CVE-2024-20322

EPSS 0.13%
Published 13.03.2024 17:15:48
Last modified 05.08.2025 14:41:53
Source psirt@cisco.com
Teams watchlist Login
Open Login

A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL.

 This vulnerability is due to improper assignment of lookup keys to internal interface contexts. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to access resources behind the affected device that were supposed to be protected by a configured ACL.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Ios Xr Version7.10.2

   Cisco ≫ 8011-4g24y4h-i Version-
   Cisco ≫ 8101-32fh Version-
   Cisco ≫ 8101-32fh-o Version-
   Cisco ≫ 8101-32h-o Version-
   Cisco ≫ 8102-28fh-dpu-o Version-
   Cisco ≫ 8102-64h Version-
   Cisco ≫ 8102-64h-o Version-
   Cisco ≫ 8111-32eh-o Version-
   Cisco ≫ 8122-64eh-o Version-
   Cisco ≫ 8122-64ehf-o Version-
   Cisco ≫ 8201 Version-
   Cisco ≫ 8201-24h8fh Version-
   Cisco ≫ 8201-32fh Version-
   Cisco ≫ 8201-32fh-o Version-
   Cisco ≫ 8202 Version-
   Cisco ≫ 8202-32fh-m Version-
   Cisco ≫ 8212-48fh-m Version-
   Cisco ≫ 8404 Version-
   Cisco ≫ 8501-sys-mt Version-
   Cisco ≫ 8608 Version-
   Cisco ≫ 8700 Version-
   Cisco ≫ 8711-32fh-m Version-
   Cisco ≫ 8712-mod-m Version-
   Cisco ≫ 8804 Version-
   Cisco ≫ 8808 Version-
   Cisco ≫ 8812 Version-
   Cisco ≫ 8818 Version-
   Cisco ≫ Ncs 540-12z20g-sys-a Version-
   Cisco ≫ Ncs 540-12z20g-sys-d Version-
   Cisco ≫ Ncs 540-24q2c2dd-sys Version-
   Cisco ≫ Ncs 540-24q8l2dd-sys Version-
   Cisco ≫ Ncs 540-24z8q2c-sys Version-
   Cisco ≫ Ncs 540-28z4c-sys-a Version-
   Cisco ≫ Ncs 540-28z4c-sys-d Version-
   Cisco ≫ Ncs 540-6z14s-sys-d Version-
   Cisco ≫ Ncs 540-6z18g-sys-a Version-
   Cisco ≫ Ncs 540-6z18g-sys-d Version-
   Cisco ≫ Ncs 540-acc-sys Version-
   Cisco ≫ Ncs 540-fh-agg Version-
   Cisco ≫ Ncs 540-fh-csr-sys Version-
   Cisco ≫ Ncs 540x-12z16g-sys-a Version-
   Cisco ≫ Ncs 540x-12z16g-sys-d Version-
   Cisco ≫ Ncs 540x-16z4g8q2c-a Version-
   Cisco ≫ Ncs 540x-16z4g8q2c-d Version-
   Cisco ≫ Ncs 540x-16z8q2c-d Version-
   Cisco ≫ Ncs 540x-4z14g2q-a Version-
   Cisco ≫ Ncs 540x-4z14g2q-d Version-
   Cisco ≫ Ncs 540x-6z18g-sys-a Version-
   Cisco ≫ Ncs 540x-6z18g-sys-d Version-
   Cisco ≫ Ncs 540x-8z16g-sys-a Version-
   Cisco ≫ Ncs 540x-8z16g-sys-d Version-
   Cisco ≫ Ncs 540x-acc-sys Version-
   Cisco ≫ Ncs 5501 Version-
   Cisco ≫ Ncs 5501-se Version-
   Cisco ≫ Ncs 5502 Version-
   Cisco ≫ Ncs 5502-se Version-
   Cisco ≫ Ncs 5504 Version-
   Cisco ≫ Ncs 5508 Version-
   Cisco ≫ Ncs 5516 Version-
   Cisco ≫ Ncs 55a1-24h Version-
   Cisco ≫ Ncs 55a1-24q6h-s Version-
   Cisco ≫ Ncs 55a1-24q6h-ss Version-
   Cisco ≫ Ncs 55a1-36h Version-
   Cisco ≫ Ncs 55a1-36h-se Version-
   Cisco ≫ Ncs 55a1-48q6h Version-
   Cisco ≫ Ncs 55a2-mod-hd-s Version-
   Cisco ≫ Ncs 55a2-mod-s Version-
   Cisco ≫ Ncs 55a2-mod-se-s Version-
   Cisco ≫ Ncs 560-4 Version-
   Cisco ≫ Ncs 560-7 Version-
   Cisco ≫ Ncs 57b1-5dse-sys Version-
   Cisco ≫ Ncs 57b1-6d24-sys Version-
   Cisco ≫ Ncs 57c1-48q6-sys Version-
   Cisco ≫ Ncs 57c3-mod-sys Version-
   Cisco ≫ Ncs 57d2-18dd-sys Version-

Cisco ≫ Ios Xr Version7.11

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.13%	0.33

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
psirt@cisco.com	5.8	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-acl-bypass-RZU5NL3e

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2024-20322

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2024-20322

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2024-20322

EUVD