Cisco IOS Authorization Security Bypass Vulnerability

Bugtraq ID:	52755
Class:	Access Validation Error
CVE:	CVE-2012-0384
Remote:	Yes
Local:	No
Published:	Mar 28 2012 12:00AM
Updated:	Mar 19 2015 09:21AM
Credit:	Cisco
Vulnerable:	Cisco IOS XE 2.6.2 Cisco IOS XE 2.6.1 Cisco IOS XE 2.5.2 Cisco IOS XE 2.5.1 Cisco IOS XE 2.4.1 Cisco IOS XE 2.4 Cisco IOS XE 2.3.2 Cisco IOS XE 2.3.1 t Cisco IOS XE 2.3.1 Cisco IOS XE 2.2.3 Cisco IOS XE 3.5.0S Cisco IOS XE 3.4.2S Cisco IOS XE 3.3.xS Cisco IOS XE 3.2.xS Cisco IOS XE 3.1xSG Cisco IOS XE 3.1.xS Cisco IOS XE 2.6 Cisco IOS XE 2.5 Cisco IOS XE 2.4 Cisco IOS XE 2.3 Cisco IOS XE 2.2 Cisco IOS XE 2.1 Cisco Ios 15.2T Cisco Ios 15.2S Cisco Ios 15.2GC Cisco Ios 15.1SNG Cisco IOS 15.1S Cisco IOS 15.1MR Cisco IOS 15.1M Cisco IOS 15.1GC Cisco IOS 15.1EY Cisco Ios 15.0SY Cisco IOS 15.0SG Cisco IOS 15.0SE Cisco IOS 15.0MRA Cisco IOS 15.0MR Cisco IOS 15.0M Cisco IOS 12.4YG Cisco IOS 12.4YE Cisco IOS 12.4YD Cisco IOS 12.4YB Cisco IOS 12.4YA Cisco IOS 12.4XZ Cisco IOS 12.4XY Cisco IOS 12.4XW Cisco IOS 12.4XV Cisco IOS 12.4XT Cisco IOS 12.4XR Cisco IOS 12.4XQ Cisco IOS 12.4XP Cisco IOS 12.4XN Cisco IOS 12.4XM Cisco IOS 12.4XL Cisco IOS 12.4XK Cisco IOS 12.4XJ Cisco IOS 12.4XG Cisco IOS 12.4XF Cisco IOS 12.4XE Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XB Cisco IOS 12.4XA Cisco IOS 12.4T Cisco IOS 12.4SW Cisco IOS 12.4MRB Cisco IOS 12.4MR Cisco Ios 12.4MDC Cisco IOS 12.4MDB Cisco IOS 12.4MDA Cisco IOS 12.4MD Cisco Ios 12.4JZ Cisco IOS 12.4JY Cisco IOS 12.4JX Cisco IOS 12.4JL Cisco IOS 12.4JK Cisco IOS 12.4JHC Cisco IOS 12.4JHB Cisco IOS 12.4JHA Cisco Ios 12.4JDE Cisco IOS 12.4JDD Cisco IOS 12.4JDC Cisco IOS 12.4JDA Cisco IOS 12.4JAX Cisco IOS 12.4JA Cisco IOS 12.4GC Cisco IOS 12.4 Cisco IOS 12.3ZA Cisco IOS 12.3YZ Cisco IOS 12.3YX Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YQ Cisco IOS 12.3YM Cisco IOS 12.3YK Cisco IOS 12.3YJ Cisco IOS 12.3YI Cisco IOS 12.3YG Cisco IOS 12.3YF Cisco IOS 12.3YD Cisco IOS 12.3XZ Cisco IOS 12.3XY Cisco IOS 12.3XX Cisco IOS 12.3XW Cisco IOS 12.3XU Cisco IOS 12.3XR Cisco IOS 12.3XQ Cisco IOS 12.3XL Cisco IOS 12.3XK Cisco IOS 12.3XJ Cisco IOS 12.3XI Cisco IOS 12.3XG Cisco IOS 12.3XF Cisco IOS 12.3XE Cisco IOS 12.3XD Cisco IOS 12.3XC Cisco IOS 12.3XB Cisco IOS 12.3VA Cisco IOS 12.3TPC Cisco IOS 12.3T Cisco IOS 12.3JL Cisco IOS 12.3JK Cisco IOS 12.3JED Cisco IOS 12.3JEC Cisco IOS 12.3JEB Cisco IOS 12.3JEA Cisco IOS 12.3JA Cisco IOS 12.3BW Cisco IOS 12.3BC Cisco IOS 12.3B Cisco IOS 12.3 Cisco IOS 12.2ZH Cisco IOS 12.2XO Cisco IOS 12.2XNF Cisco IOS 12.2XNE Cisco IOS 12.2XND Cisco IOS 12.2XNC Cisco IOS 12.2XNB Cisco IOS 12.2XNA Cisco IOS 12.2SY Cisco IOS 12.2SXJ Cisco IOS 12.2SXI Cisco IOS 12.2SXH Cisco IOS 12.2STE Cisco IOS 12.2SRD Cisco IOS 12.2SRC Cisco IOS 12.2SRB Cisco IOS 12.2SRA Cisco IOS 12.2SQ Cisco IOS 12.2SGA Cisco IOS 12.2SG Cisco IOS 12.2SEG Cisco IOS 12.2SEF Cisco IOS 12.2SEE Cisco IOS 12.2SED Cisco IOS 12.2SEC Cisco IOS 12.2SEB Cisco IOS 12.2SEA Cisco IOS 12.2SE Cisco IOS 12.2SCF Cisco IOS 12.2SCE Cisco IOS 12.2SCB Cisco IOS 12.2SCA Cisco IOS 12.2SB Cisco IOS 12.2IRG Cisco IOS 12.2IRF Cisco IOS 12.2IRD Cisco IOS 12.2IRC Cisco IOS 12.2IRB Cisco IOS 12.2IRA Cisco IOS 12.2FZ Cisco IOS 12.2FY Cisco IOS 12.2FX Cisco IOS 12.2EZ Cisco IOS 12.2EY Cisco IOS 12.2EX Cisco IOS 12.2EWA Cisco IOS 12.2EW
Not Vulnerable:	Cisco IOS XE 3.6.0S Cisco IOS XE 3.2.xSG Cisco Ios 15.1 SG Cisco IOS 15.0SA

Cisco IOS Authorization Security Bypass Vulnerability

Cisco IOS is prone to a security-bypass vulnerability.

This issue allows remote attackers to bypass AAA command authorization checks and to gain elevated access to affected devices.

This issue is tracked by Cisco Bug ID CSCtr91106.