Vulnerabilities > CVE-2012-0384 - Improper Privilege Management vulnerability in Cisco IOS

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

cisco

CWE-269

nessus

NVD

Published: 2012-03-29

Updated: 2024-11-21

Summary

Cisco IOS 12.2 through 12.4 and 15.0 through 15.2 and IOS XE 2.1.x through 2.6.x and 3.1.xS before 3.1.2S, 3.2.xS through 3.4.xS before 3.4.2S, 3.5.xS before 3.5.1S, and 3.1.xSG and 3.2.xSG before 3.2.2SG, when AAA authorization is enabled, allow remote authenticated users to bypass intended access restrictions and execute commands via a (1) HTTP or (2) HTTPS session, aka Bug ID CSCtr91106.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS 12.2\(3.4\)Bp Cisco IOS 12.2\(7B\) Cisco IOS 12.2\(14\)Sz1 Cisco IOS 12.2\(14\)Sy03 Cisco IOS 12.2\(2\)Bx Cisco IOS 12.2\(6.8\)T1A Cisco IOS 12.2\(6.8A\) Cisco IOS 12.2\(28\) Cisco IOS 12.2\(1\)Xs Cisco IOS 12.2\(1\)Xd1 Cisco IOS 12.2\(17D\) Cisco IOS 12.2\(15\)Ys_1.2\(1\) Cisco IOS 12.2Xr Cisco IOS 12.2\(25\)S4 Cisco IOS 12.2\(25\)Sec1 Cisco IOS 12.2\(12C\) Cisco IOS 12.2\(12\)Da9 Cisco IOS 12.2\(17B\)Sxa Cisco IOS 12.2\(8\)Yw2 Cisco IOS 12.2Cz Cisco IOS 12.2\(13\)Zd3 Cisco IOS 12.2\(12B\) Cisco IOS 12.2\(1\)Xq Cisco IOS 12.2\(8\)T10 Cisco IOS 12.2\(18\)Sxe3 Cisco IOS 12.2\(13\)Zf Cisco IOS 12.2\(25\)Sw Cisco IOS 12.2Sxf Cisco IOS 12.2\(17D\)Sx Cisco IOS 12.2\(14\)Su2 Cisco IOS 12.2\(15\)Bc1F Cisco IOS 12.2\(4\)Ya11 Cisco IOS 12.2\(23A\) Cisco IOS 12.2Fy Cisco IOS 12.2N Cisco IOS 12.2\(10\)Da2 Cisco IOS 12.2\(1\)Xd3 Cisco IOS 12.2\(5D\) Cisco IOS 12.2\(4\)B3 Cisco IOS 12.2Zn Cisco IOS 12.2\(18\)Sw Cisco IOS 12.2Pb Cisco IOS 12.2\(18\)Ew2 Cisco IOS 12.2\(2\)T1 Cisco IOS 12.2\(18\)Ew5 Cisco IOS 12.2Xe Cisco IOS 12.2\(15\)Bz Cisco IOS 12.2Ja Cisco IOS 12.2Sx Cisco IOS 12.2\(27B\) Cisco IOS 12.2\(14\)Sy Cisco IOS 12.2\(20\)Ew3 Cisco IOS 12.2\(15\)Cx Cisco IOS 12.2Zp Cisco IOS 12.2\(8\)Tpc10A Cisco IOS 12.2\(20\)S2 Cisco IOS 12.2\(20\)S1 Cisco IOS 12.2\(21A\) Cisco IOS 12.2\(17D\)Sxb8 Cisco IOS 12.2\(18\)S9 Cisco IOS 12.2\(1\)Xs1 Cisco IOS 12.2\(15\)Mc2E Cisco IOS 12.2Ca Cisco IOS 12.2Bz Cisco IOS 12.2\(4\)Mb12 Cisco IOS 12.2Zi Cisco IOS 12.2\(4\)Ja1 Cisco IOS 12.2Ys Cisco IOS 12.2\(20\)Eu Cisco IOS 12.2\(14\)Sx1 Cisco IOS 12.2\(15\)Bc2F Cisco IOS 12.2\(2\)Xk Cisco IOS 12.2Xz Cisco IOS 12.2\(25\)Fx Cisco IOS 12.2\(18\)Sxd6 Cisco IOS 12.2Xj Cisco IOS 12.2\(23F\) Cisco IOS 12.2Su Cisco IOS 12.2Pi Cisco IOS 12.2\(11\)Yu Cisco IOS 12.2\(15\)Cz3 Cisco IOS 12.2Xh Cisco IOS 12.2Xg Cisco IOS 12.2Ew Cisco IOS 12.2\(15\)Ys Cisco IOS 12.2B Cisco IOS 12.2\(25\)S Cisco IOS 12.2\(9.4\)Da Cisco IOS 12.2\(7\) Cisco IOS 12.2Sea Cisco IOS 12.2\(15\)Bc2I Cisco IOS 12.2\(17\)Zd3 Cisco IOS 12.2\(8\)Yy Cisco IOS 12.2\(2\)Xb4 Cisco IOS 12.2\(14.5\)T Cisco IOS 12.2\(15\)Zo Cisco IOS 12.2\(18\)S8 Cisco IOS 12.2\(18\)S6 Cisco IOS 12.2\(14\)S15 Cisco IOS 12.2Yn Cisco IOS 12.2\(25\)Ey Cisco IOS 12.2Sxa Cisco IOS 12.2\(14\)Za2 Cisco IOS 12.2Ey Cisco IOS 12.2\(14\)S13 Cisco IOS 12.2\(24\) Cisco IOS 12.2\(25\)Seb3 Cisco IOS 12.2Zx Cisco IOS 12.2\(2\)Xj1 Cisco IOS 12.2Xb Cisco IOS 12.2\(17\) Cisco IOS 12.2\(20\)S9 Cisco IOS 12.2Yf Cisco IOS 12.2\(13\)Zh3 Cisco IOS 12.2Sg Cisco IOS 12.2\(18\)Sv3 Cisco IOS 12.2\(4\)B Cisco IOS 12.2\(9\)S Cisco IOS 12.2\(25\)S3 Cisco IOS 12.2\(2\)Xu Cisco IOS 12.2Xl Cisco IOS 12.2\(2\)Dd3 Cisco IOS 12.2Ym Cisco IOS 12.2Yw Cisco IOS 12.2Yd Cisco IOS 12.2\(1\)Xa Cisco IOS 12.2\(24\)Sv1 Cisco IOS 12.2\(25\)Sw4 Cisco IOS 12.2\(25\)Sv2 Cisco IOS 12.2\(2\)T4 Cisco IOS 12.2\(18\)Ew3 Cisco IOS 12.2Yb Cisco IOS 12.2\(13E\) Cisco IOS 12.2\(18\)Sxf Cisco IOS 12.2\(11\)T9 Cisco IOS 12.2\(4\)Xm2 Cisco IOS 12.2\(4\)Xm Cisco IOS 12.2Mb Cisco IOS 12.2\(2.2\)T Cisco IOS 12.2\(4\)Mx1 Cisco IOS 12.2\(25\)S1 Cisco IOS 12.2\(25\)Ex Cisco IOS 12.2Dd Cisco IOS 12.2\(13\)Zl Cisco IOS 12.2\(2\)Xh3 Cisco IOS 12.2\(18\)Sxd1 Cisco IOS 12.2Zh Cisco IOS 12.2Da Cisco IOS 12.2\(27\)Sbc Cisco IOS 12.2\(4\)T1 Cisco IOS 12.2\(3D\) Cisco IOS 12.2Mx Cisco IOS 12.2Zu Cisco IOS 12.2\(25\)Ewa Cisco IOS 12.2Yv Cisco IOS 12.2\(17\)A Cisco IOS 12.2\(17D\)Sxb7 Cisco IOS 12.2\(1\)Xe2 Cisco IOS 12.2Sxb Cisco IOS 12.2Yo Cisco IOS 12.2\(15\)Zn Cisco IOS 12.2\(15\)Zk Cisco IOS 12.2Xw Cisco IOS 12.2\(6.8\)T0A Cisco IOS 12.2\(13\)Ze Cisco IOS 12.2\(24\)Sv Cisco IOS 12.2\(25\)Ey2 Cisco IOS 12.2\(16\)Bx Cisco IOS 12.2T Cisco IOS 12.2\(12.05\)S Cisco IOS 12.2\(1\)Xd4 Cisco IOS 12.2Sv Cisco IOS 12.2\(4\)Yb Cisco IOS 12.2\(2\)Yc Cisco IOS 12.2\(18\)So4 Cisco IOS 12.2Seb Cisco IOS 12.2Sa Cisco IOS 12.2\(11\)T2 Cisco IOS 12.2\(19\)B Cisco IOS 12.2Yt Cisco IOS 12.2\(12.02\)T Cisco IOS 12.2Zya Cisco IOS 12.2\(4\)Xl4 Cisco IOS 12.2\(2\)Xh2 Cisco IOS 12.2Zk Cisco IOS 12.2Yl Cisco IOS 12.2\(4\)Mb3 Cisco IOS 12.2Za Cisco IOS 12.2\(29A\) Cisco IOS 12.2Xn Cisco IOS 12.2\(12.05\)T Cisco IOS 12.2Ye Cisco IOS 12.2\(1\)Dx Cisco IOS 12.2\(15\)Bc1 Cisco IOS 12.2\(20\)S7 Cisco IOS 12.2\(4\)Ya7 Cisco IOS 12.2\(25\)Se Cisco IOS 12.2\(4\) Cisco IOS 12.2\(17F\) Cisco IOS 12.2Ez Cisco IOS 12.2\(1\)S Cisco IOS 12.2\(10.5\)S Cisco IOS 12.2\(4\)Ya8 Cisco IOS 12.2\(13\)Zh8 Cisco IOS 12.2\(2\)Xh Cisco IOS 12.2\(11\)T8 Cisco IOS 12.2\(18\)Ewa Cisco IOS 12.2\(22\)S Cisco IOS 12.2\(5\)Ca1 Cisco IOS 12.2\(13\)T9 Cisco IOS 12.2Zb Cisco IOS 12.2\(16\)B1 Cisco IOS 12.2Yg Cisco IOS 12.2\(18\)Sxd7 Cisco IOS 12.2\(20\)Se3 Cisco IOS 12.2\(13\)T1 Cisco IOS 12.2\(25\)Sec2 Cisco IOS 12.2Ex Cisco IOS 12.2\(15\)Jk4 Cisco IOS 12.2\(31\) Cisco IOS 12.2\(20\)S8 Cisco IOS 12.2\(13\)T14 Cisco IOS 12.2\(12\)Da8 Cisco IOS 12.2\(15\)Bc2H Cisco IOS 12.2\(11\)T Cisco IOS 12.2\(10\)Da4 Cisco IOS 12.2\(13\)T Cisco IOS 12.2\(13\)Zh Cisco IOS 12.2\(13\)Zg Cisco IOS 12.2\(14\)Za8 Cisco IOS 12.2\(1.1\)Pi Cisco IOS 12.2\(1.4\)S Cisco IOS 12.2\(11\)Yv Cisco IOS 12.2\(16F\) Cisco IOS 12.2\(15\)Zj1 Cisco IOS 12.2\(15\)Zj3 Cisco IOS 12.2\(15\)Jk2 Cisco IOS 12.2\(15\)Jk5 Cisco IOS 12.2\(15\)Mc1 Cisco IOS 12.2\(18\)S Cisco IOS 12.2\(2\)Xb14 Cisco IOS 12.2\(2\)By2 Cisco IOS 12.2\(2\)By Cisco IOS 12.2\(15\)T7 Cisco IOS 12.2\(15\)T8 Cisco IOS 12.2\(25\)Ez1 Cisco IOS 12.2\(13\)Zk Cisco IOS 12.2\(11\)Yz2 Cisco IOS 12.2\(15\)B Cisco IOS 12.2\(14\)Sz2 Cisco IOS 12.2\(14\)S Cisco IOS 12.2\(1\)Xh Cisco IOS 12.2\(1\)Xd Cisco IOS 12.2\(11\)Ja1 Cisco IOS 12.2\(10G\) Cisco IOS 12.2\(12\) Cisco IOS 12.2\(13\) Cisco IOS 12.2\(16\)B Cisco IOS 12.2\(15\)Zj2 Cisco IOS 12.2\(15\)T Cisco IOS 12.2\(17D\)Sxb10 Cisco IOS 12.2\(2\)Xa5 Cisco IOS 12.2\(18\)Sxe1 Cisco IOS 12.2\(25\)S6 Cisco IOS 12.2\(23\)Sv1 Cisco IOS 12.2\(23.6\) Cisco IOS 12.2\(25\)Ewa1 Cisco IOS 12.2\(25\)Sw3A Cisco IOS 12.2\(2\)Xi Cisco IOS 12.2\(20\)Ewa3 Cisco IOS 12.2\(20\)Ewa Cisco IOS 12.2\(2\)Xn Cisco IOS 12.2\(20\)Eu1 Cisco IOS 12.2\(8\)Yd Cisco IOS 12.2\(8\)T Cisco IOS 12.2\(6C\) Cisco IOS 12.2Fx Cisco IOS 12.2Sec Cisco IOS 12.2\(4\)B4 Cisco IOS 12.2Xu Cisco IOS 12.2Xs Cisco IOS 12.2So Cisco IOS 12.2Sy Cisco IOS 12.2Xc Cisco IOS 12.2Zq Cisco IOS 12.2\(13\)T16 Cisco IOS 12.2\(12\)Da3 Cisco IOS 12.2\(15\)Bc Cisco IOS 12.2\(14\)Sy1 Cisco IOS 12.2\(11\)Ja Cisco IOS 12.2\(11\)Bc3C Cisco IOS 12.2\(15\)Zl Cisco IOS 12.2\(15\)Xr2 Cisco IOS 12.2\(15\)Mc2C Cisco IOS 12.2\(18\)Sv Cisco IOS 12.2\(18\)Se Cisco IOS 12.2\(2\)Xb3 Cisco IOS 12.2\(2\)Xc1 Cisco IOS 12.2\(1D\) Cisco IOS 12.2\(2\)B Cisco IOS 12.2\(15\)T9 Cisco IOS 12.2\(22\)S2 Cisco IOS 12.2\(23\)Sw Cisco IOS 12.2\(30\)S1 Cisco IOS 12.2\(3\) Cisco IOS 12.2\(2\)Xi1 Cisco IOS 12.2\(2\)Xf Cisco IOS 12.2\(20\)Ewa2 Cisco IOS 12.2\(2\)Xk2 Cisco IOS 12.2\(7C\) Cisco IOS 12.2\(4\)T6 Cisco IOS 12.2\(4\)T Cisco IOS 12.2\(4\)Bx Cisco IOS 12.2\(4\)Bc1 Cisco IOS 12.2\(4\)Xw Cisco IOS 12.2\(4\)Xr Cisco IOS 12.2Zj Cisco IOS 12.2Yy Cisco IOS 12.2Yc Cisco IOS 12.2Xk Cisco IOS 12.2Xi Cisco IOS 12.2Zy Cisco IOS 12.2\(15.1\)S Cisco IOS 12.2\(15\)T16 Cisco IOS 12.2\(15\)T17 Cisco IOS 12.2\(15\)Bx Cisco IOS 12.2\(2\)Xb15 Cisco IOS 12.2\(18.2\) Cisco IOS 12.2\(19\) Cisco IOS 12.2\(2\)T Cisco IOS 12.2\(25\)Ewa4 Cisco IOS 12.2\(25\)Seb Cisco IOS 12.2\(22\)Ea6 Cisco IOS 12.2\(28C\) Cisco IOS 12.2\(25\)Sg Cisco IOS 12.2\(25\)Sed Cisco IOS 12.2\(25\)Sw4A Cisco IOS 12.2\(20\)S4 Cisco IOS 12.2\(2\)Xt3 Cisco IOS 12.2\(2\)Xt Cisco IOS 12.2\(2\)Xu2 Cisco IOS 12.2\(4\)Mx Cisco IOS 12.2\(4\)Mb13B Cisco IOS 12.2\(4\)Mb13C Cisco IOS 12.2\(4\)Ya10 Cisco IOS 12.2\(4\)Ya1 Cisco IOS 12.2\(7.4\)S Cisco IOS 12.2Bw Cisco IOS 12.2Cy Cisco IOS 12.2Jk Cisco IOS 12.2\(4\)B2 Cisco IOS 12.2Sh Cisco IOS 12.2Yu Cisco IOS 12.2Xm Cisco IOS 12.2Sz Cisco IOS 12.2Tpc Cisco IOS 12.2X Cisco IOS 12.2\(25\)Fy Cisco IOS 12.2\(26B\) Cisco IOS 12.2\(26\)Sv Cisco IOS 12.2\(2\)Xj Cisco IOS 12.2\(20\)Ew Cisco IOS 12.2\(20\)Eu2 Cisco IOS 12.2\(2\)Xr Cisco IOS 12.2\(4\)Xl Cisco IOS 12.2E Cisco IOS 12.2\(8\)Yw3 Cisco IOS 12.2\(8\)Yy3 Cisco IOS 12.2Bc Cisco IOS 12.2Ewa Cisco IOS 12.2Dx Cisco IOS 12.2Sbc Cisco IOS 12.2Se Cisco IOS 12.2Zo Cisco IOS 12.2Ze Cisco IOS 12.2Zd Cisco IOS 12.2Yp Cisco IOS 12.2Yr Cisco IOS 12.2\(12H\) Cisco IOS 12.2\(12I\) Cisco IOS 