- Vulnerability/
- cisco-sa-ncs-hybridacl-crMZFfKQ
cisco-sa-ncs-hybridacl-crMZFfKQ: Cisco IOS XR Software Hybrid Access Control List Bypass Vulnerability
First published: Wed Mar 12 2025(Updated: )
A vulnerability in the hybrid access control list (ACL) processing of IPv4 packets in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL.This vulnerability is due to incorrect handling of packets when a specific configuration of the hybrid ACL exists. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass a configured ACL on the affected device.For more information, see the Details section of this advisory.Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ncs-hybridacl-crMZFfKQThis advisory is part of the March 2025 release of the Cisco IOS XR Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: March 2025 Semiannual Cisco IOS XR Software Security Advisory Bundled Publication.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XRv 9000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-ncs-hybridacl-crMZFfKQ?
The severity of cisco-sa-ncs-hybridacl-crMZFfKQ is classified as high due to the potential for unauthorized access.
How do I fix cisco-sa-ncs-hybridacl-crMZFfKQ?
To fix cisco-sa-ncs-hybridacl-crMZFfKQ, update the Cisco IOS XR Software to the latest patched version.
Who is affected by cisco-sa-ncs-hybridacl-crMZFfKQ?
Devices running Cisco IOS XR Software with specific hybrid ACL configurations are affected by cisco-sa-ncs-hybridacl-crMZFfKQ.
What type of attacks can exploit cisco-sa-ncs-hybridacl-crMZFfKQ?
cisco-sa-ncs-hybridacl-crMZFfKQ can be exploited by unauthenticated remote attackers to bypass configured access controls.
Is there a workaround for cisco-sa-ncs-hybridacl-crMZFfKQ?
Currently, there are no documented workarounds for cisco-sa-ncs-hybridacl-crMZFfKQ, making an update essential for mitigation.
- collector/cisco-recent
- source/Cisco
- agent/references
- agent/title
- agent/last-modified-date
- agent/severity
- agent/source
- agent/description
- agent/first-publish-date
- agent/type
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- vendor/cisco
- canonical/cisco ios xrv 9000