A vulnerability was identified in Cisco Internet Operating System (IOS), which could be exploited by remote attackers to execute arbitrary commands. This flaw is due to a heap overflow error when processing specially crafted packets, which could be exploited by an unauthenticated attacker to execute arbitrary code and compromise a vulnerable device.

Note : The vendor has stated that the research presented by Michael Lynn was not a disclosure of a new vulnerability or a flaw with Cisco IOS software, but an exploration of ways to expand exploitations of existing security vulnerabilities impacting routers.

Abaddon on France SIRT