The "established" keyword in some Cisco IOS software allowed an attacker to bypass filtering.
CVSS Metrics