CVE-2021-34696
5.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD
Description
A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect programming of hardware when an ACL is configured using a method other than the configuration CLI. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.
Affected (1)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 17.3.2 |
| Running on/with | Platform Versions |
|---|---|
Cisco Asr 902 | All versions |
Cisco Asr 903 | All versions |
Cisco Asr 907 | All versions |
Cisco Asr 920 10sz Pd | All versions |
Cisco Asr 920 10sz Pd R | All versions |
Cisco Asr 920 12cz A | All versions |
Cisco Asr 920 12cz A R | All versions |
Cisco Asr 920 12cz D | All versions |
Cisco Asr 920 12cz D R | All versions |
Cisco Asr 920 12sz Im | All versions |
Cisco Asr 920 12sz Im R | All versions |
Cisco Asr 920 24sz Im | All versions |
Cisco Asr 920 24sz Im R | All versions |
Cisco Asr 920 24sz M | All versions |
Cisco Asr 920 24sz M R | All versions |
Cisco Asr 920 24tz M | All versions |
Cisco Asr 920 24tz M R | All versions |
Cisco Asr 920 4sz A | All versions |
Cisco Asr 920 4sz A R | All versions |
Cisco Asr 920 4sz D | All versions |
Cisco Asr 920 4sz D R | All versions |
Cisco Asr 920u 12sz Im | All versions |
References (2)
Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.