CVE-2016-9201
published 2016-12-14CVE-2016-9201: A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that…
PriorityP344high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EPSS
2.55%
83.4th percentile
A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. More Information: CSCuz21015. Known Affected Releases: 15.3(3)M3. Known Fixed Releases: 15.6(2)T0.1 15.6(2.0.1a)T0 15.6(2.19)T 15.6(3)M.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | ios | — | — |
| cisco | ios_and_cisco_ios_xe | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
vendor_cisco5.0MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco IOS and Cisco IOS XE Software Zone-Based Firewall Feature Bypass Vulnerability
vendor_cisco·2016-12-07·CVSS 5.0
CVE-2016-9201 [MEDIUM] CWE-20 Cisco IOS and Cisco IOS XE Software Zone-Based Firewall Feature Bypass Vulnerability
Cisco IOS and Cisco IOS XE Software Zone-Based Firewall Feature Bypass Vulnerability
A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration.
The vulnerability is due to a logic flaw in a corner case scenario. An attacker could exploit this vulnerability by sending traffic that would have been dropped by the policy.
In a Zone-Based Firewall setup, if only one zone pair is defined in the egress direction but there is no reverse zone pair defined in the opposite direction, return traffic should be dropped instead of allowed for traffic subject to the egress action of pass.
There are workarounds that address this vulnerability
Cisco
Cisco IOS and Cisco IOS XE Software Zone-Based Firewall Feature Bypass Vulnerability
vendor_cisco
CVE-2016-9201 Cisco IOS and Cisco IOS XE Software Zone-Based Firewall Feature Bypass Vulnerability
CVE-2016-9201: Cisco IOS and Cisco IOS XE Software Zone-Based Firewall Feature Bypass Vulnerability
A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. The vulnerability is due to a logic flaw in a corner case scenario. An attacker could exploit this vulnerability by sending traffic that would have been dropped by the policy. In a Zone-Based Firewall setup, if only one zone pair is defined in the egress direction but there is no reverse zone pair defined in the opposite direction, return traffic should be dropped instead of allowed for traffic subject to the egress action of pass . There are
CWE: CWE-20, CWE-20
Bug IDs: CS
GHSA
GHSA-rwg4-2f3r-qq47: A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traf
ghsa_unreviewed·2022-05-17
CVE-2016-9201 [HIGH] CWE-20 GHSA-rwg4-2f3r-qq47: A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traf
A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. More Information: CSCuz21015. Known Affected Releases: 15.3(3)M3. Known Fixed Releases: 15.6(2)T0.1 15.6(2.0.1a)T0 15.6(2.19)T 15.6(3)M.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.securityfocus.com/bid/94811http://www.securitytracker.com/id/1037419https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios-zbfhttp://www.securityfocus.com/bid/94811http://www.securitytracker.com/id/1037419https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios-zbf
2016-12-14
Published