Cisco · Cisco Asr 900 · CVE-2021-34696
**Name of the Vulnerable Software and Affected Versions**
Cisco ASR 900 and ASR 920 Series Aggregation Services Routers (affected versions not specified)
**Description**
The issue is related to a vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers. This vulnerability could allow an unauthenticated, remote attacker to bypass a configured ACL due to incorrect programming of hardware when an ACL is configured using a method other than the configuration CLI. An attacker could exploit this vulnerability by attempting to send traffic through an affected device, potentially allowing them to bypass an ACL on the affected device.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.