CVE-2001-0929: Cisco IOS Firewall Feature set, aka Context Based Access Control (CBAC) or Cisco Secure Integrated Software...

Security readout for executives and security teams

This is an old Cisco IOS firewall flaw where certain IOS Firewall/CBAC configurations may fail to enforce access controls correctly. A remote attacker could potentially bypass access control lists, reducing the router or firewall’s ability to block traffic that policy intended to stop. Exposure is most likely in legacy Cisco IOS environments still running IOS 11.2P through 12.2T with the IOS Firewall Feature Set or CBAC enabled. Modern supported platforms may not be relevant, but the provided sources do not map current product status. Prioritize if any legacy Cisco IOS firewall/router still enforces network boundaries. The business risk is unauthorized traffic crossing controls that leadership may assume are protecting sensitive systems. If no affected legacy IOS deployments exist, urgency is low. Mitigation focus: Inventory Cisco IOS devices for IOS 11.2P through 12.2T and CBAC usage.; Review Cisco’s vendor advisory for affected releases, fixed software, or workarounds.; Remove or replace unsupported legacy IOS devices where no supported update path exists..

Prepared

Jul 1, 2026, 06:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.