CVE-2001-0866

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-12-06 · updated 2026-06-16

Description

Cisco 12000 with IOS 12.0 and lines card based on Engine 2 does not properly handle an outbound ACL when an input ACL is not configured on all the interfaces of a multi port line card, which could allow remote attackers to bypass the intended access controls.

Affected products

Cisco 12000 Router: all versions

References

http://www.ciac.org/ciac/bulletins/m-018.shtml
http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml
http://www.iss.net/security_center/static/7554.php
http://www.osvdb.org/1984
http://www.securityfocus.com/bid/3537
http://www.ciac.org/ciac/bulletins/m-018.shtml
http://www.cisco.com/warp/public/707/GSR-ACL-pub.shtml
http://www.iss.net/security_center/static/7554.php
http://www.osvdb.org/1984
http://www.securityfocus.com/bid/3537

Get alerted when CVE-2001-0866 or the next vulnerability affects your stack