CVE-2014-3396

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133.

Score

CVSS 2.0 7.5 High

Status

Modified - psirt@cisco.com

Published

2014-10-05

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Asr 9000 Rsp440 Router (Cisco)
• Asr 9001 (Cisco)
• Asr 9006 (Cisco)
• Asr 9010 (Cisco)
• Asr 9904 (Cisco)
• Asr 9912 (Cisco)
• Asr 9922 (Cisco)
• Ios Xr (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3396