CVE-2014-3396

HIGH · 7.5 CVSS Gepubliceerd: 05-10-2014 CWE-264

Beschrijving

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133.

Vendors

Cisco

Affected products

Ios Xr Asr 9000 Rsp440 Router Asr 9001 Asr 9006 Asr 9010 Asr 9904 Asr 9912 Asr 9922

References

tools.cisco.com