12.2\(12M\) Cisco IOS 12.2\(1\)Xe Cisco IOS 12.2\(11\)T3 Cisco IOS 12.2\(13\)Zd Cisco IOS 12.2\(13\)Zc Cisco IOS 12.2\(13\)Zd4 Cisco IOS 12.2\(12G\) Cisco IOS 12.2\(12.02\)S Cisco IOS 12.2\(14.5\) Cisco IOS 12.2\(14\)Za Cisco IOS 12.2\(13A\) Cisco IOS 12.2\(13.03\)B Cisco IOS 12.2\(1\) Cisco IOS 12.2 Cisco IOS 12.2\(16.5\)S Cisco IOS 12.2\(18\)S10 Cisco IOS 12.2\(17A\)Sxa Cisco IOS 12.2\(17D\)Sxb Cisco IOS 12.2\(2\)Xb Cisco IOS 12.2\(2\)Xb11 Cisco IOS 12.2\(1B\) Cisco IOS 12.2\(13\)Mc1 Cisco IOS 12.2\(12.05\) Cisco IOS 12.2\(14\)Sz Cisco IOS 12.2\(14\)S14 Cisco IOS 12.2\(1\)T Cisco IOS 12.2\(15\)Xr Cisco IOS 12.2\(18\)Sxe Cisco IOS 12.2\(1B\)Da1 Cisco IOS 12.2\(2\)Xa1 Cisco IOS 12.2\(15\)Zj Cisco IOS 12.2\(17A\) Cisco IOS 12.2\(25\)Ez Cisco IOS 12.2\(25\)Seb4 Cisco IOS 12.2\(25\)Seb2 Cisco IOS 12.2\(2\)Xi2 Cisco IOS 12.2\(21\) Cisco IOS 12.2\(4\)T3 Cisco IOS 12.2\(4\)Ja Cisco IOS 12.2\(4\)Ya9 Cisco IOS 12.2\(4\)Xw1 Cisco IOS 12.2\(8\)Zb7 Cisco IOS 12.2Bx Cisco IOS 12.2S Cisco IOS 12.2Zl Cisco IOS 12.2Zg Cisco IOS 12.2Yz Cisco IOS 12.2Yk Cisco IOS 12.2Sxe Cisco IOS 12.2Xa Cisco IOS 12.2\(13\)Zj Cisco IOS 12.2\(13\)Ja1 Cisco IOS 12.2\(11\)Yx1 Cisco IOS 12.2\(1\)Xe3 Cisco IOS 12.2\(11\)Yp1 Cisco IOS 12.2\(1.1\) Cisco IOS 12.2\(16.1\)B Cisco IOS 12.2\(15\)T5 Cisco IOS 12.2\(15\)Sl1 Cisco IOS 12.2\(18\)Sxd5 Cisco IOS 12.2\(2\)Xa Cisco IOS 12.2\(25\)Ey3 Cisco IOS 12.2\(23\) Cisco IOS 12.2\(25\)Ewa3 Cisco IOS 12.2\(20\)S Cisco IOS 12.2\(7\)Da Cisco IOS 12.2By Cisco IOS 12.2Mc Cisco IOS 12.2\(4\)B1 Cisco IOS 12.2Zm Cisco IOS 12.2Yq Cisco IOS 12.2Xt Cisco IOS 12.2Sw Cisco IOS 12.2Xd Cisco IOS 12.2\(15\)Zl1 Cisco IOS 12.2\(15\)T15 Cisco IOS 12.2\(18\)Sxd4 Cisco IOS 12.2\(18\)Ew Cisco IOS 12.2\(22\)Sv1 Cisco IOS 12.2\(27\)Sv1 Cisco IOS 12.2\(2\)Xg Cisco IOS 12.2\(4\)Ya Cisco IOS 12.2\(7A\) Cisco IOS 12.2\(8\)Bc1 Cisco IOS 12.2Cx Cisco IOS 12.2Jx Cisco IOS 12.2Yx Cisco IOS 12.2Yj Cisco IOS 12.2Yh Cisco IOS 12.2Xq Cisco IOS 12.2\(26\)Sv1 Cisco IOS 12.2\(20\)Ew2 Cisco IOS 12.2\(21B\) Cisco IOS 12.2F Cisco IOS 12.2\(4\)Bc1A Cisco IOS 12.2\(5\) Cisco IOS 12.2\(8\)Ja Cisco IOS 12.2Eu Cisco IOS 12.2Zf Cisco IOS 12.2Xv Cisco IOS 12.2Ya Cisco IOS 12.2Sxd Cisco IOS 12.2Xf Cisco IOS 12.3Ym Cisco IOS 12.3\(14\)Ym4 Cisco IOS 12.3Yq Cisco IOS 12.3\(10\) Cisco IOS 12.3Xr Cisco IOS 12.3\(2\)Xe4 Cisco IOS 12.3\(11\)Yf3 Cisco IOS 12.3\(11\)T9 Cisco IOS 12.3\(4\)Xd1 Cisco IOS 12.3\(14\)T5 Cisco IOS 12.3\(14\)Yq Cisco IOS 12.3Bc Cisco IOS 12.3Yl Cisco IOS 12.3\(11\)Yw Cisco IOS 12.3Ya Cisco IOS 12.3\(8\)Ja1 Cisco IOS 12.3\(5C\) Cisco IOS 12.3Yw Cisco IOS 12.3\(14\)Yu1 Cisco IOS 12.3\(13A\) Cisco IOS 12.3\(11\)T8 Cisco IOS 12.3Xg Cisco IOS 12.3\(7\)T9 Cisco IOS 12.3Yr Cisco IOS 12.3\(11\)Yn Cisco IOS 12.3\(11\)T4 Cisco IOS 12.3\(5A\) Cisco IOS 12.3Xw Cisco IOS 12.3Xm Cisco IOS 12.3Xd Cisco IOS 12.3\(8\)Yf Cisco IOS 12.3\(14\)T2 Cisco IOS 12.3Xs Cisco IOS 12.3\(8\)Xy5 Cisco IOS 12.3\(7\)T8 Cisco IOS 12.3\(3H\) Cisco IOS 12.3\(14\)Yq1 Cisco IOS 12.3\(11\)Yf2 Cisco IOS 12.3\(11\)Xl Cisco IOS 12.3Bw Cisco IOS 12.3\(8\)Yg Cisco IOS 12.3\(9A\)Bc2 Cisco IOS 12.3\(4\)Xk3 Cisco IOS 12.3\(7\)Xi7 Cisco IOS 12.3\(2\)T8 Cisco IOS 12.3\(2\)T3 Cisco IOS 12.3\(14\)T4 Cisco IOS 12.3\(4\)Xk Cisco IOS 12.3Xz Cisco IOS 12.3\(8\)T11 Cisco IOS 12.3\(2\)Jk1 Cisco IOS 12.3\(2\)Ja5 Cisco IOS 12.3\(5A\)B Cisco IOS 12.3\(5A\)B2 Cisco IOS 12.3\(4\)T2 Cisco IOS 12.3\(7\)Ja Cisco IOS 12.3\(3I\) Cisco IOS 12.3Jec Cisco IOS 12.3\(8\)Yg1 Cisco IOS 12.3\(2\)Xc3 Cisco IOS 12.3\(13A\)Bc1 Cisco IOS 12.3\(12B\) Cisco IOS 12.3 Cisco IOS 12.3\(4\)T3 Cisco IOS 12.3Xt Cisco IOS 12.3\(5A\)B5 Cisco IOS 12.3Yu Cisco IOS 12.3\(10D\) Cisco IOS 12.3\(11\)T Cisco IOS 12.3Xi Cisco IOS 12.3Yj Cisco IOS 12.3\(3E\) Cisco IOS 12.3\(2\)Xc4 Cisco IOS 12.3\(15\) Cisco IOS 12.3\(14\)T Cisco IOS 12.3\(4\)Xk1 Cisco IOS 12.3\(11\)Yk Cisco IOS 12.3\(10E\) Cisco IOS 12.3\(5\) Cisco IOS 12.3Xj Cisco IOS 12.3\(7.7\) Cisco IOS 12.3\(8\)T9 Cisco IOS 12.3\(8\)T7 Cisco IOS 12.3\(4\)Ja Cisco IOS 12.3\(8\)Xy6 Cisco IOS 12.3\(9D\) Cisco IOS 12.3J Cisco IOS 12.3T Cisco IOS 12.3Yd Cisco IOS 12.3\(4\)Xd2 Cisco IOS 12.3\(4\)T Cisco IOS 12.3\(4\)Ja1 Cisco IOS 12.3\(2\)Xa4 Cisco IOS 12.3\(14\)Yq3 Cisco IOS 12.3\(11\)Ys Cisco IOS 12.3\(10C\) Cisco IOS 12.3\(11\)T6 Cisco IOS 12.3\(11\)T5 Cisco IOS 12.3\(4\)Xh Cisco IOS 12.3Jea Cisco IOS 12.3Xy Cisco IOS 12.3Xq Cisco IOS 12.3\(8\)Yi Cisco IOS 12.3\(8\)Yd Cisco IOS 12.3\(7\)Xr4 Cisco IOS 12.3\(8\)T4 Cisco IOS 12.3\(8\)Ja Cisco IOS 12.3\(7\)T Cisco IOS 12.3\(7\)Jx Cisco IOS 12.3\(5F\) Cisco IOS 12.3\(6\) Cisco IOS 12.3Yt Cisco IOS 12.3Ys Cisco IOS 12.3\(4\)Eo1 Cisco IOS 12.3\(2\)Xc1 Cisco IOS 12.3\(2\)Ja Cisco IOS 12.3\(14\)Yq4 Cisco IOS 12.3\(11\)Yk1 Cisco IOS 12.3\(11\) Cisco IOS 12.3\(4\)Xq Cisco IOS 12.3\(4\)T1 Cisco IOS 12.3\(4\)Xg2 Cisco IOS 12.3\(4\)Xg5 Cisco IOS 12.3Xv Cisco IOS 12.3Xb Cisco IOS 12.3Xh Cisco IOS 12.3\(7\)Xr3 Cisco IOS 12.3\(6F\) Cisco IOS 12.3\(6D\) Cisco IOS 12.3\(7\)T4 Cisco IOS 12.3\(2\)Xe3 Cisco IOS 12.3\(16\) Cisco IOS 12.3\(14\)Yt1 Cisco IOS 12.3\(13\) Cisco IOS 12.3\(12E\) Cisco IOS 12.3\(11\)Yf4 Cisco IOS 12.3\(11\)Yk2 Cisco IOS 12.3\(11\)Yl Cisco IOS 12.3\(4\)Xd Cisco IOS 12.3\(14\)Yu Cisco IOS 12.3\(14\)Yt Cisco IOS 12.3\(13B\) Cisco IOS 12.3\(11\)Ys1 Cisco IOS 12.3\(11\)Yf Cisco IOS 12.3\(11\)Xl3 Cisco IOS 12.3\(4\)Xk4 Cisco IOS 12.3\(4\)T4 Cisco IOS 12.3\(4\)Xg1 Cisco IOS 12.3Yb Cisco IOS 12.3Xu Cisco IOS 12.3B Cisco IOS 12.3Xl Cisco IOS 12.3Xc Cisco IOS 12.3\(9E\) Cisco IOS 12.3\(8\)Yg2 Cisco IOS 12.3\(9A\)Bc6 Cisco IOS 12.3\(9\) Cisco IOS 12.3\(6E\) Cisco IOS 12.3\(7\)T12 Cisco IOS 12.3\(5B\) Cisco IOS 12.3\(5E\) Cisco IOS 12.3Yx Cisco IOS 12.3Yz Cisco IOS 12.3\(11\)Yr Cisco IOS 12.3\(2\)Xc2 Cisco IOS 12.3Yk Cisco IOS 12.3\(7\)Xi3 Cisco IOS 12.3\(7\)Xi4 Cisco IOS 12.3\(8\)Xy4 Cisco IOS 12.3\(8\)Ya1 Cisco IOS 12.3\(9A\)Bc Cisco IOS 12.3\(8\)Yi1 Cisco IOS 12.3\(8\)Yi3 Cisco IOS 12.3Jk Cisco IOS 12.3Xe Cisco IOS 12.3Xf Cisco IOS 12.3Ja Cisco IOS 12.3Tpc Cisco IOS 12.3Yg Cisco IOS 12.3Yf Cisco IOS 12.3\(4\)Xe4 Cisco IOS 12.3Jeb Cisco IOS 12.3\(8\)Yh Cisco IOS 12.3Yh Cisco IOS 12.3\(8\)T8 Cisco IOS 12.3\(4\)Xg4 Cisco IOS 12.3\(11\)Yj Cisco IOS 12.3Xx Cisco IOS 12.3Xn Cisco IOS 12.3\(7\)Ja1 Cisco IOS 12.3\(2\)Jk Cisco IOS 12.3\(5\)B1 Cisco IOS 12.3\(4\)T8 Cisco IOS 12.3Yc Cisco IOS 12.3Yi Cisco IOS 12.3Xk Cisco IOS 12.3Jx Cisco IOS 12.3\(8\)Yg3 Cisco IOS 12.3\(7\)Xr6 Cisco IOS 12.3\(8\)Xu2 Cisco IOS 12.3\(7\)T10 Cisco IOS 12.3\(13A\)Bc Cisco IOS 12.3Ye Cisco IOS 12.3\(9A\)Bc7 Cisco IOS 12.3Yn Cisco IOS 12.3\(2\)Xa5 Cisco IOS 12.3\(1A\) Cisco IOS 12.3\(15B\) Cisco IOS 12.3\(12\) Cisco IOS 12.3\(4\)Xq1 Cisco IOS 12.3\(4\)Tpc11A Cisco IOS 12.3Xa Cisco IOS 12.3\(6A\) Cisco IOS 12.4\(2\)T2 Cisco IOS 12.4T Cisco IOS 12.4\(2\)T4 Cisco IOS 12.4\(6\)T Cisco IOS 12.4\(5\) Cisco IOS 12.4\(5B\) Cisco IOS 12.4\(2\)Mr Cisco IOS 12.4Xt Cisco IOS 12.4\(2\)T1 Cisco IOS 12.4\(3\)T2 Cisco IOS 12.4Xj Cisco IOS 12.4Mr Cisco IOS 12.4\(4\)Mr Cisco IOS 12.4Xf Cisco IOS 12.4Xl Cisco IOS 12.4Xm Cisco IOS 12.4\(4\)T Cisco IOS 12.4\(3B\) Cisco IOS 12.4Xw Cisco IOS 12.4Xp Cisco IOS 12.4\(2\)Xb Cisco IOS 12.4\(2\)T3 Cisco IOS 12.4\(4\)T2 Cisco IOS 12.4\(3D\) Cisco IOS 12.4\(1\) Cisco IOS 12.4Xd Cisco IOS 12.4\(2\)Mr1 Cisco IOS 12.4\(2\)T Cisco IOS 12.4\(2\)Xb2 Cisco IOS 12.4\(23\) Cisco IOS 12.4Jda Cisco IOS 12.4Jx Cisco IOS 12.4Jmb Cisco IOS 12.4Xk Cisco IOS 12.4Xg Cisco IOS 12.4\(1C\) Cisco IOS 12.4\(1B\) Cisco IOS 12.4Jk Cisco IOS 12.4Xv Cisco IOS 12.4\(3A\) Cisco IOS 12.4\(7\) Cisco IOS 12.4\(6\)T1 Cisco IOS 12.4Xe Cisco IOS 12.4Sw Cisco IOS 12.4Xa Cisco IOS 12.4\(8\) Cisco IOS 12.4 Cisco IOS 12.4Md Cisco IOS 12.4Xb Cisco IOS 12.4Xc Cisco IOS 12.4Jma Cisco IOS 12.4\(3\) Cisco IOS 12.4\(2\)Xa Cisco IOS 12.4\(9\)T Cisco IOS 12.4Ja Cisco IOS 12.4Jl Cisco IOS 12.4Xn Cisco IOS 12.4\(7A\) Cisco IOS 15.1 Cisco IOS 15.0 Cisco IOS 15.1Xb Cisco IOS 15.0Mra Cisco IOS 15.1T Cisco IOS 15.0Sg Cisco IOS 15.0Sa Cisco IOS 15.1\(4\)M1 Cisco IOS 15.1Ey Cisco IOS 15.0Mr Cisco IOS 15.1\(2\)T Cisco IOS 15.0S Cisco IOS 15.0\(1\)S1 Cisco IOS 15.0\(1\)S2 Cisco IOS 15.0M Cisco IOS 15.1S Cisco IOS 15.1Gc Cisco IOS 15.1\(3\)T Cisco IOS 15.0Xo Cisco IOS 15.2 Cisco IOS 15.1\(1\)Xb1 Cisco IOS 15.0Xa Cisco IOS 15.1M Cisco IOS 15.1\(4\)M Cisco IOS XE 2.5.0 Cisco IOS XE 2.6.1 Cisco IOS XE 2.3.1T Cisco IOS XE 2.1.0 Cisco IOS XE 2.2.3 Cisco IOS XE 2.4.2 Cisco IOS XE 2.1.1 Cisco IOS XE 2.4.4 Cisco IOS XE 2.3 Cisco IOS XE 2.6.2 Cisco IOS XE 2.3.2 Cisco IOS XE 2.3.0 Cisco IOS XE 2.2.1 Cisco IOS XE 2.5.1 Cisco IOS XE 2.1.2 Cisco IOS XE 2.4.1 Cisco IOS XE 2.6.0 Cisco IOS XE 2.4.0 Cisco IOS XE 2.3.1 Cisco IOS XE 2.4.3 Cisco IOS XE 2.1 Cisco IOS XE 2.2 Cisco IOS XE 2.4 Cisco IOS XE 2.2.2 Cisco IOS XE 2.5.2 Cisco IOS XE 3.2.0S Cisco IOS XE 3.2.1S Cisco IOS XE 3.1.0Sg Cisco IOS XE 3.1.2S Cisco IOS XE 3.1.1S Cisco IOS XE 3.2.2S Cisco IOS XE 3.1.0S Cisco IOS XE 3.1.1Sg Cisco IOS XE 3.1.3S Cisco IOS XE 3.1.4S Cisco IOS XE 3.3.0S	814

