CVE-2009-2863

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-28 · updated 2026-06-16
Weakness: CWE-287

Description

Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227.

Affected products

Cisco IOS: 12.0xk, 12.0xr, 12.1, 12.1e, 12.1ex, 12.1t (+130)

References

http://osvdb.org/58340
http://tools.cisco.com/security/center/viewAlert.x?alertId=18882
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8132.shtml
http://www.securityfocus.com/bid/36491
http://www.securitytracker.com/id?1022935
https://exchange.xforce.ibmcloud.com/vulnerabilities/53453
http://osvdb.org/58340
http://tools.cisco.com/security/center/viewAlert.x?alertId=18882
http://www.cisco.com/en/US/products/products_security_advisory09186a0080af8132.shtml
http://www.securityfocus.com/bid/36491
http://www.securitytracker.com/id?1022935
https://exchange.xforce.ibmcloud.com/vulnerabilities/53453

Get alerted when CVE-2009-2863 or the next vulnerability affects your stack