Improper validation of CIDR mask values allows extraneous zero characters to be processed. Mask forms such as "/00" and "/01" pass validation and are parsed as the same prefix as their unpadded equivalents, which may lead to an IP Access Control List (ACL) bypass.