CVE-2021-34696: Cisco ASR 900 and ASR 920 Series Aggregation Services Routers Access Control List Bypass Vulnerability
A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect programming of hardware when an ACL is configured using a method other than the configuration CLI. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-34696.
What is the severity of CVE-2021-34696?
The severity of CVE-2021-34696 is medium with a CVSS score of 5.8.
Which software is affected by CVE-2021-34696?
Cisco ASR 900 and ASR 920 Series Aggregation Services Routers with Cisco IOS XE 17.3.2 are affected.
How can an attacker exploit CVE-2021-34696?
An unauthenticated remote attacker can exploit this vulnerability by bypassing a configured ACL.
Is there a fix available for CVE-2021-34696?
Yes, Cisco has released a security advisory with mitigation measures for CVE-2021-34696.