Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-28xr-x3rf-rhgr

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect programming of hardware when an ACL is configured using a method other than the configuration CLI. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.

A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect programming of hardware when an ACL is configured using a method other than the configuration CLI. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.

EPSS

Процентиль: 50%
0.00264
Низкий

Связанные уязвимости

CVSS3: 5.8
nvd
около 4 лет назад

A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect programming of hardware when an ACL is configured using a method other than the configuration CLI. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.

CVSS3: 5.8
fstec
около 4 лет назад

Уязвимость конфигурации списка управления доступом Access Control List (ACL) операционных систем Cisco IOS XE маршрутизаторов Cisco серии ASR 900 и ASR 920, позволяющая нарушителю обойти ограничения безопасности

EPSS

Процентиль: 50%
0.00264
Низкий