NetSight
medium5.0

CVE-2015-0694

Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypas…

Impact

Cisco ASR 9000 devices with software 5.3.0.BASE do not recognize that certain ACL entries have a single-host constraint, which allows remote attackers to bypass intended network-resource access restrictions by using an address that was not supposed to have been allowed, aka Bug ID CSCur28806.

Affected products

VendorProductAffected versions
CiscoIos Xr
Version 5.3.0_base
CiscoAsr 9001
All versions
CiscoAsr 9006
All versions
CiscoAsr 9010
All versions
CiscoAsr 9904
All versions
CiscoAsr 9912
All versions
CiscoAsr 9922
All versions

Weakness classification

References