The NTP implementation in Cisco IOS and IOS XE does not properly support use of the access-group command for a "deny all" configuration, which allows remote attackers to bypass intended restrictions on time synchronization via a standard query, aka Bug ID CSCuj66318.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Cisco SA 20140709 | — | Upgrade to the latest version of Cisco IOS to resolve this vulnerability | Oct 20, 2016 | Jul 9, 2014 |
| Cisco Xe | — | Upgrade to the latest version of Cisco IOS XE | Jul 30, 2019 | Jul 9, 2014 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub