CVE-2009-2863: Cisco IOS

High severity, CVSS 7.1. EPSS: 2.5% chance of exploitation in the next 30 days.

Race condition in the Firewall Authentication Proxy feature in Cisco IOS 12.0 through 12.4 allows remote attackers to bypass authentication, or bypass the consent web page, via a crafted request, aka Bug ID CSCsy15227.

Affected products

• Cisco IOS: version 12.0xk only; version 12.0xr only; version 12.1 only; version 12.1e only; version 12.1ex only; version 12.1t only; …

Published 2009-09-28. Last modified 2026-06-16.