PT-2014-5286 · Cisco · Asr 9000+1

Published 2014-10-05 · Updated 2014-10-06 · CVE-2014-3396

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco IOS XR on ASR 9000 devices (affected versions not specified)

Description The issue is related to the improper use of compression for port-range and address-range encoding in access control lists (ACLs) on Typhoon line cards in Cisco ASR 9000 Series Aggregation Services Routers. This allows remote attackers to bypass intended ACL restrictions via transit traffic. The vulnerability is due to incorrect port or address range encoding in the compression module of an ACL applied to an interface of an affected device. An attacker could exploit this by sending traffic through an affected device that should otherwise be denied by the configured ACL, potentially allowing access to trusted, internal networks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-3396

Affected Products

Asr 9000

Cisco Ios Xr

References · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2014-3396 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-3396 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20141006-CVE-2014-3396 · Note