CVE-2019-15998: Cisco IOS XR Software NETCONF Over Secure Shell ACL Bypass Vulnerability
First published: Tue Nov 26 2019(Updated: )
A vulnerability in the access-control logic of the NETCONF over Secure Shell (SSH) of Cisco IOS XR Software may allow connections despite an access control list (ACL) that is configured to deny access to the NETCONF over SSH of an affected device. The vulnerability is due to a missing check in the NETCONF over SSH access control list (ACL). An attacker could exploit this vulnerability by connecting to an affected device using NETCONF over SSH. A successful exploit could allow the attacker to connect to the device on the NETCONF port. Valid credentials are required to access the device. This vulnerability does not affect connections to the default SSH process on the device.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XR | =6.5.1 | |
| Cisco IOS XR | =6.5.2 | |
| Cisco IOS XR | =6.5.3 | |
| Cisco Asr 9001 | ||
| Cisco Asr 9006 | ||
| Cisco Asr 9010 | ||
| Cisco Asr 9901 | ||
| Cisco Asr 9904 | ||
| Cisco Asr 9912 | ||
| Cisco Asr 9922 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-15998?
CVE-2019-15998 is a vulnerability in the access-control logic of the NETCONF over Secure Shell (SSH) of Cisco IOS XR Software.
What is the severity of CVE-2019-15998?
The severity of CVE-2019-15998 is medium, with a severity value of 5.3.
Which software versions are affected by CVE-2019-15998?
Cisco IOS XR versions 6.5.1, 6.5.2, and 6.5.3 are affected by CVE-2019-15998.
How does CVE-2019-15998 affect Cisco ASR routers?
Cisco ASR routers (e.g., ASR 9001, ASR 9006, ASR 9010, ASR 9901, ASR 9904, ASR 9912, ASR 9922) are not vulnerable to CVE-2019-15998.
How can I fix CVE-2019-15998?
To fix CVE-2019-15998, it is recommended to apply the necessary updates provided by Cisco.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/tags
- agent/author
- agent/description
- agent/last-modified-date
- agent/severity
- agent/title
- agent/event
- agent/first-publish-date
- vendor/cisco
- canonical/cisco ios xr
- version/cisco ios xr/6.5.1
- version/cisco ios xr/6.5.2
- version/cisco ios xr/6.5.3
- canonical/cisco asr 9001
- canonical/cisco asr 9006
- canonical/cisco asr 9010
- canonical/cisco asr 9901
- canonical/cisco asr 9904
- canonical/cisco asr 9912
- canonical/cisco asr 9922