Vulnerability Description
A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect programming of hardware when an ACL is configured using a method other than the configuration CLI. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios Xe | <= 17.3.2 |
| Cisco | Asr 902 | - |
| Cisco | Asr 903 | - |
| Cisco | Asr 907 | - |
| Cisco | Asr 920-10Sz-Pd | - |
| Cisco | Asr 920-10Sz-Pd R | - |
| Cisco | Asr 920-12Cz-A | - |
| Cisco | Asr 920-12Cz-A R | - |
| Cisco | Asr 920-12Cz-D | - |
| Cisco | Asr 920-12Cz-D R | - |
| Cisco | Asr 920-12Sz-Im | - |
| Cisco | Asr 920-12Sz-Im R | - |
| Cisco | Asr 920-24Sz-Im | - |
| Cisco | Asr 920-24Sz-Im R | - |
| Cisco | Asr 920-24Sz-M | - |
| Cisco | Asr 920-24Sz-M R | - |
| Cisco | Asr 920-24Tz-M | - |
| Cisco | Asr 920-24Tz-M R | - |
| Cisco | Asr 920-4Sz-A | - |
| Cisco | Asr 920-4Sz-A R | - |
Related Weaknesses (CWE)
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aVendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aVendor Advisory
FAQ
What is CVE-2021-34696?
CVE-2021-34696 is a vulnerability with a CVSS score of 5.8 (MEDIUM). A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass a configured ACL...
How severe is CVE-2021-34696?
CVE-2021-34696 has been rated MEDIUM with a CVSS base score of 5.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-34696?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios Xe, Cisco Asr 902, Cisco Asr 903, Cisco Asr 907, Cisco Asr 920-10Sz-Pd.