Common Weakness Enumeration (CWE)

CWE-269 - Improper Privilege Management

Common Attack Pattern Enumeration and Classification (CAPEC)

Restful Privilege Elevation
Rest uses standard HTTP (Get, Put, Delete) style permissions methods, but these are not necessarily correlated generally with back end programs. Strict interpretation of HTTP get methods means that these HTTP Get services should not be used to delete information on the server, but there is no access control mechanism to back up this logic. This means that unless the services are properly ACL'd and the application's service implementation are following these guidelines then an HTTP request can easily execute a delete or update on the server side. The attacker identifies a HTTP Get URL such as http://victimsite/updateOrder, which calls out to a program to update orders on a database or other resource. The URL is not idempotent so the request can be submitted multiple times by the attacker, additionally, the attacker may be able to exploit the URL published as a Get method that actually performs updates (instead of merely retrieving data). This may result in malicious or inadvertent altering of data on the server.

Nessus

NASL family	CISCO
NASL id	CISCO-SA-20120328-PAI.NASL
description	According to its self-reported version and configuration, the Cisco IOS software running on the remote device is affected by a security bypass vulnerability in the Authentication, Authorization, and Accounting (AAA) feature. An authenticated, remote attacker can exploit this, via an HTTP or HTTPS session, to bypass access restrictions and execute any IOS command that is configured for the authorization level. This vulnerability requires that the HTTP or HTTPS server is enabled on the Cisco IOS device.
last seen	2020-03-17
modified	2012-04-02
plugin id	58570
published	2012-04-02
reporter	This script is Copyright (C) 2012-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/58570
title	Cisco IOS Software Command Security Bypass (cisco-sa-20120328-pai)
code	#TRUSTED 6a170b7c6b3abce99d83bcf7bcb3b36bf0fc041f54b3b6cb0e9ec2b47b2cbd357d1c482dc28a95bffb24337b2b96469c44f780758f228106e09d47184982ac0e22b41e5d84de684d96daf36392033f2ec76eaaeac7e5427f5bb88636f1031e01304c527bbf8f04b06b11ba19ceee9cd0cc882587ddda0dc3d44396be62842bddf7bc569eac43f05eaedc6029a8f8047941c6b0923b15ed0c1d19fe9d47133bb5ebec44a1a6b24103fa56b1b80aa559fb29ba9380b3b58991e7bca095d0e5a2ba1c084a3d230308a2126c1c149934e45b75859f1096ead496066fa12e518f0432039cfd49d73f233636741605ded02f1b34aaa469c682a07813fb91dda71082dee09e15deb81dec985a32b45f85bc597a3693ad6af852677fdb4830eb9a1031acc8ff0ab7075d73685b4b4d2419c958b53558dbcecc3186acaf0c66989fffec854fe81447f4c85a8e628b92d7160c7dfceb5f43adadf7abdd6f5a330ebf2eb2d6389304a9ffd6d24c6acaecd91965ed729555182cc1dc6f2b1e079ed4c22a09875b47cc9c253d94dbaa6c9f188591a884b804ad0b3381f9535ec65930dafc8b8196269e6046bde218831893195004b91d4f4ae09e1fe593d1014c1e522b12636d029eb9416658126b0564121c543276a4f58c458e921b0c2a61db83f478d46cbd4cdf3666b3846970ffc8161887ece0214ab896bb1f7a1ee4ba84059da9e9a395 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Cisco Security Advisory cisco-sa-20120328-pai. # The text itself is copyright (C) Cisco # include("compat.inc"); if (description) { script_id(58570); script_version("1.15"); script_set_attribute(attribute:"plugin_modification_date", value:"2018/11/15"); script_cve_id("CVE-2012-0384"); script_bugtraq_id(52755); script_xref(name:"CISCO-BUG-ID", value:"CSCtr91106"); script_xref(name:"CISCO-SA", value:"cisco-sa-20120328-pai"); script_name(english:"Cisco IOS Software Command Security Bypass (cisco-sa-20120328-pai)"); script_summary(english:"Checks the IOS version."); script_set_attribute(attribute:"synopsis", value: "The remote device is missing a vendor-supplied security patch."); script_set_attribute(attribute:"description", value: "According to its self-reported version and configuration, the Cisco IOS software running on the remote device is affected by a security bypass vulnerability in the Authentication, Authorization, and Accounting (AAA) feature. An authenticated, remote attacker can exploit this, via an HTTP or HTTPS session, to bypass access restrictions and execute any IOS command that is configured for the authorization level. This vulnerability requires that the HTTP or HTTPS server is enabled on the Cisco IOS device."); # https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?1e254f1e"); script_set_attribute(attribute:"solution", value: "Apply the relevant patch referenced in Cisco Security Advisory cisco-sa-20120328-pai. Alternatively, the HTTP server may be disabled as a workaround."); script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:S/C:C/I:C/A:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"exploit_available", value:"false"); script_set_attribute(attribute:"vuln_publication_date", value:"2012/03/28"); script_set_attribute(attribute:"patch_publication_date", value:"2012/03/28"); script_set_attribute(attribute:"plugin_publication_date", value:"2012/04/02"); script_set_attribute(attribute:"plugin_type", value:"combined"); script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:ios"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"CISCO"); script_copyright(english:"This script is Copyright (C) 2012-2018 Tenable Network Security, Inc."); script_dependencies("cisco_ios_version.nasl"); script_require_keys("Host/Cisco/IOS/Version"); exit(0); } include("audit.inc"); include("cisco_func.inc"); include("cisco_kb_cmd_func.inc"); flag = 0; override = 0; version = get_kb_item_or_exit("Host/Cisco/IOS/Version"); if ( version == '12.2(13)ZF' ) flag++; if ( version == '12.2(13)ZF1' ) flag++; if ( version == '12.2(13)ZF2' ) flag++; if ( version == '12.2(13)ZH' ) flag++; if ( version == '12.2(13)ZH1' ) flag++; if ( version == '12.2(13)ZH10' ) flag++; if ( version == '12.2(13)ZH2' ) flag++; if ( version == '12.2(13)ZH3' ) flag++; if ( version == '12.2(13)ZH4' ) flag++; if ( version == '12.2(13)ZH5' ) flag++; if ( version == '12.2(13)ZH6' ) flag++; if ( version == '12.2(13)ZH7' ) flag++; if ( version == '12.2(13)ZH8' ) flag++; if ( version == '12.2(13)ZH9' ) flag++; if ( version == '12.2(15)ZL' ) flag++; if ( version == '12.2(15)ZL1' ) flag++; if ( version == '12.2(15)ZN' ) flag++; if ( version == '12.2(25)EW' ) flag++; if ( version == '12.2(25)EWA' ) flag++; if ( version == '12.2(25)EWA1' ) flag++; if ( version == '12.2(25)EWA10' ) flag++; if ( version == '12.2(25)EWA11' ) flag++; if ( version == '12.2(25)EWA12' ) flag++; if ( version == '12.2(25)EWA13' ) flag++; if ( version == '12.2(25)EWA14' ) flag++; if ( version == '12.2(25)EWA2' ) flag++; if ( version == '12.2(25)EWA3' ) flag++; if ( version == '12.2(25)EWA4' ) flag++; if ( version == '12.2(25)EWA5' ) flag++; if ( version == '12.2(25)EWA6' ) flag++; if ( version == '12.2(25)EWA7' ) flag++; if ( version == '12.2(25)EWA8' ) flag++; if ( version == '12.2(25)EWA9' ) flag++; if ( version == '12.2(25)EY' ) flag++; if ( version == '12.2(25)EY1' ) flag++; if ( version == '12.2(25)EY2' ) flag++; if ( version == '12.2(25)EY3' ) flag++; if ( version == '12.2(25)EY4' ) flag++; if ( version == '12.2(25)EZ' ) flag++; if ( version == '12.2(25)EZ1' ) flag++; if ( version == '12.2(25)FX' ) flag++; if ( version == '12.2(25)FY' ) flag++; if ( version == '12.2(25)FZ' ) flag++; if ( version == '12.2(25)SE' ) flag++; if ( version == '12.2(25)SE2' ) flag++; if ( version == '12.2(25)SE3' ) flag++; if ( version == '12.2(25)SEA' ) flag++; if ( version == '12.2(25)SEB' ) flag++; if ( version == '12.2(25)SEB1' ) flag++; if ( version == '12.2(25)SEB2' ) flag++; if ( version == '12.2(25)SEB3' ) flag++; if ( version == '12.2(25)SEB4' ) flag++; if ( version == '12.2(25)SEC' ) flag++; if ( version == '12.2(25)SEC1' ) flag++; if ( version == '12.2(25)SEC2' ) flag++; if ( version == '12.2(25)SED' ) flag++; if ( version == '12.2(25)SED1' ) flag++; if ( version == '12.2(25)SEE' ) flag++; if ( version == '12.2(25)SEE1' ) flag++; if ( version == '12.2(25)SEE2' ) flag++; if ( version == '12.2(25)SEE3' ) flag++; if ( version == '12.2(25)SEE4' ) flag++; if ( version == '12.2(25)SEF' ) flag++; if ( version == '12.2(25)SEF1' ) flag++; if ( version == '12.2(25)SEF2' ) flag++; if ( version == '12.2(25)SEF3' ) flag++; if ( version == '12.2(25)SEG' ) flag++; if ( version == '12.2(25)SEG1' ) flag++; if ( version == '12.2(25)SEG2' ) flag++; if ( version == '12.2(25)SEG3' ) flag++; if ( version == '12.2(25)SEG4' ) flag++; if ( version == '12.2(25)SEG5' ) flag++; if ( version == '12.2(25)SEG6' ) flag++; if ( version == '12.2(25)SG' ) flag++; if ( version == '12.2(25)SG1' ) flag++; if ( version == '12.2(25)SG2' ) flag++; if ( version == '12.2(25)SG3' ) flag++; if ( version == '12.2(25)SG4' ) flag++; if ( version == '12.2(31)SB' ) flag++; if ( version == '12.2(31)SB1' ) flag++; if ( version == '12.2(31)SB10' ) flag++; if ( version == '12.2(31)SB10a' ) flag++; if ( version == '12.2(31)SB10b' ) flag++; if ( version == '12.2(31)SB10c' ) flag++; if ( version == '12.2(31)SB10d' ) flag++; if ( version == '12.2(31)SB10e' ) flag++; if ( version == '12.2(31)SB11' ) flag++; if ( version == '12.2(31)SB11a' ) flag++; if ( version == '12.2(31)SB11b' ) flag++; if ( version == '12.2(31)SB12' ) flag++; if ( version == '12.2(31)SB12a' ) flag++; if ( version == '12.2(31)SB13' ) flag++; if ( version == '12.2(31)SB14' ) flag++; if ( version == '12.2(31)SB15' ) flag++; if ( version == '12.2(31)SB16' ) flag++; if ( version == '12.2(31)SB17' ) flag++; if ( version == '12.2(31)SB18' ) flag++; if ( version == '12.2(31)SB19' ) flag++; if ( version == '12.2(31)SB1a' ) flag++; if ( version == '12.2(31)SB1b' ) flag++; if ( version == '12.2(31)SB1c' ) flag++; if ( version == '12.2(31)SB1d' ) flag++; if ( version == '12.2(31)SB1e' ) flag++; if ( version == '12.2(31)SB1f' ) flag++; if ( version == '12.2(31)SB1g' ) flag++; if ( version == '12.2(31)SB2' ) flag++; if ( version == '12.2(31)SB20' ) flag++; if ( version == '12.2(31)SB21' ) flag++; if ( version == '12.2(31)SB2a' ) flag++; if ( version == '12.2(31)SB3' ) flag++; if ( version == '12.2(31)SB3a' ) flag++; if ( version == '12.2(31)SB3b' ) flag++; if ( version == '12.2(31)SB3c' ) flag++; if ( version == '12.2(31)SB3x' ) flag++; if ( version == '12.2(31)SB4' ) flag++; if ( version == '12.2(31)SB4a' ) flag++; if ( version == '12.2(31)SB5' ) flag++; if ( version == '12.2(31)SB5a' ) flag++; if ( version == '12.2(31)SB6' ) flag++; if ( version == '12.2(31)SB7' ) flag++; if ( version == '12.2(31)SB8' ) flag++; if ( version == '12.2(31)SB8a' ) flag++; if ( version == '12.2(31)SB9' ) flag++; if ( version == '12.2(31)SB9a' ) flag++; if ( version == '12.2(31)SB9b' ) flag++; if ( version == '12.2(31)SG' ) flag++; if ( version == '12.2(31)SG1' ) flag++; if ( version == '12.2(31)SG2' ) flag++; if ( version == '12.2(31)SG3' ) flag++; if ( version == '12.2(31)SGA' ) flag++; if ( version == '12.2(31)SGA1' ) flag++; if ( version == '12.2(31)SGA10' ) flag++; if ( version == '12.2(31)SGA11' ) flag++; if ( version == '12.2(31)SGA2' ) flag++; if ( version == '12.2(31)SGA3' ) flag++; if ( version == '12.2(31)SGA4' ) flag++; if ( version == '12.2(31)SGA5' ) flag++; if ( version == '12.2(31)SGA6' ) flag++; if ( version == '12.2(31)SGA7' ) flag++; if ( version == '12.2(31)SGA8' ) flag++; if ( version == '12.2(31)SGA9' ) flag++; if ( version == '12.2(31)XN' ) flag++; if ( version == '12.2(31)XN1' ) flag++; if ( version == '12.2(31)XN2' ) flag++; if ( version == '12.2(31)XN3' ) flag++; if ( version == '12.2(31)ZV' ) flag++; if ( version == '12.2(31)ZV0a' ) flag++; if ( version == '12.2(31)ZV0b' ) flag++; if ( version == '12.2(31)ZV0c' ) flag++; if ( version == '12.2(31)ZV0d' ) flag++; if ( version == '12.2(31)ZV0e' ) flag++; if ( version == '12.2(31)ZV0f' ) flag++; if ( version == '12.2(31)ZV0g' ) flag++; if ( version == '12.2(31)ZV0h' ) flag++; if ( version == '12.2(31)ZV0i' ) flag++; if ( version == '12.2(31)ZV0j' ) flag++; if ( version == '12.2(31)ZV1a' ) flag++; if ( version == '12.2(31)ZV1b' ) flag++; if ( version == '12.2(31)ZV1c' ) flag++; if ( version == '12.2(31)ZV2' ) flag++; if ( version == '12.2(31)ZV2a' ) flag++; if ( version == '12.2(31)ZV2d' ) flag++; if ( version == '12.2(31a)XN2' ) flag++; if ( version == '12.2(31a)XN3' ) flag++; if ( version == '12.2(31b)XN2' ) flag++; if ( version == '12.2(31b)XN3' ) flag++; if ( version == '12.2(31c)XN2' ) flag++; if ( version == '12.2(31c)XN3' ) flag++; if ( version == '12.2(33)IRA' ) flag++; if ( version == '12.2(33)IRB' ) flag++; if ( version == '12.2(33)IRC' ) flag++; if ( version == '12.2(33)IRD' ) flag++; if ( version == '12.2(33)IRE' ) flag++; if ( version == '12.2(33)IRE1' ) flag++; if ( version == '12.2(33)IRE2' ) flag++; if ( version == '12.2(33)IRF' ) flag++; if ( version == '12.2(33)IRG' ) flag++; if ( version == '12.2(33)IRG1' ) flag++; if ( version == '12.2(33)IRH' ) flag++; if ( version == '12.2(33)MRA' ) flag++; if ( version == '12.2(33)MRB' ) flag++; if ( version == '12.2(33)MRB1' ) flag++; if ( version == '12.2(33)MRB2' ) flag++; if ( version == '12.2(33)MRB3' ) flag++; if ( version == '12.2(33)MRB4' ) flag++; if ( version == '12.2(33)MRB5' ) flag++; if ( version == '12.2(33)MRB6' ) flag++; if ( version == '12.2(33)SB' ) flag++; if ( version == '12.2(33)SB1' ) flag++; if ( version == '12.2(33)SB10' ) flag++; if ( version == '12.2(33)SB11' ) flag++; if ( version == '12.2(33)SB1a' ) flag++; if ( version == '12.2(33)SB1b' ) flag++; if ( version == '12.2(33)SB2' ) flag++; if ( version == '12.2(33)SB3' ) flag++; if ( version == '12.2(33)SB4' ) flag++; if ( version == '12.2(33)SB5' ) flag++; if ( version == '12.2(33)SB6' ) flag++; if ( version == '12.2(33)SB6a' ) flag++; if ( version == '12.2(33)SB6aa' ) flag++; if ( version == '12.2(33)SB6b' ) flag++; if ( version == '12.2(33)SB7' ) flag++; if ( version == '12.2(33)SB8' ) flag++; if ( version == '12.2(33)SB8b' ) flag++; if ( version == '12.2(33)SB8c' ) flag++; if ( version == '12.2(33)SB8d' ) flag++; if ( version == '12.2(33)SB8e' ) flag++; if ( version == '12.2(33)SB8f' ) flag++; if ( version == '12.2(33)SB9' ) flag++; if ( version == '12.2(33)SCA' ) flag++; if ( version == '12.2(33)SCA1' ) flag++; if ( version == '12.2(33)SCA2' ) flag++; if ( version == '12.2(33)SCB' ) flag++; if ( version == '12.2(33)SCB1' ) flag++; if ( version == '12.2(33)SCB10' ) flag++; if ( version == '12.2(33)SCB11' ) flag++; if ( version == '12.2(33)SCB2' ) flag++; if ( version == '12.2(33)SCB3' ) flag++; if ( version == '12.2(33)SCB4' ) flag++; if ( version == '12.2(33)SCB5' ) flag++; if ( version == '12.2(33)SCB6' ) flag++; if ( version == '12.2(33)SCB7' ) flag++; if ( version == '12.2(33)SCB8' ) flag++; if ( version == '12.2(33)SCB9' ) flag++; if ( version == '12.2(33)SCC' ) flag++; if ( version == '12.2(33)SCC1' ) flag++; if ( version == '12.2(33)SCC2' ) flag++; if ( version == '12.2(33)SCC3' ) flag++; if ( version == '12.2(33)SCC4' ) flag++; if ( version == '12.2(33)SCC5' ) flag++; if ( version == '12.2(33)SCC6' ) flag++; if ( version == '12.2(33)SCC7' ) flag++; if ( version == '12.2(33)SCD' ) flag++; if ( version == '12.2(33)SCD1' ) flag++; if ( version == '12.2(33)SCD2' ) flag++; if ( version == '12.2(33)SCD3' ) flag++; if ( version == '12.2(33)SCD4' ) flag++; if ( version == '12.2(33)SCD5' ) flag++; if ( version == '12.2(33)SCD6' ) flag++; if ( version == '12.2(33)SCD7' ) flag++; if ( version == '12.2(33)SCD8' ) flag++; if ( version == '12.2(33)SCE' ) flag++; if ( version == '12.2(33)SCE1' ) flag++; if ( version == '12.2(33)SCE2' ) flag++; if ( version == '12.2(33)SCE3' ) flag++; if ( version == '12.2(33)SCE4' ) flag++; if ( version == '12.2(33)SCF' ) flag++; if ( version == '12.2(33)SCF1' ) flag++; if ( version == '12.2(33)SRA' ) flag++; if ( version == '12.2(33)SRA1' ) flag++; if ( version == '12.2(33)SRA2' ) flag++; if ( version == '12.2(33)SRA3' ) flag++; if ( version == '12.2(33)SRA4' ) flag++; if ( version == '12.2(33)SRA5' ) flag++; if ( version == '12.2(33)SRA6' ) flag++; if ( version == '12.2(33)SRA7' ) flag++; if ( version == '12.2(33)SRB' ) flag++; if ( version == '12.2(33)SRB1' ) flag++; if ( version == '12.2(33)SRB2' ) flag++; if ( version == '12.2(33)SRB3' ) flag++; if ( version == '12.2(33)SRB4' ) flag++; if ( version == '12.2(33)SRB5' ) flag++; if ( version == '12.2(33)SRB5a' ) flag++; if ( version == '12.2(33)SRB6' ) flag++; if ( version == '12.2(33)SRB7' ) flag++; if ( version == '12.2(33)SRC' ) flag++; if ( version == '12.2(33)SRC1' ) flag++; if ( version == '12.2(33)SRC2' ) flag++; if ( version == '12.2(33)SRC3' ) flag++; if ( version == '12.2(33)SRC4' ) flag++; if ( version == '12.2(33)SRC5' ) flag++; if ( version == '12.2(33)SRC6' ) flag++; if ( version == '12.2(33)SRD' ) flag++; if ( version == '12.2(33)SRD1' ) flag++; if ( version == '12.2(33)SRD2' ) flag++; if ( version == '12.2(33)SRD2a' ) flag++; if ( version == '12.2(33)SRD3' ) flag++; if ( version == '12.2(33)SRD4' ) flag++; if ( version == '12.2(33)SRD4a' ) flag++; if ( version == '12.2(33)SRD5' ) flag++; if ( version == '12.2(33)SRD6' ) flag++; if ( version == '12.2(33)SRD7' ) flag++; if ( version == '12.2(33)SRE' ) flag++; if ( version == '12.2(33)SRE0a' ) flag++; if ( version == '12.2(33)SRE1' ) flag++; if ( version == '12.2(33)SRE2' ) flag++; if ( version == '12.2(33)SRE3' ) flag++; if ( version == '12.2(33)SRE4' ) flag++; if ( version == '12.2(33)SRE5' ) flag++; if ( version == '12.2(33)STE0' ) flag++; if ( version == '12.2(33)SXH' ) flag++; if ( version == '12.2(33)SXH0a' ) flag++; if ( version == '12.2(33)SXH1' ) flag++; if ( version == '12.2(33)SXH2' ) flag++; if ( version == '12.2(33)SXH2a' ) flag++; if ( version == '12.2(33)SXH3' ) flag++; if ( version == '12.2(33)SXH3a' ) flag++; if ( version == '12.2(33)SXH4' ) flag++; if ( version == '12.2(33)SXH5' ) flag++; if ( version == '12.2(33)SXH6' ) flag++; if ( version == '12.2(33)SXH7' ) flag++; if ( version == '12.2(33)SXH7v' ) flag++; if ( version == '12.2(33)SXH7w' ) flag++; if ( version == '12.2(33)SXH8' ) flag++; if ( version == '12.2(33)SXH8a' ) flag++; if ( version == '12.2(33)SXH8b' ) flag++; if ( version == '12.2(33)SXI' ) flag++; if ( version == '12.2(33)SXI1' ) flag++; if ( version == '12.2(33)SXI2' ) flag++; if ( version == '12.2(33)SXI2a' ) flag++; if ( version == '12.2(33)SXI3' ) flag++; if ( version == '12.2(33)SXI3a' ) flag++; if ( version == '12.2(33)SXI3z' ) flag++; if ( version == '12.2(33)SXI4' ) flag++; if ( version == '12.2(33)SXI4a' ) flag++; if ( version == '12.2(33)SXI5' ) flag++; if ( version == '12.2(33)SXI5a' ) flag++; if ( version == '12.2(33)SXI6' ) flag++; if ( version == '12.2(33)SXI7' ) flag++; if ( version == '12.2(33)SXI8' ) flag++; if ( version == '12.2(33)SXI8a' ) flag++; if ( version == '12.2(33)SXJ' ) flag++; if ( version == '12.2(33)SXJ1' ) flag++; if ( version == '12.2(33)XN' ) flag++; if ( version == '12.2(33)XN1' ) flag++; if ( version == '12.2(33)XNA2' ) flag++; if ( version == '12.2(33)XNB' ) flag++; if ( version == '12.2(33)XNB1' ) flag++; if ( version == '12.2(33)XNB2' ) flag++; if ( version == '12.2(33)XNB3' ) flag++; if ( version == '12.2(33)XNC' ) flag++; if ( version == '12.2(33)XNC0b' ) flag++; if ( version == '12.2(33)XNC0c' ) flag++; if ( version == '12.2(33)XNC0e' ) flag++; if ( version == '12.2(33)XNC1' ) flag++; if ( version == '12.2(33)XNC2' ) flag++; if ( version == '12.2(33)XND' ) flag++; if ( version == '12.2(33)XND1' ) flag++; if ( version == '12.2(33)XND2' ) flag++; if ( version == '12.2(33)XND2t' ) flag++; if ( version == '12.2(33)XND3' ) flag++; if ( version == '12.2(33)XND4' ) flag++; if ( version == '12.2(33)XNE' ) flag++; if ( version == '12.2(33)XNE1' ) flag++; if ( version == '12.2(33)XNE1xb' ) flag++; if ( version == '12.2(33)XNE2' ) flag++; if ( version == '12.2(33)XNE3' ) flag++; if ( version == '12.2(33)XNF' ) flag++; if ( version == '12.2(33)XNF1' ) flag++; if ( version == '12.2(33)XNF2' ) flag++; if ( version == '12.2(33)ZI' ) flag++; if ( version == '12.2(33)ZW' ) flag++; if ( version == '12.2(33)ZZ' ) flag++; if ( version == '12.2(34)SB1' ) flag++; if ( version == '12.2(34)SB2' ) flag++; if ( version == '12.2(34)SB3' ) flag++; if ( version == '12.2(34)SB4' ) flag++; if ( version == '12.2(34)SB4a' ) flag++; if ( version == '12.2(34)SB4b' ) flag++; if ( version == '12.2(34)SB4c' ) flag++; if ( version == '12.2(34)SB4d' ) flag++; if ( version == '12.2(35)EX' ) flag++; if ( version == '12.2(35)EX1' ) flag++; if ( version == '12.2(35)EX2' ) flag++; if ( version == '12.2(35)SE' ) flag++; if ( version == '12.2(35)SE1' ) flag++; if ( version == '12.2(35)SE2' ) flag++; if ( version == '12.2(35)SE3' ) flag++; if ( version == '12.2(35)SE4' ) flag++; if ( version == '12.2(35)SE5' ) flag++; if ( version == '12.2(37)EX' ) flag++; if ( version == '12.2(37)EY' ) flag++; if ( version == '12.2(37)SE' ) flag++; if ( version == '12.2(37)SE1' ) flag++; if ( version == '12.2(37)SG' ) flag++; if ( version == '12.2(37)SG1' ) flag++; if ( version == '12.2(40)EX' ) flag++; if ( version == '12.2(40)EX1' ) flag++; if ( version == '12.2(40)EX2' ) flag++; if ( version == '12.2(40)EX3' ) flag++; if ( version == '12.2(40)SE' ) flag++; if ( version == '12.2(40)SE1' ) flag++; if ( version == '12.2(40)SE2' ) flag++; if ( version == '12.2(40)SG' ) flag++; if ( version == '12.2(40)XO' ) flag++; if ( version == '12.2(44)EX' ) flag++; if ( version == '12.2(44)EX1' ) flag++; if ( version == '12.2(44)SE' ) flag++; if ( version == '12.2(44)SE1' ) flag++; if ( version == '12.2(44)SE2' ) flag++; if ( version == '12.2(44)SE3' ) flag++; if ( version == '12.2(44)SE4' ) flag++; if ( version == '12.2(44)SE5' ) flag++; if ( version == '12.2(44)SE6' ) flag++; if ( version == '12.2(44)SG' ) flag++; if ( version == '12.2(44)SG1' ) flag++; if ( version == '12.2(44)SQ' ) flag++; if ( version == '12.2(44)SQ1' ) flag++; if ( version == '12.2(44)SQ2' ) flag++; if ( version == '12.2(46)EX' ) flag++; if ( version == '12.2(46)EY' ) flag++; if ( version == '12.2(46)SE' ) flag++; if ( version == '12.2(46)SE1' ) flag++; if ( version == '12.2(46)SE2' ) flag++; if ( version == '12.2(46)SG' ) flag++; if ( version == '12.2(46)SG1' ) flag++; if ( version == '12.2(50)SE' ) flag++; if ( version == '12.2(50)SE1' ) flag++; if ( version == '12.2(50)SE2' ) flag++; if ( version == '12.2(50)SE3' ) flag++; if ( version == '12.2(50)SE4' ) flag++; if ( version == '12.2(50)SE5' ) flag++; if ( version == '12.2(50)SG' ) flag++; if ( version == '12.2(50)SG1' ) flag++; if ( version == '12.2(50)SG2' ) flag++; if ( version == '12.2(50)SG3' ) flag++; if ( version == '12.2(50)SG4' ) flag++; if ( version == '12.2(50)SG5' ) flag++; if ( version == '12.2(50)SG6' ) flag++; if ( version == '12.2(50)SG7' ) flag++; if ( version == '12.2(50)SG8' ) flag++; if ( version == '12.2(50)SQ' ) flag++; if ( version == '12.2(50)SQ1' ) flag++; if ( version == '12.2(50)SQ2' ) flag++; if ( version == '12.2(50)SQ3' ) flag++; if ( version == '12.2(50)SQ4' ) flag++; if ( version == '12.2(50)SY' ) flag++; if ( version == '12.2(50)SY1' ) flag++; if ( version == '12.2(52)EX' ) flag++; if ( version == '12.2(52)EX1' ) flag++; if ( version == '12.2(52)EY' ) flag++; if ( version == '12.2(52)EY1' ) flag++; if ( version == '12.2(52)EY1A' ) flag++; if ( version == '12.2(52)EY1b' ) flag++; if ( version == '12.2(52)EY1c' ) flag++; if ( version == '12.2(52)EY2' ) flag++; if ( version == '12.2(52)EY2a' ) flag++; if ( version == '12.2(52)EY3' ) flag++; if ( version == '12.2(52)EY3a' ) flag++; if ( version == '12.2(52)SE' ) flag++; if ( version == '12.2(52)SE1' ) flag++; if ( version == '12.2(52)SG' ) flag++; if ( version == '12.2(52)XO' ) flag++; if ( version == '12.2(53)EX' ) flag++; if ( version == '12.2(53)EY' ) flag++; if ( version == '12.2(53)EZ' ) flag++; if ( version == '12.2(53)SE' ) flag++; if ( version == '12.2(53)SE1' ) flag++; if ( version == '12.2(53)SE2' ) flag++; if ( version == '12.2(53)SG' ) flag++; if ( version == '12.2(53)SG1' ) flag++; if ( version == '12.2(53)SG2' ) flag++; if ( version == '12.2(53)SG3' ) flag++; if ( version == '12.2(53)SG4' ) flag++; if ( version == '12.2(53)SG5' ) flag++; if ( version == '12.2(53)SG6' ) flag++; if ( version == '12.2(54)SE' ) flag++; if ( version == '12.2(54)SG' ) flag++; if ( version == '12.2(54)SG1' ) flag++; if ( version == '12.2(54)WO' ) flag++; if ( version == '12.2(54)XO' ) flag++; if ( version == '12.2(55)EX' ) flag++; if ( version == '12.2(55)EX1' ) flag++; if ( version == '12.2(55)EX2' ) flag++; if ( version == '12.2(55)EX3' ) flag++; if ( version == '12.2(55)EY' ) flag++; if ( version == '12.2(55)EZ' ) flag++; if ( version == '12.2(55)SE' ) flag++; if ( version == '12.2(55)SE1' ) flag++; if ( version == '12.2(55)SE2' ) flag++; if ( version == '12.2(55)SE3' ) flag++; if ( version == '12.2(55)SE4' ) flag++; if ( version == '12.2(58)EY' ) flag++; if ( version == '12.2(58)EY1' ) flag++; if ( version == '12.2(58)SE' ) flag++; if ( version == '12.2(58)SE1' ) flag++; if ( version == '12.2(58)SE2' ) flag++; if ( version == '12.3(1)' ) flag++; if ( version == '12.3(10)' ) flag++; if ( version == '12.3(10a)' ) flag++; if ( version == '12.3(10a)M0' ) flag++; if ( version == '12.3(10b)' ) flag++; if ( version == '12.3(10c)' ) flag++; if ( version == '12.3(10d)' ) flag++; if ( version == '12.3(10e)' ) flag++; if ( version == '12.3(10f)' ) flag++; if ( version == '12.3(11)JA' ) flag++; if ( version == '12.3(11)JA1' ) flag++; if ( version == '12.3(11)JA3' ) flag++; if ( version == '12.3(11)JA4' ) flag++; if ( version == '12.3(11)T' ) flag++; if ( version == '12.3(11)T1' ) flag++; if ( version == '12.3(11)T10' ) flag++; if ( version == '12.3(11)T11' ) flag++; if ( version == '12.3(11)T12' ) flag++; if ( version == '12.3(11)T2' ) flag++; if ( version == '12.3(11)T2a' ) flag++; if ( version == '12.3(11)T3' ) flag++; if ( version == '12.3(11)T4' ) flag++; if ( version == '12.3(11)T5' ) flag++; if ( version == '12.3(11)T6' ) flag++; if ( version == '12.3(11)T7' ) flag++; if ( version == '12.3(11)T8' ) flag++; if ( version == '12.3(11)T9' ) flag++; if ( version == '12.3(11)TO3' ) flag++; if ( version == '12.3(11)XL' ) flag++; if ( version == '12.3(11)XL1' ) flag++; if ( version == '12.3(11)XL2' ) flag++; if ( version == '12.3(11)XL3' ) flag++; if ( version == '12.3(11)YF' ) flag++; if ( version == '12.3(11)YF1' ) flag++; if ( version == '12.3(11)YF2' ) flag++; if ( version == '12.3(11)YF3' ) flag++; if ( version == '12.3(11)YF4' ) flag++; if ( version == '12.3(11)YJ' ) flag++; if ( version == '12.3(11)YK' ) flag++; if ( version == '12.3(11)YK1' ) flag++; if ( version == '12.3(11)YK2' ) flag++; if ( version == '12.3(11)YK3' ) flag++; if ( version == '12.3(11)YL' ) flag++; if ( version == '12.3(11)YL1' ) flag++; if ( version == '12.3(11)YL2' ) flag++; if ( version == '12.3(11)YN' ) flag++; if ( version == '12.3(11)YR' ) flag++; if ( version == '12.3(11)YR1' ) flag++; if ( version == '12.3(11)YS' ) flag++; if ( version == '12.3(11)YS1' ) flag++; if ( version == '12.3(11)YS2' ) flag++; if ( version == '12.3(11)YZ' ) flag++; if ( version == '12.3(11)YZ1' ) flag++; if ( version == '12.3(11)YZ2' ) flag++; if ( version == '12.3(11)ZB' ) flag++; if ( version == '12.3(11)ZB1' ) flag++; if ( version == '12.3(11)ZB2' ) flag++; if ( version == '12.3(12)' ) flag++; if ( version == '12.3(12a)' ) flag++; if ( version == '12.3(12b)' ) flag++; if ( version == '12.3(12c)' ) flag++; if ( version == '12.3(12d)' ) flag++; if ( version == '12.3(12e)' ) flag++; if ( version == '12.3(13)' ) flag++; if ( version == '12.3(13a)' ) flag++; if ( version == '12.3(13a)BC' ) flag++; if ( version == '12.3(13a)BC1' ) flag++; if ( version == '12.3(13a)BC2' ) flag++; if ( version == '12.3(13a)BC3' ) flag++; if ( version == '12.3(13a)BC4' ) flag++; if ( version == '12.3(13a)BC5' ) flag++; if ( version == '12.3(13a)BC6' ) flag++; if ( version == '12.3(13b)' ) flag++; if ( version == '12.3(14)T' ) flag++; if ( version == '12.3(14)T1' ) flag++; if ( version == '12.3(14)T2' ) flag++; if ( version == '12.3(14)T3' ) flag++; if ( version == '12.3(14)T4' ) flag++; if ( version == '12.3(14)T5' ) flag++; if ( version == '12.3(14)T6' ) flag++; if ( version == '12.3(14)T7' ) flag++; if ( version == '12.3(14)YM1' ) flag++; if ( version == '12.3(14)YM10' ) flag++; if ( version == '12.3(14)YM11' ) flag++; if ( version == '12.3(14)YM12' ) flag++; if ( version == '12.3(14)YM13' ) flag++; if ( version == '12.3(14)YM2' ) flag++; if ( version == '12.3(14)YM3' ) flag++; if ( version == '12.3(14)YM4' ) flag++; if ( version == '12.3(14)YM5' ) flag++; if ( version == '12.3(14)YM6' ) flag++; if ( version == '12.3(14)YM7' ) flag++; if ( version == '12.3(14)YM8' ) flag++; if ( version == '12.3(14)YM9' ) flag++; if ( version == '12.3(14)YQ' ) flag++; if ( version == '12.3(14)YQ1' ) flag++; if ( version == '12.3(14)YQ2' ) flag++; if ( version == '12.3(14)YQ3' ) flag++; if ( version == '12.3(14)YQ4' ) flag++; if ( version == '12.3(14)YQ5' ) flag++; if ( version == '12.3(14)YQ6' ) flag++; if ( version == '12.3(14)YQ7' ) flag++; if ( version == '12.3(14)YQ8' ) flag++; if ( version == '12.3(14)YT' ) flag++; if ( version == '12.3(14)YT1' ) flag++; if ( version == '12.3(14)YU' ) flag++; if ( version == '12.3(14)YU1' ) flag++; if ( version == '12.3(14)YX' ) flag++; if ( version == '12.3(14)YX1' ) flag++; if ( version == '12.3(14)YX10' ) flag++; if ( version == '12.3(14)YX11' ) flag++; if ( version == '12.3(14)YX12' ) flag++; if ( version == '12.3(14)YX13' ) flag++; if ( version == '12.3(14)YX14' ) flag++; if ( version == '12.3(14)YX15' ) flag++; if ( version == '12.3(14)YX16' ) flag++; if ( version == '12.3(14)YX17' ) flag++; if ( version == '12.3(14)YX2' ) flag++; if ( version == '12.3(14)YX3' ) flag++; if ( version == '12.3(14)YX4' ) flag++; if ( version == '12.3(14)YX7' ) flag++; if ( version == '12.3(14)YX8' ) flag++; if ( version == '12.3(14)YX9' ) flag++; if ( version == '12.3(15)' ) flag++; if ( version == '12.3(15a)' ) flag++; if ( version == '12.3(15b)' ) flag++; if ( version == '12.3(16)' ) flag++; if ( version == '12.3(16a)' ) flag++; if ( version == '12.3(17)' ) flag++; if ( version == '12.3(17a)' ) flag++; if ( version == '12.3(17a)BC' ) flag++; if ( version == '12.3(17a)BC1' ) flag++; if ( version == '12.3(17a)BC2' ) flag++; if ( version == '12.3(17b)' ) flag++; if ( version == '12.3(17b)BC3' ) flag++; if ( version == '12.3(17b)BC4' ) flag++; if ( version == '12.3(17b)BC5' ) flag++; if ( version == '12.3(17b)BC6' ) flag++; if ( version == '12.3(17b)BC7' ) flag++; if ( version == '12.3(17b)BC8' ) flag++; if ( version == '12.3(17b)BC9' ) flag++; if ( version == '12.3(17c)' ) flag++; if ( version == '12.3(18)' ) flag++; if ( version == '12.3(18a)' ) flag++; if ( version == '12.3(19)' ) flag++; if ( version == '12.3(19a)' ) flag++; if ( version == '12.3(1a)' ) flag++; if ( version == '12.3(1a)B' ) flag++; if ( version == '12.3(1a)BW' ) flag++; if ( version == '12.3(2)JA' ) flag++; if ( version == '12.3(2)JA1' ) flag++; if ( version == '12.3(2)JA2' ) flag++; if ( version == '12.3(2)JA5' ) flag++; if ( version == '12.3(2)JA6' ) flag++; if ( version == '12.3(2)JK' ) flag++; if ( version == '12.3(2)JK1' ) flag++; if ( version == '12.3(2)JK2' ) flag++; if ( version == '12.3(2)JK3' ) flag++; if ( version == '12.3(2)JL' ) flag++; if ( version == '12.3(2)JL1' ) flag++; if ( version == '12.3(2)JL2' ) flag++; if ( version == '12.3(2)JL3' ) flag++; if ( version == '12.3(2)JL4' ) flag++; if ( version == '12.3(2)T' ) flag++; if ( version == '12.3(2)T1' ) flag++; if ( version == '12.3(2)T2' ) flag++; if ( version == '12.3(2)T3' ) flag++; if ( version == '12.3(2)T4' ) flag++; if ( version == '12.3(2)T5' ) flag++; if ( version == '12.3(2)T6' ) flag++; if ( version == '12.3(2)T7' ) flag++; if ( version == '12.3(2)T8' ) flag++; if ( version == '12.3(2)T9' ) flag++; if ( version == '12.3(2)XA' ) flag++; if ( version == '12.3(2)XA1' ) flag++; if ( version == '12.3(2)XA2' ) flag++; if ( version == '12.3(2)XA3' ) flag++; if ( version == '12.3(2)XA4' ) flag++; if ( version == '12.3(2)XA5' ) flag++; if ( version == '12.3(2)XA6' ) flag++; if ( version == '12.3(2)XA7' ) flag++; if ( version == '12.3(2)XB' ) flag++; if ( version == '12.3(2)XB1' ) flag++; if ( version == '12.3(2)XB3' ) flag++; if ( version == '12.3(2)XC' ) flag++; if ( version == '12.3(2)XC1' ) flag++; if ( version == '12.3(2)XC2' ) flag++; if ( version == '12.3(2)XC3' ) flag++; if ( version == '12.3(2)XC4' ) flag++; if ( version == '12.3(2)XC5' ) flag++; if ( version == '12.3(2)XE' ) flag++; if ( version == '12.3(2)XE1' ) flag++; if ( version == '12.3(2)XE2' ) flag++; if ( version == '12.3(2)XE3' ) flag++; if ( version == '12.3(2)XE4' ) flag++; if ( version == '12.3(2)XE5' ) flag++; if ( version == '12.3(2)XF' ) flag++; if ( version == '12.3(2)XT' ) flag++; if ( version == '12.3(2)XT1' ) flag++; if ( version == '12.3(2)XT2' ) flag++; if ( version == '12.3(2)XT3' ) flag++; if ( version == '12.3(2)XZ1' ) flag++; if ( version == '12.3(2)XZ2' ) flag++; if ( version == '12.3(20)' ) flag++; if ( version == '12.3(20a)' ) flag++; if ( version == '12.3(21)' ) flag++; if ( version == '12.3(21)BC' ) flag++; if ( version == '12.3(21a)' ) flag++; if ( version == '12.3(21a)BC1' ) flag++; if ( version == '12.3(21a)BC2' ) flag++; if ( version == '12.3(21a)BC3' ) flag++; if ( version == '12.3(21a)BC4' ) flag++; if ( version == '12.3(21a)BC5' ) flag++; if ( version == '12.3(21a)BC6' ) flag++; if ( version == '12.3(21a)BC7' ) flag++; if ( version == '12.3(21a)BC8' ) flag++; if ( version == '12.3(21a)BC9' ) flag++; if ( version == '12.3(21b)' ) flag++; if ( version == '12.3(22)' ) flag++; if ( version == '12.3(22a)' ) flag++; if ( version == '12.3(23)' ) flag++; if ( version == '12.3(23)BC' ) flag++; if ( version == '12.3(23)BC1' ) flag++; if ( version == '12.3(23)BC10' ) flag++; if ( version == '12.3(23)BC2' ) flag++; if ( version == '12.3(23)BC3' ) flag++; if ( version == '12.3(23)BC4' ) flag++; if ( version == '12.3(23)BC5' ) flag++; if ( version == '12.3(23)BC6' ) flag++; if ( version == '12.3(23)BC7' ) flag++; if ( version == '12.3(23)BC8' ) flag++; if ( version == '12.3(23)BC9' ) flag++; if ( version == '12.3(24)' ) flag++; if ( version == '12.3(24a)' ) flag++; if ( version == '12.3(25)' ) flag++; if ( version == '12.3(26)' ) flag++; if ( version == '12.3(3)' ) flag++; if ( version == '12.3(3)B' ) flag++; if ( version == '12.3(3)B1' ) flag++; if ( version == '12.3(3a)' ) flag++; if ( version == '12.3(3b)' ) flag++; if ( version == '12.3(3c)' ) flag++; if ( version == '12.3(3d)' ) flag++; if ( version == '12.3(3e)' ) flag++; if ( version == '12.3(3f)' ) flag++; if ( version == '12.3(3g)' ) flag++; if ( version == '12.3(3h)' ) flag++; if ( version == '12.3(3i)' ) flag++; if ( version == '12.3(4)JA' ) flag++; if ( version == '12.3(4)JA1' ) flag++; if ( version == '12.3(4)JA2' ) flag++; if ( version == '12.3(4)T' ) flag++; if ( version == '12.3(4)T1' ) flag++; if ( version == '12.3(4)T10' ) flag++; if ( version == '12.3(4)T11' ) flag++; if ( version == '12.3(4)T12' ) flag++; if ( version == '12.3(4)T2' ) flag++; if ( version == '12.3(4)T2a' ) flag++; if ( version == '12.3(4)T3' ) flag++; if ( version == '12.3(4)T4' ) flag++; if ( version == '12.3(4)T5' ) flag++; if ( version == '12.3(4)T6' ) flag++; if ( version == '12.3(4)T7' ) flag++; if ( version == '12.3(4)T8' ) flag++; if ( version == '12.3(4)T9' ) flag++; if ( version == '12.3(4)TPC11a' ) flag++; if ( version == '12.3(4)TPC11b' ) flag++; if ( version == '12.3(4)XD' ) flag++; if ( version == '12.3(4)XD1' ) flag++; if ( version == '12.3(4)XD2' ) flag++; if ( version == '12.3(4)XD3' ) flag++; if ( version == '12.3(4)XD4' ) flag++; if ( version == '12.3(4)XG' ) flag++; if ( version == '12.3(4)XG1' ) flag++; if ( version == '12.3(4)XG2' ) flag++; if ( version == '12.3(4)XG3' ) flag++; if ( version == '12.3(4)XG4' ) flag++; if ( version == '12.3(4)XG5' ) flag++; if ( version == '12.3(4)XH' ) flag++; if ( version == '12.3(4)XH1' ) flag++; if ( version == '12.3(4)XK' ) flag++; if ( version == '12.3(4)XK1' ) flag++; if ( version == '12.3(4)XK2' ) flag++; if ( version == '12.3(4)XK3' ) flag++; if ( version == '12.3(4)XK4' ) flag++; if ( version == '12.3(4)XN' ) flag++; if ( version == '12.3(4)XN1' ) flag++; if ( version == '12.3(4)XN2' ) flag++; if ( version == '12.3(4)XQ' ) flag++; if ( version == '12.3(4)XQ1' ) flag++; if ( version == '12.3(4)YE' ) flag++; if ( version == '12.3(4)YE1' ) flag++; if ( version == '12.3(5)' ) flag++; if ( version == '12.3(5a)' ) flag++; if ( version == '12.3(5a)B' ) flag++; if ( version == '12.3(5a)B0a' ) flag++; if ( version == '12.3(5a)B1' ) flag++; if ( version == '12.3(5a)B2' ) flag++; if ( version == '12.3(5a)B3' ) flag++; if ( version == '12.3(5a)B4' ) flag++; if ( version == '12.3(5a)B5' ) flag++; if ( version == '12.3(5b)' ) flag++; if ( version == '12.3(5c)' ) flag++; if ( version == '12.3(5d)' ) flag++; if ( version == '12.3(5e)' ) flag++; if ( version == '12.3(5f)' ) flag++; if ( version == '12.3(6)' ) flag++; if ( version == '12.3(6a)' ) flag++; if ( version == '12.3(6b)' ) flag++; if ( version == '12.3(6c)' ) flag++; if ( version == '12.3(6d)' ) flag++; if ( version == '12.3(6e)' ) flag++; if ( version == '12.3(6f)' ) flag++; if ( version == '12.3(7)JA' ) flag++; if ( version == '12.3(7)JA1' ) flag++; if ( version == '12.3(7)JA2' ) flag++; if ( version == '12.3(7)JA3' ) flag++; if ( version == '12.3(7)JA4' ) flag++; if ( version == '12.3(7)JA5' ) flag++; if ( version == '12.3(7)T' ) flag++; if ( version == '12.3(7)T1' ) flag++; if ( version == '12.3(7)T10' ) flag++; if ( version == '12.3(7)T11' ) flag++; if ( version == '12.3(7)T12' ) flag++; if ( version == '12.3(7)T2' ) flag++; if ( version == '12.3(7)T3' ) flag++; if ( version == '12.3(7)T4' ) flag++; if ( version == '12.3(7)T5' ) flag++; if ( version == '12.3(7)T6' ) flag++; if ( version == '12.3(7)T7' ) flag++; if ( version == '12.3(7)T8' ) flag++; if ( version == '12.3(7)T9' ) flag++; if ( version == '12.3(7)XI' ) flag++; if ( version == '12.3(7)XI10' ) flag++; if ( version == '12.3(7)XI10a' ) flag++; if ( version == '12.3(7)XI10b' ) flag++; if ( version == '12.3(7)XI1a' ) flag++; if ( version == '12.3(7)XI1b' ) flag++; if ( version == '12.3(7)XI1c' ) flag++; if ( version == '12.3(7)XI2' ) flag++; if ( version == '12.3(7)XI2a' ) flag++; if ( version == '12.3(7)XI2b' ) flag++; if ( version == '12.3(7)XI2c' ) flag++; if ( version == '12.3(7)XI3' ) flag++; if ( version == '12.3(7)XI3a' ) flag++; if ( version == '12.3(7)XI3b' ) flag++; if ( version == '12.3(7)XI3d' ) flag++; if ( version == '12.3(7)XI3e' ) flag++; if ( version == '12.3(7)XI4' ) flag++; if ( version == '12.3(7)XI5' ) flag++; if ( version == '12.3(7)XI6' ) flag++; if ( version == '12.3(7)XI7' ) flag++; if ( version == '12.3(7)XI7a' ) flag++; if ( version == '12.3(7)XI7b' ) flag++; if ( version == '12.3(7)XI8' ) flag++; if ( version == '12.3(7)XI8a' ) flag++; if ( version == '12.3(7)XI8bb' ) flag++; if ( version == '12.3(7)XI8bc' ) flag++; if ( version == '12.3(7)XI8c' ) flag++; if ( version == '12.3(7)XI8d' ) flag++; if ( version == '12.3(7)XI8e' ) flag++; if ( version == '12.3(7)XI8f' ) flag++; if ( version == '12.3(7)XI8g' ) flag++; if ( version == '12.3(7)XI9' ) flag++; if ( version == '12.3(7)XJ' ) flag++; if ( version == '12.3(7)XJ1' ) flag++; if ( version == '12.3(7)XJ2' ) flag++; if ( version == '12.3(7)XL' ) flag++; if ( version == '12.3(7)XM' ) flag++; if ( version == '12.3(7)XR' ) flag++; if ( version == '12.3(7)XR1' ) flag++; if ( version == '12.3(7)XR2' ) flag++; if ( version == '12.3(7)XR3' ) flag++; if ( version == '12.3(7)XR4' ) flag++; if ( version == '12.3(7)XR5' ) flag++; if ( version == '12.3(7)XR6' ) flag++; if ( version == '12.3(7)XR7' ) flag++; if ( version == '12.3(7)XS' ) flag++; if ( version == '12.3(7)XS1' ) flag++; if ( version == '12.3(7)XS2' ) flag++; if ( version == '12.3(7)YB' ) flag++; if ( version == '12.3(7)YB1' ) flag++; if ( version == '12.3(8)JA' ) flag++; if ( version == '12.3(8)JA1' ) flag++; if ( version == '12.3(8)JA2' ) flag++; if ( version == '12.3(8)JEA' ) flag++; if ( version == '12.3(8)JEA1' ) flag++; if ( version == '12.3(8)JEA2' ) flag++; if ( version == '12.3(8)JEA3' ) flag++; if ( version == '12.3(8)JEB' ) flag++; if ( version == '12.3(8)JEB1' ) flag++; if ( version == '12.3(8)JEC' ) flag++; if ( version == '12.3(8)JEC1' ) flag++; if ( version == '12.3(8)JEC2' ) flag++; if ( version == '12.3(8)JEC3' ) flag++; if ( version == '12.3(8)JED' ) flag++; if ( version == '12.3(8)JED1' ) flag++; if ( version == '12.3(8)JEE' ) flag++; if ( version == '12.3(8)JK1' ) flag++; if ( version == '12.3(8)T' ) flag++; if ( version == '12.3(8)T0a' ) flag++; if ( version == '12.3(8)T1' ) flag++; if ( version == '12.3(8)T10' ) flag++; if ( version == '12.3(8)T11' ) flag++; if ( version == '12.3(8)T2' ) flag++; if ( version == '12.3(8)T3' ) flag++; if ( version == '12.3(8)T4' ) flag++; if ( version == '12.3(8)T5' ) flag++; if ( version == '12.3(8)T6' ) flag++; if ( version == '12.3(8)T7' ) flag++; if ( version == '12.3(8)T8' ) flag++; if ( version == '12.3(8)T9' ) flag++; if ( version == '12.3(8)XU' ) flag++; if ( version == '12.3(8)XU1' ) flag++; if ( version == '12.3(8)XU2' ) flag++; if ( version == '12.3(8)XU3' ) flag++; if ( version == '12.3(8)XU4' ) flag++; if ( version == '12.3(8)XU5' ) flag++; if ( version == '12.3(8)XW' ) flag++; if ( version == '12.3(8)XW1' ) flag++; if ( version == '12.3(8)XW1a' ) flag++; if ( version == '12.3(8)XW1b' ) flag++; if ( version == '12.3(8)XW2' ) flag++; if ( version == '12.3(8)XW3' ) flag++; if ( version == '12.3(8)XX' ) flag++; if ( version == '12.3(8)XX1' ) flag++; if ( version == '12.3(8)XX2' ) flag++; if ( version == '12.3(8)XX2a' ) flag++; if ( version == '12.3(8)XX2b' ) flag++; if ( version == '12.3(8)XX2c' ) flag++; if ( version == '12.3(8)XX2d' ) flag++; if ( version == '12.3(8)XX2e' ) flag++; if ( version == '12.3(8)XY' ) flag++; if ( version == '12.3(8)XY1' ) flag++; if ( version == '12.3(8)XY2' ) flag++; if ( version == '12.3(8)XY3' ) flag++; if ( version == '12.3(8)XY4' ) flag++; if ( version == '12.3(8)XY5' ) flag++; if ( version == '12.3(8)XY6' ) flag++; if ( version == '12.3(8)XY7' ) flag++; if ( version == '12.3(8)YA' ) flag++; if ( version == '12.3(8)YA1' ) flag++; if ( version == '12.3(8)YC' ) flag++; if ( version == '12.3(8)YC1' ) flag++; if ( version == '12.3(8)YC2' ) flag++; if ( version == '12.3(8)YC3' ) flag++; if ( version == '12.3(8)YD' ) flag++; if ( version == '12.3(8)YD1' ) flag++; if ( version == '12.3(8)YG' ) flag++; if ( version == '12.3(8)YG1' ) flag++; if ( version == '12.3(8)YG2' ) flag++; if ( version == '12.3(8)YG3' ) flag++; if ( version == '12.3(8)YG4' ) flag++; if ( version == '12.3(8)YG5' ) flag++; if ( version == '12.3(8)YG6' ) flag++; if ( version == '12.3(8)YG7' ) flag++; if ( version == '12.3(8)YH' ) flag++; if ( version == '12.3(8)YI' ) flag++; if ( version == '12.3(8)YI1' ) flag++; if ( version == '12.3(8)YI2' ) flag++; if ( version == '12.3(8)YI3' ) flag++; if ( version == '12.3(8)ZA' ) flag++; if ( version == '12.3(8)ZA1' ) flag++; if ( version == '12.3(9)' ) flag++; if ( version == '12.3(9)M0' ) flag++; if ( version == '12.3(9)M1' ) flag++; if ( version == '12.3(9a)' ) flag++; if ( version == '12.3(9a)BC' ) flag++; if ( version == '12.3(9a)BC1' ) flag++; if ( version == '12.3(9a)BC2' ) flag++; if ( version == '12.3(9a)BC3' ) flag++; if ( version == '12.3(9a)BC4' ) flag++; if ( version == '12.3(9a)BC5' ) flag++; if ( version == '12.3(9a)BC6' ) flag++; if ( version == '12.3(9a)BC7' ) flag++; if ( version == '12.3(9a)BC8' ) flag++; if ( version == '12.3(9a)BC9' ) flag++; if ( version == '12.3(9b)' ) flag++; if ( version == '12.3(9c)' ) flag++; if ( version == '12.3(9d)' ) flag++; if ( version == '12.3(9e)' ) flag++; if ( version == '12.4(1)' ) flag++; if ( version == '12.4(10)' ) flag++; if ( version == '12.4(10a)' ) flag++; if ( version == '12.4(10b)' ) flag++; if ( version == '12.4(10b)JA' ) flag++; if ( version == '12.4(10b)JA1' ) flag++; if ( version == '12.4(10b)JA2' ) flag++; if ( version == '12.4(10b)JA3' ) flag++; if ( version == '12.4(10b)JA4' ) flag++; if ( version == '12.4(10b)JDA' ) flag++; if ( version == '12.4(10b)JDA1' ) flag++; if ( version == '12.4(10b)JDA2' ) flag++; if ( version == '12.4(10b)JDA3' ) flag++; if ( version == '12.4(10b)JDC' ) flag++; if ( version == '12.4(10b)JDD' ) flag++; if ( version == '12.4(10b)JDE' ) flag++; if ( version == '12.4(10b)JX' ) flag++; if ( version == '12.4(10c)' ) flag++; if ( version == '12.4(11)MD' ) flag++; if ( version == '12.4(11)MD1' ) flag++; if ( version == '12.4(11)MD10' ) flag++; if ( version == '12.4(11)MD2' ) flag++; if ( version == '12.4(11)MD3' ) flag++; if ( version == '12.4(11)MD4' ) flag++; if ( version == '12.4(11)MD5' ) flag++; if ( version == '12.4(11)MD6' ) flag++; if ( version == '12.4(11)MD7' ) flag++; if ( version == '12.4(11)MD8' ) flag++; if ( version == '12.4(11)MD9' ) flag++; if ( version == '12.4(11)MR' ) flag++; if ( version == '12.4(11)SW' ) flag++; if ( version == '12.4(11)SW1' ) flag++; if ( version == '12.4(11)SW2' ) flag++; if ( version == '12.4(11)SW3' ) flag++; if ( version == '12.4(11)T' ) flag++; if ( version == '12.4(11)T1' ) flag++; if ( version == '12.4(11)T2' ) flag++; if ( version == '12.4(11)T3' ) flag++; if ( version == '12.4(11)T4' ) flag++; if ( version == '12.4(11)XJ' ) flag++; if ( version == '12.4(11)XJ1' ) flag++; if ( version == '12.4(11)XJ2' ) flag++; if ( version == '12.4(11)XJ3' ) flag++; if ( version == '12.4(11)XJ4' ) flag++; if ( version == '12.4(11)XJ5' ) flag++; if ( version == '12.4(11)XJ6' ) flag++; if ( version == '12.4(11)XV' ) flag++; if ( version == '12.4(11)XV1' ) flag++; if ( version == '12.4(11)XW' ) flag++; if ( version == '12.4(11)XW1' ) flag++; if ( version == '12.4(11)XW10' ) flag++; if ( version == '12.4(11)XW2' ) flag++; if ( version == '12.4(11)XW3' ) flag++; if ( version == '12.4(11)XW4' ) flag++; if ( version == '12.4(11)XW5' ) flag++; if ( version == '12.4(11)XW6' ) flag++; if ( version == '12.4(11)XW7' ) flag++; if ( version == '12.4(11)XW8' ) flag++; if ( version == '12.4(11)XW9' ) flag++; if ( version == '12.4(12)' ) flag++; if ( version == '12.4(12)MR' ) flag++; if ( version == '12.4(12)MR1' ) flag++; if ( version == '12.4(12)MR2' ) flag++; if ( version == '12.4(12a)' ) flag++; if ( version == '12.4(12b)' ) flag++; if ( version == '12.4(12c)' ) flag++; if ( version == '12.4(13)' ) flag++; if ( version == '12.4(13a)' ) flag++; if ( version == '12.4(13b)' ) flag++; if ( version == '12.4(13c)' ) flag++; if ( version == '12.4(13d)' ) flag++; if ( version == '12.4(13e)' ) flag++; if ( version == '12.4(13f)' ) flag++; if ( version == '12.4(14)XK' ) flag++; if ( version == '12.4(15)MD' ) flag++; if ( version == '12.4(15)MD1' ) flag++; if ( version == '12.4(15)MD2' ) flag++; if ( version == '12.4(15)MD3' ) flag++; if ( version == '12.4(15)MD4' ) flag++; if ( version == '12.4(15)MD5' ) flag++; if ( version == '12.4(15)SW' ) flag++; if ( version == '12.4(15)SW1' ) flag++; if ( version == '12.4(15)SW2' ) flag++; if ( version == '12.4(15)SW3' ) flag++; if ( version == '12.4(15)SW4' ) flag++; if ( version == '12.4(15)SW5' ) flag++; if ( version == '12.4(15)SW6' ) flag++; if ( version == '12.4(15)SW7' ) flag++; if ( version == '12.4(15)SW8' ) flag++; if ( version == '12.4(15)T' ) flag++; if ( version == '12.4(15)T1' ) flag++; if ( version == '12.4(15)T10' ) flag++; if ( version == '12.4(15)T11' ) flag++; if ( version == '12.4(15)T12' ) flag++; if ( version == '12.4(15)T13' ) flag++; if ( version == '12.4(15)T13b' ) flag++; if ( version == '12.4(15)T14' ) flag++; if ( version == '12.4(15)T15' ) flag++; if ( version == '12.4(15)T16' ) flag++; if ( version == '12.4(15)T2' ) flag++; if ( version == '12.4(15)T3' ) flag++; if ( version == '12.4(15)T4' ) flag++; if ( version == '12.4(15)T5' ) flag++; if ( version == '12.4(15)T6' ) flag++; if ( version == '12.4(15)T6a' ) flag++; if ( version == '12.4(15)T7' ) flag++; if ( version == '12.4(15)T8' ) flag++; if ( version == '12.4(15)T9' ) flag++; if ( version == '12.4(15)XF' ) flag++; if ( version == '12.4(15)XL' ) flag++; if ( version == '12.4(15)XL1' ) flag++; if ( version == '12.4(15)XL2' ) flag++; if ( version == '12.4(15)XL3' ) flag++; if ( version == '12.4(15)XL4' ) flag++; if ( version == '12.4(15)XL5' ) flag++; if ( version == '12.4(15)XM' ) flag++; if ( version == '12.4(15)XM1' ) flag++; if ( version == '12.4(15)XM2' ) flag++; if ( version == '12.4(15)XM3' ) flag++; if ( version == '12.4(15)XN' ) flag++; if ( version == '12.4(15)XQ' ) flag++; if ( version == '12.4(15)XQ1' ) flag++; if ( version == '12.4(15)XQ2' ) flag++; if ( version == '12.4(15)XQ2a' ) flag++; if ( version == '12.4(15)XQ2b' ) flag++; if ( version == '12.4(15)XQ2c' ) flag++; if ( version == '12.4(15)XQ2d' ) flag++; if ( version == '12.4(15)XQ3' ) flag++; if ( version == '12.4(15)XQ4' ) flag++; if ( version == '12.4(15)XQ5' ) flag++; if ( version == '12.4(15)XQ6' ) flag++; if ( version == '12.4(15)XQ7' ) flag++; if ( version == '12.4(15)XQ8' ) flag++; if ( version == '12.4(15)XR' ) flag++; if ( version == '12.4(15)XR1' ) flag++; if ( version == '12.4(15)XR10' ) flag++; if ( version == '12.4(15)XR2' ) flag++; if ( version == '12.4(15)XR3' ) flag++; if ( version == '12.4(15)XR4' ) flag++; if ( version == '12.4(15)XR5' ) flag++; if ( version == '12.4(15)XR6' ) flag++; if ( version == '12.4(15)XR7' ) flag++; if ( version == '12.4(15)XR8' ) flag++; if ( version == '12.4(15)XR9' ) flag++; if ( version == '12.4(15)XY' ) flag++; if ( version == '12.4(15)XY1' ) flag++; if ( version == '12.4(15)XY2' ) flag++; if ( version == '12.4(15)XY3' ) flag++; if ( version == '12.4(15)XY4' ) flag++; if ( version == '12.4(15)XY5' ) flag++; if ( version == '12.4(15)XZ' ) flag++; if ( version == '12.4(15)XZ1' ) flag++; if ( version == '12.4(15)XZ2' ) flag++; if ( version == '12.4(16)' ) flag++; if ( version == '12.4(16)MR' ) flag++; if ( version == '12.4(16)MR1' ) flag++; if ( version == '12.4(16)MR2' ) flag++; if ( version == '12.4(16a)' ) flag++; if ( version == '12.4(16b)' ) flag++; if ( version == '12.4(17)' ) flag++; if ( version == '12.4(17a)' ) flag++; if ( version == '12.4(17b)' ) flag++; if ( version == '12.4(18)' ) flag++; if ( version == '12.4(18a)' ) flag++; if ( version == '12.4(18a)JA' ) flag++; if ( version == '12.4(18a)JA1' ) flag++; if ( version == '12.4(18a)JA2' ) flag++; if ( version == '12.4(18a)JA3' ) flag++; if ( version == '12.4(18b)' ) flag++; if ( version == '12.4(18c)' ) flag++; if ( version == '12.4(18d)' ) flag++; if ( version == '12.4(18e)' ) flag++; if ( version == '12.4(19)' ) flag++; if ( version == '12.4(19)MR' ) flag++; if ( version == '12.4(19)MR1' ) flag++; if ( version == '12.4(19)MR2' ) flag++; if ( version == '12.4(19)MR3' ) flag++; if ( version == '12.4(1a)' ) flag++; if ( version == '12.4(1b)' ) flag++; if ( version == '12.4(1c)' ) flag++; if ( version == '12.4(2)MR' ) flag++; if ( version == '12.4(2)MR1' ) flag++; if ( version == '12.4(2)T' ) flag++; if ( version == '12.4(2)T1' ) flag++; if ( version == '12.4(2)T2' ) flag++; if ( version == '12.4(2)T3' ) flag++; if ( version == '12.4(2)T4' ) flag++; if ( version == '12.4(2)T5' ) flag++; if ( version == '12.4(2)T6' ) flag++; if ( version == '12.4(2)XA' ) flag++; if ( version == '12.4(2)XA1' ) flag++; if ( version == '12.4(2)XA2' ) flag++; if ( version == '12.4(2)XB' ) flag++; if ( version == '12.4(2)XB1' ) flag++; if ( version == '12.4(2)XB10' ) flag++; if ( version == '12.4(2)XB11' ) flag++; if ( version == '12.4(2)XB12' ) flag++; if ( version == '12.4(2)XB2' ) flag++; if ( version == '12.4(2)XB3' ) flag++; if ( version == '12.4(2)XB4' ) flag++; if ( version == '12.4(2)XB5' ) flag++; if ( version == '12.4(2)XB6' ) flag++; if ( version == '12.4(2)XB7' ) flag++; if ( version == '12.4(2)XB8' ) flag++; if ( version == '12.4(2)XB9' ) flag++; if ( version == '12.4(20)MR' ) flag++; if ( version == '12.4(20)MR2' ) flag++; if ( version == '12.4(20)MRA' ) flag++; if ( version == '12.4(20)MRA1' ) flag++; if ( version == '12.4(20)MRB' ) flag++; if ( version == '12.4(20)MRB1' ) flag++; if ( version == '12.4(20)T' ) flag++; if ( version == '12.4(20)T1' ) flag++; if ( version == '12.4(20)T2' ) flag++; if ( version == '12.4(20)T3' ) flag++; if ( version == '12.4(20)T4' ) flag++; if ( version == '12.4(20)T5' ) flag++; if ( version == '12.4(20)T5a' ) flag++; if ( version == '12.4(20)T6' ) flag++; if ( version == '12.4(20)YA' ) flag++; if ( version == '12.4(20)YA1' ) flag++; if ( version == '12.4(20)YA2' ) flag++; if ( version == '12.4(20)YA3' ) flag++; if ( version == '12.4(21)' ) flag++; if ( version == '12.4(21a)' ) flag++; if ( version == '12.4(21a)JA' ) flag++; if ( version == '12.4(21a)JA1' ) flag++; if ( version == '12.4(21a)JA2' ) flag++; if ( version == '12.4(21a)JHA' ) flag++; if ( version == '12.4(21a)JHB' ) flag++; if ( version == '12.4(21a)JHB1' ) flag++; if ( version == '12.4(21a)JHC' ) flag++; if ( version == '12.4(21a)JX' ) flag++; if ( version == '12.4(21a)JY' ) flag++; if ( version == '12.4(21a)JZ' ) flag++; if ( version == '12.4(21a)M1' ) flag++; if ( version == '12.4(22)GC1' ) flag++; if ( version == '12.4(22)GC1a' ) flag++; if ( version == '12.4(22)MD' ) flag++; if ( version == '12.4(22)MD1' ) flag++; if ( version == '12.4(22)MD2' ) flag++; if ( version == '12.4(22)MDA' ) flag++; if ( version == '12.4(22)MDA1' ) flag++; if ( version == '12.4(22)MDA2' ) flag++; if ( version == '12.4(22)MDA3' ) flag++; if ( version == '12.4(22)MDA4' ) flag++; if ( version == '12.4(22)MDA5' ) flag++; if ( version == '12.4(22)MDA6' ) flag++; if ( version == '12.4(22)T' ) flag++; if ( version == '12.4(22)T1' ) flag++; if ( version == '12.4(22)T2' ) flag++; if ( version == '12.4(22)T3' ) flag++; if ( version == '12.4(22)T4' ) flag++; if ( version == '12.4(22)T5' ) flag++; if ( version == '12.4(22)XR' ) flag++; if ( version == '12.4(22)XR1' ) flag++; if ( version == '12.4(22)XR10' ) flag++; if ( version == '12.4(22)XR11' ) flag++; if ( version == '12.4(22)XR12' ) flag++; if ( version == '12.4(22)XR2' ) flag++; if ( version == '12.4(22)XR3' ) flag++; if ( version == '12.4(22)XR4' ) flag++; if ( version == '12.4(22)XR5' ) flag++; if ( version == '12.4(22)XR6' ) flag++; if ( version == '12.4(22)XR7' ) flag++; if ( version == '12.4(22)XR8' ) flag++; if ( version == '12.4(22)XR9' ) flag++; if ( version == '12.4(22)YB' ) flag++; if ( version == '12.4(22)YB1' ) flag++; if ( version == '12.4(22)YB2' ) flag++; if ( version == '12.4(22)YB3' ) flag++; if ( version == '12.4(22)YB4' ) flag++; if ( version == '12.4(22)YB5' ) flag++; if ( version == '12.4(22)YB6' ) flag++; if ( version == '12.4(22)YB7' ) flag++; if ( version == '12.4(22)YB8' ) flag++; if ( version == '12.4(22)YD' ) flag++; if ( version == '12.4(22)YD1' ) flag++; if ( version == '12.4(22)YD2' ) flag++; if ( version == '12.4(22)YD3' ) flag++; if ( version == '12.4(22)YD4' ) flag++; if ( version == '12.4(22)YE' ) flag++; if ( version == '12.4(22)YE1' ) flag++; if ( version == '12.4(22)YE2' ) flag++; if ( version == '12.4(22)YE3' ) flag++; if ( version == '12.4(22)YE4' ) flag++; if ( version == '12.4(22)YE5' ) flag++; if ( version == '12.4(22)YE6' ) flag++; if ( version == '12.4(23)' ) flag++; if ( version == '12.4(23a)' ) flag++; if ( version == '12.4(23b)' ) flag++; if ( version == '12.4(23b)M1' ) flag++; if ( version == '12.4(23c)' ) flag++; if ( version == '12.4(23c)JA' ) flag++; if ( version == '12.4(23c)JA1' ) flag++; if ( version == '12.4(23c)JA2' ) flag++; if ( version == '12.4(23c)JA3' ) flag++; if ( version == '12.4(23c)JY' ) flag++; if ( version == '12.4(23c)JZ' ) flag++; if ( version == '12.4(23d)' ) flag++; if ( version == '12.4(23e)' ) flag++; if ( version == '12.4(24)GC1' ) flag++; if ( version == '12.4(24)GC3' ) flag++; if ( version == '12.4(24)GC3a' ) flag++; if ( version == '12.4(24)GC4' ) flag++; if ( version == '12.4(24)MD' ) flag++; if ( version == '12.4(24)MD1' ) flag++; if ( version == '12.4(24)MD2' ) flag++; if ( version == '12.4(24)MD3' ) flag++; if ( version == '12.4(24)MD4' ) flag++; if ( version == '12.4(24)MD5' ) flag++; if ( version == '12.4(24)MD6' ) flag++; if ( version == '12.4(24)MDA' ) flag++; if ( version == '12.4(24)MDA1' ) flag++; if ( version == '12.4(24)MDA10' ) flag++; if ( version == '12.4(24)MDA2' ) flag++; if ( version == '12.4(24)MDA3' ) flag++; if ( version == '12.4(24)MDA4' ) flag++; if ( version == '12.4(24)MDA5' ) flag++; if ( version == '12.4(24)MDA6' ) flag++; if ( version == '12.4(24)MDA7' ) flag++; if ( version == '12.4(24)MDA8' ) flag++; if ( version == '12.4(24)MDA9' ) flag++; if ( version == '12.4(24)MDB' ) flag++; if ( version == '12.4(24)MDB1' ) flag++; if ( version == '12.4(24)MDB3' ) flag++; if ( version == '12.4(24)MDB4' ) flag++; if ( version == '12.4(24)MDB5' ) flag++; if ( version == '12.4(24)T' ) flag++; if ( version == '12.4(24)T1' ) flag++; if ( version == '12.4(24)T2' ) flag++; if ( version == '12.4(24)T3' ) flag++; if ( version == '12.4(24)T35c' ) flag++; if ( version == '12.4(24)T3c' ) flag++; if ( version == '12.4(24)T3e' ) flag++; if ( version == '12.4(24)T3f' ) flag++; if ( version == '12.4(24)T4' ) flag++; if ( version == '12.4(24)T4a' ) flag++; if ( version == '12.4(24)T4b' ) flag++; if ( version == '12.4(24)T4c' ) flag++; if ( version == '12.4(24)T5' ) flag++; if ( version == '12.4(24)T6' ) flag++; if ( version == '12.4(24)YE' ) flag++; if ( version == '12.4(24)YE1' ) flag++; if ( version == '12.4(24)YE2' ) flag++; if ( version == '12.4(24)YE3' ) flag++; if ( version == '12.4(24)YE3a' ) flag++; if ( version == '12.4(24)YE3b' ) flag++; if ( version == '12.4(24)YE3c' ) flag++; if ( version == '12.4(24)YE4' ) flag++; if ( version == '12.4(24)YE5' ) flag++; if ( version == '12.4(24)YE6' ) flag++; if ( version == '12.4(24)YE7' ) flag++; if ( version == '12.4(24)YG1' ) flag++; if ( version == '12.4(24)YG2' ) flag++; if ( version == '12.4(24)YG3' ) flag++; if ( version == '12.4(25)' ) flag++; if ( version == '12.4(25a)' ) flag++; if ( version == '12.4(25b)' ) flag++; if ( version == '12.4(25c)' ) flag++; if ( version == '12.4(25d)' ) flag++; if ( version == '12.4(25d)JA' ) flag++; if ( version == '12.4(25d)JA1' ) flag++; if ( version == '12.4(25d)JAX' ) flag++; if ( version == '12.4(25e)' ) flag++; if ( version == '12.4(25f)' ) flag++; if ( version == '12.4(3)' ) flag++; if ( version == '12.4(3)JK' ) flag++; if ( version == '12.4(3)JK1' ) flag++; if ( version == '12.4(3)JK2' ) flag++; if ( version == '12.4(3)JK3' ) flag++; if ( version == '12.4(3)JL' ) flag++; if ( version == '12.4(3)JL1' ) flag++; if ( version == '12.4(3)JL2' ) flag++; if ( version == '12.4(3a)' ) flag++; if ( version == '12.4(3b)' ) flag++; if ( version == '12.4(3c)' ) flag++; if ( version == '12.4(3d)' ) flag++; if ( version == '12.4(3e)' ) flag++; if ( version == '12.4(3f)' ) flag++; if ( version == '12.4(3g)' ) flag++; if ( version == '12.4(3g)JA' ) flag++; if ( version == '12.4(3g)JA1' ) flag++; if ( version == '12.4(3g)JMA' ) flag++; if ( version == '12.4(3g)JMA1' ) flag++; if ( version == '12.4(3g)JMB' ) flag++; if ( version == '12.4(3g)JMC' ) flag++; if ( version == '12.4(3g)JMC1' ) flag++; if ( version == '12.4(3g)JMC2' ) flag++; if ( version == '12.4(3g)JX' ) flag++; if ( version == '12.4(3g)JX1' ) flag++; if ( version == '12.4(3h)' ) flag++; if ( version == '12.4(3i)' ) flag++; if ( version == '12.4(3j)' ) flag++; if ( version == '12.4(4)MR' ) flag++; if ( version == '12.4(4)MR1' ) flag++; if ( version == '12.4(4)T' ) flag++; if ( version == '12.4(4)T1' ) flag++; if ( version == '12.4(4)T2' ) flag++; if ( version == '12.4(4)T3' ) flag++; if ( version == '12.4(4)T4' ) flag++; if ( version == '12.4(4)T5' ) flag++; if ( version == '12.4(4)T6' ) flag++; if ( version == '12.4(4)T7' ) flag++; if ( version == '12.4(4)T8' ) flag++; if ( version == '12.4(4)XC' ) flag++; if ( version == '12.4(4)XC1' ) flag++; if ( version == '12.4(4)XC2' ) flag++; if ( version == '12.4(4)XC3' ) flag++; if ( version == '12.4(4)XC4' ) flag++; if ( version == '12.4(4)XC5' ) flag++; if ( version == '12.4(4)XC6' ) flag++; if ( version == '12.4(4)XC7' ) flag++; if ( version == '12.4(4)XD' ) flag++; if ( version == '12.4(4)XD1' ) flag++; if ( version == '12.4(4)XD10' ) flag++; if ( version == '12.4(4)XD11' ) flag++; if ( version == '12.4(4)XD12' ) flag++; if ( version == '12.4(4)XD2' ) flag++; if ( version == '12.4(4)XD3' ) flag++; if ( version == '12.4(4)XD4' ) flag++; if ( version == '12.4(4)XD5' ) flag++; if ( version == '12.4(4)XD6' ) flag++; if ( version == '12.4(4)XD7' ) flag++; if ( version == '12.4(4)XD8' ) flag++; if ( version == '12.4(4)XD9' ) flag++; if ( version == '12.4(5)' ) flag++; if ( version == '12.4(5a)' ) flag++; if ( version == '12.4(5a)M0' ) flag++; if ( version == '12.4(5b)' ) flag++; if ( version == '12.4(5c)' ) flag++; if ( version == '12.4(6)MR' ) flag++; if ( version == '12.4(6)MR1' ) flag++; if ( version == '12.4(6)T' ) flag++; if ( version == '12.4(6)T1' ) flag++; if ( version == '12.4(6)T10' ) flag++; if ( version == '12.4(6)T11' ) flag++; if ( version == '12.4(6)T12' ) flag++; if ( version == '12.4(6)T2' ) flag++; if ( version == '12.4(6)T3' ) flag++; if ( version == '12.4(6)T4' ) flag++; if ( version == '12.4(6)T5' ) flag++; if ( version == '12.4(6)T5a' ) flag++; if ( version == '12.4(6)T5b' ) flag++; if ( version == '12.4(6)T5c' ) flag++; if ( version == '12.4(6)T5d' ) flag++; if ( version == '12.4(6)T5e' ) flag++; if ( version == '12.4(6)T5f' ) flag++; if ( version == '12.4(6)T6' ) flag++; if ( version == '12.4(6)T7' ) flag++; if ( version == '12.4(6)T8' ) flag++; if ( version == '12.4(6)T9' ) flag++; if ( version == '12.4(6)XE' ) flag++; if ( version == '12.4(6)XE1' ) flag++; if ( version == '12.4(6)XE2' ) flag++; if ( version == '12.4(6)XE3' ) flag++; if ( version == '12.4(6)XP' ) flag++; if ( version == '12.4(6)XT' ) flag++; if ( version == '12.4(6)XT1' ) flag++; if ( version == '12.4(6)XT2' ) flag++; if ( version == '12.4(7)' ) flag++; if ( version == '12.4(7a)' ) flag++; if ( version == '12.4(7b)' ) flag++; if ( version == '12.4(7c)' ) flag++; if ( version == '12.4(7d)' ) flag++; if ( version == '12.4(7e)' ) flag++; if ( version == '12.4(7f)' ) flag++; if ( version == '12.4(7g)' ) flag++; if ( version == '12.4(7h)' ) flag++; if ( version == '12.4(8)' ) flag++; if ( version == '12.4(8a)' ) flag++; if ( version == '12.4(8b)' ) flag++; if ( version == '12.4(8c)' ) flag++; if ( version == '12.4(8d)' ) flag++; if ( version == '12.4(9)MR' ) flag++; if ( version == '12.4(9)T' ) flag++; if ( version == '12.4(9)T0a' ) flag++; if ( version == '12.4(9)T1' ) flag++; if ( version == '12.4(9)T2' ) flag++; if ( version == '12.4(9)T3' ) flag++; if ( version == '12.4(9)T4' ) flag++; if ( version == '12.4(9)T5' ) flag++; if ( version == '12.4(9)T6' ) flag++; if ( version == '12.4(9)T7' ) flag++; if ( version == '12.4(9)XG' ) flag++; if ( version == '12.4(9)XG1' ) flag++; if ( version == '12.4(9)XG2' ) flag++; if ( version == '12.4(9)XG3' ) flag++; if ( version == '12.4(9)XG4' ) flag++; if ( version == '12.4(9)XG5' ) flag++; if ( version == '15.0(1)M' ) flag++; if ( version == '15.0(1)M1' ) flag++; if ( version == '15.0(1)M2' ) flag++; if ( version == '15.0(1)M3' ) flag++; if ( version == '15.0(1)M4' ) flag++; if ( version == '15.0(1)M5' ) flag++; if ( version == '15.0(1)M6' ) flag++; if ( version == '15.0(1)M6a' ) flag++; if ( version == '15.0(1)M7' ) flag++; if ( version == '15.0(1)MR' ) flag++; if ( version == '15.0(1)S' ) flag++; if ( version == '15.0(1)S1' ) flag++; if ( version == '15.0(1)S2' ) flag++; if ( version == '15.0(1)S3a' ) flag++; if ( version == '15.0(1)S4' ) flag++; if ( version == '15.0(1)S4a' ) flag++; if ( version == '15.0(1)SE' ) flag++; if ( version == '15.0(1)SY' ) flag++; if ( version == '15.0(1)XA' ) flag++; if ( version == '15.0(1)XA1' ) flag++; if ( version == '15.0(1)XA2' ) flag++; if ( version == '15.0(1)XA3' ) flag++; if ( version == '15.0(1)XA4' ) flag++; if ( version == '15.0(1)XA5' ) flag++; if ( version == '15.0(1)XO' ) flag++; if ( version == '15.0(1)XO1' ) flag++; if ( version == '15.0(2)MR' ) flag++; if ( version == '15.0(2)SG' ) flag++; if ( version == '15.0(2)SG1' ) flag++; if ( version == '15.0(2)XO' ) flag++; if ( version == '15.1(1)MR' ) flag++; if ( version == '15.1(1)MR1' ) flag++; if ( version == '15.1(1)MR2' ) flag++; if ( version == '15.1(1)S' ) flag++; if ( version == '15.1(1)S1' ) flag++; if ( version == '15.1(1)S2' ) flag++; if ( version == '15.1(1)SA' ) flag++; if ( version == '15.1(1)SA1' ) flag++; if ( version == '15.1(1)SA2' ) flag++; if ( version == '15.1(1)T' ) flag++; if ( version == '15.1(1)T1' ) flag++; if ( version == '15.1(1)T2' ) flag++; if ( version == '15.1(1)T3' ) flag++; if ( version == '15.1(1)XB' ) flag++; if ( version == '15.1(1)XB1' ) flag++; if ( version == '15.1(1)XB2' ) flag++; if ( version == '15.1(1)XB3' ) flag++; if ( version == '15.1(2)EY' ) flag++; if ( version == '15.1(2)EY1' ) flag++; if ( version == '15.1(2)GC' ) flag++; if ( version == '15.1(2)GC1' ) flag++; if ( version == '15.1(2)S' ) flag++; if ( version == '15.1(2)S1' ) flag++; if ( version == '15.1(2)S2' ) flag++; if ( version == '15.1(2)SNG' ) flag++; if ( version == '15.1(2)T' ) flag++; if ( version == '15.1(2)T0a' ) flag++; if ( version == '15.1(2)T1' ) flag++; if ( version == '15.1(2)T2' ) flag++; if ( version == '15.1(2)T2a' ) flag++; if ( version == '15.1(2)T3' ) flag++; if ( version == '15.1(2)T4' ) flag++; if ( version == '15.1(3)S' ) flag++; if ( version == '15.1(3)S0a' ) flag++; if ( version == '15.1(3)S1' ) flag++; if ( version == '15.1(3)T' ) flag++; if ( version == '15.1(3)T1' ) flag++; if ( version == '15.1(3)T2' ) flag++; if ( version == '15.1(4)M' ) flag++; if ( version == '15.1(4)M0a' ) flag++; if ( version == '15.1(4)M0b' ) flag++; if ( version == '15.1(4)M1' ) flag++; if ( version == '15.1(4)XB4' ) flag++; if ( version == '15.1(4)XB5' ) flag++; if ( version == '15.2(1)GC' ) flag++; if ( version == '15.2(1)S' ) flag++; if ( version == '15.2(1)SA' ) flag++; if ( version == '15.2(1)T' ) flag++; if (!flag) audit(AUDIT_INST_VER_NOT_VULN, 'Cisco IOS', version); cmds = make_list(); if (get_kb_item("Host/local_checks_enabled")) { buf = cisco_command_kb_item("Host/Cisco/Config/show_running-config", "show running-config"); if (check_cisco_result(buf)) { if (!preg(pattern:"^aaa\s+authorization\s+commands", multiline:TRUE, string:buf)) audit(AUDIT_HOST_NOT, "affected because AAA authorization is not enabled"); if (preg(pattern:"^ip\s+http\s+(secure-)?server", multiline:TRUE, string:buf)) { # Check if WEB_EXEC service is enabled buf = cisco_command_kb_item( "Host/Cisco/Config/show_ip_http_server_session-module", "show ip http server session-module"); if (check_cisco_result(buf)) { if ("WEB_EXEC " >< buf) { if (preg(pattern:"^WEB_EXEC\s+[0-9]+\s+Inactive\s+Inactive", multiline:TRUE, string:buf)) audit(AUDIT_HOST_NOT, "affected because the WEB_EXEC service is not enabled"); } cmds = make_list(cmds, "show ip http server session-module"); } else if (cisco_needs_enable(buf)) override = 1; } else audit(AUDIT_HOST_NOT, "affected because the HTTP/HTTPS server is not enabled"); cmds = make_list(cmds, "show running-config"); } else if (cisco_needs_enable(buf)) override = 1; } security_report_cisco( port : 0, severity : SECURITY_HOLE, override : override, version : version, bug_id : 'CSCtr91106', cmds : cmds );

