QID 317429

Date Published: 2024-03-20

QID 317429: Cisco Internetwork Operating System (IOS) XR Software MPLS and Pseudowire Interfaces Access Control List (ACL) Bypass Vulnerability (cisco-sa-iosxr-acl-bypass-RZU5NL3e)

IOS XR is a release train of Cisco Systems' widely deployed Internetwork Operating System (IOS).

CVE-2024-20322: A vulnerability in the ACL processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL.

Affected Products
Cisco IOS XR versions 7.10.2 and 7.11.1

8000 Series Routers
Network Convergence Series (NCS) 540 Series Routers
NCS 560 Series Routers
NCS 5500 Series
NCS 5700 Series
QID Detection Logic (Authenticated):
The check matches Cisco IOS XR version retrieved via Unix Auth using "show version" command.

Note: This QID does not support IOS XR White box (IOSXRWBD)

A successful exploit could allow the attacker to access resources behind the affected device that were supposed to be protected by a configured ACL.

CVSS V3 rated as Medium - 5.8 severity.

CVSS V2 rated as Low - 1.7 severity.

Solution

Customers are advised to refer to cisco-sa-iosxr-acl-bypass-RZU5NL3e for more information.

Vendor References

cisco-sa-iosxr-acl-bypass-RZU5NL3e - sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-acl-bypass-RZU5NL3e

CVEs related to QID 317429

CVE-2024-20322 |

Software Advisories

Advisory ID	Software	Component	Link
cisco-sa-iosxr-acl-bypass-RZU5NL3e			sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-acl-bypass-RZU5NL3e

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].