Total vulnerabilities in the database
Cisco IOS 15.2(04)M6 and 15.4(03)S lets physical-interface ACLs supersede tunnel-interface ACLs, which allows remote attackers to bypass intended network-traffic restrictions in opportunistic circumstances by using a tunnel, aka Bug ID CSCur01042.
| Software | From | Fixed in |
|---|---|---|
| cisco / ios | 15.4(3)s | 15.4(3)s.x |
| cisco / ios | 15.2(4)m6 | 15.2(4)m6.x |