CVE-2016-9201
HighSummary
A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration.
Risk Assessment
The organization may be exposed to unauthorized access to the network, potentially leading to data breaches or other attacks.
Recommendation
It is recommended to upgrade to a version where the vulnerability has been fixed to minimize risk.
Other vulnerabilities in Cisco IOS and Cisco IOS XE Software
Original NVD description (English source)
A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. More Information: CSCuz21015. Known Affected Releases: 15.3(3)M3. Known Fixed Releases: 15.6(2)T0.1 15.6(2.0.1a)T0 15.6(2.19)T 15.6(3)M.

