CVE-2012-0338: Input Validation

Published May 2, 2012

Updated

Cisco IOS 12.2 through 12.4 and 15.0 does not recognize the vrf-also keyword during enforcement of access-class commands, which allows remote attackers to establish SSH connections from arbitrary source IP addresses via a standard SSH client, aka Bug ID CSCsv86113.

Affected Software

4 affected components

Cisco IOS=12.2

Cisco IOS=12.3

Cisco IOS=12.4

Cisco IOS=15.0

Event History

May 2, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-0338?

The severity of CVE-2012-0338 is considered high due to its potential to allow unauthorized remote SSH access.

How do I fix CVE-2012-0338?

To fix CVE-2012-0338, upgrade to a Cisco IOS version that addresses the vulnerability, specifically versions beyond 12.4 and 15.0.

What systems are affected by CVE-2012-0338?

CVE-2012-0338 affects Cisco IOS versions 12.2 through 12.4 and 15.0.

Can CVE-2012-0338 allow remote SSH connections from any IP address?

Yes, CVE-2012-0338 allows attackers to establish SSH connections from arbitrary source IP addresses.

Is there a workaround for CVE-2012-0338?

There are no specific workarounds for CVE-2012-0338, and upgrading the IOS is the recommended approach.