Логотип exploitDog
bind:CVE-2024-20322
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-20322

Количество 3

Количество 3

nvd логотип

CVE-2024-20322

почти 2 года назад

A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to access resources behind the affected device that were supposed to be protected by a configured ACL.

CVSS3: 5.8
EPSS: Низкий
github логотип

GHSA-4wpx-q9gv-7mh7

почти 2 года назад

A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to access resources behind the affected device that were supposed to be protected by a configured ACL.

CVSS3: 5.8
EPSS: Низкий
fstec логотип

BDU:2024-02283

почти 2 года назад

Уязвимость механизма списка контроля доступа ACL операционной системы Cisco IOS XR , позволяющая нарушителю обойти ограничения безопасности

CVSS3: 5.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-20322

A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to access resources behind the affected device that were supposed to be protected by a configured ACL.

CVSS3: 5.8
0%
Низкий
почти 2 года назад
github логотип
GHSA-4wpx-q9gv-7mh7

A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to improper assignment of lookup keys to internal interface contexts. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to access resources behind the affected device that were supposed to be protected by a configured ACL.

CVSS3: 5.8
0%
Низкий
почти 2 года назад
fstec логотип
BDU:2024-02283

Уязвимость механизма списка контроля доступа ACL операционной системы Cisco IOS XR , позволяющая нарушителю обойти ограничения безопасности

CVSS3: 5.8
0%
Низкий
почти 2 года назад

Уязвимостей на страницу