CVE-1999-1466

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Dec 10, 1992
Updated: Nov 20, 2024

Summary

CVE-1999-1466 is a vulnerability affecting Cisco routers running versions 8.2 through 9.1. This issue enables remote attackers to bypass access control lists when extended IP access lists are implemented on specific interfaces. A prerequisite for exploitation is the IP route cache being enabled. The vulnerability lies in the use of the "established" keyword in the access list configuration.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Cisco IOS

Affected Vendors

  • Cisco Systems Inc