching, aka Bug ID CSCun21071.
Race Condition
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 48%
VendorProductVersion
ciscoios
𝑥
≤ 15.5\(2\)t
ciscoios
15.5\(1\)t
ciscoios
15.5\(1\)t1
ciscoios
15.5t:t
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0610
http://tools.cisco.com/security/center/viewAlert.x?alertId=37423
http://www.securityfocus.com/bid/72565
http://www.securitytracker.com/id/1031732
https://exchange.xforce.ibmcloud.com/vulnerabilities/100807
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2015-0610
http://tools.cisco.com/security/center/viewAlert.x?alertId=37423
http://www.securityfocus.com/bid/72565
http://www.securitytracker.com/id/1031732
https://exchange.xforce.ibmcloud.com/vulnerabilities/100807