Seebug

bulletinFamily	exploit
description	Bugtraq ID: 52755 CVE ID：CVE-2012-0384 Cisco IOS是一款流行的Internet操作系统 Cisco IOS允许通过HTTP或HTTPS链接对设备进行管理和监控。Cisco IOS命令授权存在安全漏洞，允许通过验证的HTTP或HTTPS会话绕过授权以它们的授权级别执行任意Cisco IOS命令。此漏洞不允许未验证访问，需要提供合法用户名和密码来利用此漏洞。此外漏洞不允许用户执行自身特权级别之外的命令 0 Cisco IOS XE 2.6.2 Cisco IOS XE 2.6.1 Cisco IOS XE 2.5.2 Cisco IOS XE 2.5.1 Cisco IOS XE 2.4.1 Cisco IOS XE 2.4 Cisco IOS XE 2.3.2 Cisco IOS XE 2.3.1 t Cisco IOS XE 2.3.1 Cisco IOS XE 2.2.3 Cisco IOS XE 3.5.0S Cisco IOS XE 3.4.2S Cisco IOS XE 3.3.xS Cisco IOS XE 3.2.xS Cisco IOS XE 3.1xSG Cisco IOS XE 3.1.xS Cisco IOS XE 2.6 Cisco IOS XE 2.5 Cisco IOS XE 2.4 Cisco IOS XE 2.3 Cisco IOS XE 2.2 Cisco IOS XE 2.1 Cisco Ios 15.2T Cisco Ios 15.2S Cisco Ios 15.2GC Cisco Ios 15.1SNG Cisco IOS 15.1S Cisco IOS 15.1MR Cisco IOS 15.1M Cisco IOS 15.1GC Cisco IOS 15.1EY Cisco Ios 15.0XO Cisco Ios 15.0XA Cisco Ios 15.0SY Cisco IOS 15.0SG Cisco IOS 15.0SE Cisco IOS 15.0MRA Cisco IOS 15.0MR Cisco IOS 15.0M Cisco IOS 12.4YG Cisco IOS 12.4YE Cisco IOS 12.4YD Cisco IOS 12.4YB Cisco IOS 12.4YA Cisco IOS 12.4XZ Cisco IOS 12.4XY Cisco IOS 12.4XW Cisco IOS 12.4XV Cisco IOS 12.4XT Cisco IOS 12.4XR Cisco IOS 12.4XQ Cisco IOS 12.4XP Cisco IOS 12.4XN Cisco IOS 12.4XM Cisco IOS 12.4XL Cisco IOS 12.4XK Cisco IOS 12.4XJ Cisco IOS 12.4XG Cisco IOS 12.4XF Cisco IOS 12.4XE Cisco IOS 12.4XD Cisco IOS 12.4XC Cisco IOS 12.4XB Cisco IOS 12.4XA Cisco IOS 12.4T Cisco IOS 12.4SW Cisco IOS 12.4MRB Cisco IOS 12.4MR Cisco Ios 12.4MDC Cisco IOS 12.4MDB Cisco IOS 12.4MDA Cisco IOS 12.4MD Cisco Ios 12.4JZ Cisco IOS 12.4JY Cisco IOS 12.4JX Cisco IOS 12.4JL Cisco IOS 12.4JK Cisco IOS 12.4JHC Cisco IOS 12.4JHB Cisco IOS 12.4JHA Cisco Ios 12.4JDE Cisco IOS 12.4JDD Cisco IOS 12.4JDC Cisco IOS 12.4JDA Cisco IOS 12.4JAX Cisco IOS 12.4JA Cisco IOS 12.4GC Cisco IOS 12.4 Cisco IOS 12.3ZA Cisco IOS 12.3YZ Cisco IOS 12.3YX Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YQ Cisco IOS 12.3YM Cisco IOS 12.3YK Cisco IOS 12.3YJ Cisco IOS 12.3YI Cisco IOS 12.3YG Cisco IOS 12.3YF Cisco IOS 12.3YD Cisco IOS 12.3XZ Cisco IOS 12.3XY Cisco IOS 12.3XX Cisco IOS 12.3XW Cisco IOS 12.3XU Cisco IOS 12.3XR Cisco IOS 12.3XQ Cisco IOS 12.3XL Cisco IOS 12.3XK Cisco IOS 12.3XJ Cisco IOS 12.3XI Cisco IOS 12.3XG Cisco IOS 12.3XF Cisco IOS 12.3XE Cisco IOS 12.3XD Cisco IOS 12.3XC Cisco IOS 12.3XB Cisco IOS 12.3VA Cisco IOS 12.3TPC Cisco IOS 12.3T Cisco IOS 12.3JL Cisco IOS 12.3JK Cisco IOS 12.3JED Cisco IOS 12.3JEC Cisco IOS 12.3JEB Cisco IOS 12.3JEA Cisco IOS 12.3JA Cisco IOS 12.3BW Cisco IOS 12.3BC Cisco IOS 12.3B Cisco IOS 12.3 Cisco IOS 12.2ZH Cisco IOS 12.2XO Cisco IOS 12.2XNF Cisco IOS 12.2XNE Cisco IOS 12.2XND Cisco IOS 12.2XNC Cisco IOS 12.2XNB Cisco IOS 12.2XNA Cisco IOS 12.2SY Cisco IOS 12.2SXJ Cisco IOS 12.2SXI Cisco IOS 12.2SXH Cisco IOS 12.2STE Cisco IOS 12.2SRD Cisco IOS 12.2SRC Cisco IOS 12.2SRB Cisco IOS 12.2SRA Cisco IOS 12.2SQ Cisco IOS 12.2SGA Cisco IOS 12.2SG Cisco IOS 12.2SEG Cisco IOS 12.2SEF Cisco IOS 12.2SEE Cisco IOS 12.2SED Cisco IOS 12.2SEC Cisco IOS 12.2SEB Cisco IOS 12.2SEA Cisco IOS 12.2SE Cisco IOS 12.2SCF Cisco IOS 12.2SCE Cisco IOS 12.2SCB Cisco IOS 12.2SCA Cisco IOS 12.2SB Cisco IOS 12.2IRG Cisco IOS 12.2IRF Cisco IOS 12.2IRD Cisco IOS 12.2IRC Cisco IOS 12.2IRB Cisco IOS 12.2IRA Cisco IOS 12.2FZ Cisco IOS 12.2FY Cisco IOS 12.2FX Cisco IOS 12.2EZ Cisco IOS 12.2EY Cisco IOS 12.2EX Cisco IOS 12.2EWA Cisco IOS 12.2EW 厂商解决方案 Cisco ----- 用户可参考如下供应商提供的安全公告获得补丁信息： http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120328-pai
id	SSV:60017
last seen	2017-11-19
modified	2012-03-29
published	2012-03-29
reporter	Root
title	Cisco IOS授权安全绕过漏洞(CVE-2012-0384)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Nessus

Seebug

References