Vulnerabilities > CVE-2021-34696 - Unspecified vulnerability in Cisco IOS XE

CVSS 5.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

cisco

NVD

Published: 2021-09-23

Updated: 2023-11-07

Summary

A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect programming of hardware when an ACL is configured using a method other than the configuration CLI. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco IOS XE 3.8.10Ee Cisco IOS XE 3.11.6E Cisco IOS XE 3.11.7E Cisco IOS XE 3.11.8E Cisco IOS XE 15.2\(07\)E02 Cisco IOS XE 15.2\(07\)E03 Cisco IOS XE 15.8\(3\)M3 Cisco IOS XE 16.9.8 Cisco IOS XE 16.9.8A Cisco IOS XE 16.9.8B Cisco IOS XE 16.9.8C Cisco IOS XE 16.12.6 Cisco IOS XE 16.12.6A Cisco IOS XE 16.12.7 Cisco IOS XE 16.12.9 Cisco IOS XE 16.12.10A Cisco IOS XE 17.1 Cisco IOS XE 17.2.0	18
Hardware	Cisco Cisco ASR 902 - Cisco ASR 903 - Cisco ASR 907 - Cisco ASR 920 10Sz PD - Cisco ASR 920 10Sz PD R - Cisco ASR 920 12Cz A - Cisco ASR 920 12Cz A R - Cisco ASR 920 12Cz D - Cisco ASR 920 12Cz D R - Cisco ASR 920 12Sz IM - Cisco ASR 920 12Sz IM R - Cisco ASR 920 24Sz IM - Cisco ASR 920 24Sz IM R - Cisco ASR 920 24Sz M - Cisco ASR 920 24Sz M R - Cisco ASR 920 24Tz M - Cisco ASR 920 24Tz M R - Cisco ASR 920 4SZ A - Cisco ASR 920 4SZ A R - Cisco ASR 920 4SZ D - Cisco ASR 920 4SZ D R - Cisco ASR 920U 12Sz IM -	22

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr900acl-UeEyCxkv