CVE-2009-2863
N/A
Published: September 28, 2009 at 06:20 PM UTC
Updated: June 16, 2026 at 11:10 PM UTC
1 product affected across 1 vendorIOS
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
12.0xk12.0xr12.112.1e12.1ex12.1t12.1xc12.1xh12.1xi12.1xj12.1xm12.1xp12.1xr12.1yb12.1yd12.1yf12.1yi12.212.2b12.2bw12.2cz12.2dd12.2ex12.2ey12.2fz12.2ira12.2irb12.2irc12.2ixa12.2ixb12.2ixc12.2ixd12.2ixe12.2ixf12.2ixg12.2s12.2sbc12.2se12.2sec12.2sed12.2see12.2sef12.2seg12.2sg12.2sga12.2sq12.2sra12.2srb12.2src12.2su12.2sx12.2sxa12.2sxb12.2sxd12.2sxe12.2sxf12.2sxh12.2sxi12.2t12.2tpc12.2xa12.2xb12.2xd12.2xe12.2xg12.2xj12.2xk12.2xl12.2xm12.2xo12.2xq12.2xt12.2xv12.2xw12.2ya12.2yb12.2yc12.2ye12.2yf12.2yh12.2yl12.2ym12.2yn12.2yq12.2yu12.2yv12.2yx12.2yz12.2zd12.2zh12.2zj12.2zl12.2zy12.2zya12.312.3b12.3jk12.3t12.3tpc12.3va12.3xa12.3xc12.3xd12.3xe12.3xf12.3xg12.3xk12.3xl12.3xq12.3xr12.3xx12.3ya12.3yd12.3yg12.3yh12.3yi12.3yk12.3ym12.3yt12.3yz12.412.4mr12.4t12.4xa12.4xd12.4xe12.4xf12.4xj12.4xk12.4xt12.4xv12.4xw12.4xy12.4xz12.4ya12.4yb
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (6)
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://tools.cisco.com/security/center/viewAlert.x?alertId=18882Vendor Advisoryx_refsource_CISCO
Source: [email protected]
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8132.shtmlVDB Entryx_refsource_XF
Source: [email protected]
https://exchange.xforce.ibmcloud.com/vulnerabilities/53453Quick Info
StatusMODIFIED
CWE
CWE-287
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card