Логотип exploitDog
bind:CVE-2024-20315
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-20315

Количество 3

Количество 3

nvd логотип

CVE-2024-20315

почти 2 года назад

A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to access resources behind the affected device that were supposed to be protected by a configured ACL.

CVSS3: 5.8
EPSS: Низкий
github логотип

GHSA-v5qr-gm4v-2cgg

почти 2 года назад

A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to access resources behind the affected device that were supposed to be protected by a configured ACL.

CVSS3: 5.8
EPSS: Низкий
fstec логотип

BDU:2024-02287

почти 2 года назад

Уязвимость интерфейсов MPLS операционной системы Cisco IOS XR, позволяющая нарушителю обойти ограничения безопасности ACL

CVSS3: 5.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-20315

A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to access resources behind the affected device that were supposed to be protected by a configured ACL.

CVSS3: 5.8
0%
Низкий
почти 2 года назад
github логотип
GHSA-v5qr-gm4v-2cgg

A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to access resources behind the affected device that were supposed to be protected by a configured ACL.

CVSS3: 5.8
0%
Низкий
почти 2 года назад
fstec логотип
BDU:2024-02287

Уязвимость интерфейсов MPLS операционной системы Cisco IOS XR, позволяющая нарушителю обойти ограничения безопасности ACL

CVSS3: 5.8
0%
Низкий
почти 2 года назад

Уязвимостей на страницу