CVE-2019-15998: Cisco IOS XR Software NETCONF Over Secure Shell ACL Bypass Vulnerability
A vulnerability in the access-control logic of the NETCONF over Secure Shell (SSH) of Cisco IOS XR Software may allow connections despite an access control list (ACL) that is configured to deny access to the NETCONF over SSH of an affected device. The vulnerability is due to a missing check in the NETCONF over SSH access control list (ACL). An attacker could exploit this vulnerability by connecting to an affected device using NETCONF over SSH. A successful exploit could allow the attacker to connect to the device on the NETCONF port. Valid credentials are required to access the device. This vulnerability does not affect connections to the default SSH process on the device.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-15998?
CVE-2019-15998 is a vulnerability in the access-control logic of the NETCONF over Secure Shell (SSH) of Cisco IOS XR Software.
What is the severity of CVE-2019-15998?
The severity of CVE-2019-15998 is medium, with a severity value of 5.3.
Which software versions are affected by CVE-2019-15998?
Cisco IOS XR versions 6.5.1, 6.5.2, and 6.5.3 are affected by CVE-2019-15998.
How does CVE-2019-15998 affect Cisco ASR routers?
Cisco ASR routers (e.g., ASR 9001, ASR 9006, ASR 9010, ASR 9901, ASR 9904, ASR 9912, ASR 9922) are not vulnerable to CVE-2019-15998.
How can I fix CVE-2019-15998?
To fix CVE-2019-15998, it is recommended to apply the necessary updates provided by Cisco.