Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access restrictions by using an address that was not supposed to have been allowed, aka Bug ID CSCur28806.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0694
Reference (s):
- CISCO:20150409 Cisco Aggregate Services Router 9000 ASR9K Security Bypass Vulnerability
- URL: http://tools.cisco.com/security/center/viewAlert.x?alertId=38292
- SECTRACK:1032059
- URL: http://www.securitytracker.com/id/1032059