Details of VAR-200305-0083

ID

VAR-200305-0083

TITLE

Cisco IOS Crypto Engine Accelerator Access Control List Bypass Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2003-1388

DESCRIPTION

The Internet Operating System (IOS) is an operating system used on CISCO routers. The use of an access control list when the CISCO router enables the crypto engine accelerator allows unauthorized types of communication access, which can be exploited by remote attackers to bypass the access control list to access the protected network. If the CISCO router has the following configuration: crypto engine accelerator PPPoE dialer Ip route-cache Set the access control list on the external interface to allow only incoming ISAKMP and IPSEC communication, such as: ip access-list extended Block-Inbound-unwanted-Trafic permit udp 100.100. 100.0 0.0.0.255 host 102.168.1.2 eq isakmp permit esp 100.100. 100.0 0.0.0.255 host 102.168.1.2 deny ip any any log The IPSec communication will be parsed twice due to the incoming access control list, which will result in unauthorized communication access being protected. The internet. For example, ACLs allow internal networks to be exploited by attackers to inject fake packets into the network. However, if static encryption (crypto) mapping is used, this problem does not exist, so non-encrypted communication will be discarded when it is parsed by the ACL. In the case of dynamic encryption mapping, if an attacker wants to note that a forged packet bypasses the access list to access the network, it must control the neighbor router connected to the ACK interface to complete the attack

Trust: 0.81

sources: CNVD: CNVD-2003-1388 // BID: 7605

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2003-1388

AFFECTED PRODUCTS

vendor:	cisco	model:	ios 12.2 t	scope:	-	version:	-	Trust: 1.8
vendor:	cisco	model:	ios 12.2	scope:	-	version:	-	Trust: 1.8
vendor:	cisco	model:	ios 12.2 s	scope:	-	version:	-	Trust: 1.5
vendor:	no	model:	-	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	ios 12.2 b	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	ios 12.2 xa	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	ios 12.2 bx	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	ios 12.2 bc1	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	ios 12.2 t3	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	ios 12.2 xh	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	ios	scope:	eq	version:	12.2(1)	Trust: 0.3
vendor:	cisco	model:	ios 12.2 mb3	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2yh	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xm	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 t1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xs	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 bc1a	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2yg	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xu	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 yb	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xi2	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xw	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xc	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xh3	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xf	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xt	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 by2	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xk2	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xu2	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2t	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xe3	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xg	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 t4	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 t1a	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xw1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	12.2	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xb4	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xa5	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	12.2(3)	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xt	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	12.2(5)	Trust: 0.3
vendor:	cisco	model:	ios 12.2pi	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2s	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xi	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2pb	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2mb	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xs1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2yd	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xd4	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xm2	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xe	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xd	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 t0a	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 b4	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xq	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2yc	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xa	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xl4	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 yc	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xd1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 dd3	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	12.2(1.1)	Trust: 0.3
vendor:	cisco	model:	ios 12.2yf	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xr	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xt3	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xh	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xn	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xj	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xw	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	12.2(7)	Trust: 0.3
vendor:	cisco	model:	ios 12.2bc	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 mx	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	12.2(4)	Trust: 0.3
vendor:	cisco	model:	ios 12.2da	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xi	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xm	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xj1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xq	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 da	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xn	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xh2	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xf	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xi1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2b	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 da1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xd3	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xk	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 bp	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xe2	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2ya	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 b3	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xk	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 by	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 pi	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 ya	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 b2	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xj	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xb	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2bx	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xd	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 dx	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xb	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 ya1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xe	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 mx1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xa1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2yb	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 ca1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xl	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 b1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios	scope:	eq	version:	12.2(12.05)	Trust: 0.3
vendor:	cisco	model:	ios 12.2dd	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xb3	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2xl	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xs	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	ios 12.2 xg	scope:	-	version:	-	Trust: 0.3

sources: CNVD: CNVD-2003-1388 // BID: 7605

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2003-1388
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2003-1388
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2003-1388

THREAT TYPE

network

Trust: 0.3

sources: BID: 7605

TYPE

Input Validation Error

Trust: 0.3

sources: BID: 7605

EXTERNAL IDS

db:	BID	id:	7605	Trust: 0.9
db:	CNVD	id:	CNVD-2003-1388	Trust: 0.6

sources: CNVD: CNVD-2003-1388 // BID: 7605

REFERENCES

url:	http://marc.theaimsgroup.com/?l=bugtraq&m=105295144304873&w=2	Trust: 0.6
url:	/archive/1/321552	Trust: 0.3
url:	/archive/1/321603	Trust: 0.3
url:	/archive/1/321616	Trust: 0.3

sources: CNVD: CNVD-2003-1388 // BID: 7605

CREDITS

Discovery credited to Olivier <itsce.networkservices@pmintl.ch>.

Trust: 0.3

sources: BID: 7605

SOURCES

db:	CNVD	id:	CNVD-2003-1388
db:	BID	id:	7605

LAST UPDATE DATE

2022-05-17T02:00:52.008000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2003-1388	date:	2014-01-20T00:00:00
db:	BID	id:	7605	date:	2003-05-14T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2003-1388	date:	2003-05-15T00:00:00
db:	BID	id:	7605	date:	2003-05-14T00:00:00