Medium WID-SEC-2023-2355 5 CVEs

Cisco IOS XR: Mehrere Schwachstellen

Published Sep 13, 2023 · Updated Sep 13, 2023 · de-DE

Vendor: Cisco Product: IOS XR Product: IOS XR < 7.10.1 Product: IOS XR < 7.3.5 Product: IOS XR < 7.5.4 Product: IOS XR < 7.6.3 Product: IOS XR < 7.7.21 Product: IOS XR < 7.8.2 Product: IOS XR < 7.9.1 Product: IOS XR < 7.9.2

Summary

Ein Angreifer kann mehrere Schwachstellen in Cisco IOS XR ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder einen Denial-of-Service-Zustand zu verursachen.

Product

Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.

Vulnerabilities 5

Medium 6.7

CVE-2023-20236

A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to inst…

Cisco Cisco IOS XR Software iOS Network devices

Sep 13, 2023
Medium 5.8

CVE-2023-20190

A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an un…

Cisco Cisco IOS XR Software iOS Network devices

Sep 13, 2023
Medium 5.8

CVE-2023-20191

A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR…

Cisco Cisco IOS XR Software iOS Network devices

Sep 13, 2023
Medium 5.7

CVE-2023-20135

A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to exec…

Cisco Cisco IOS XR Software iOS Network devices

Sep 13, 2023
Medium 4.3

CVE-2023-20233

A vulnerability in the Connectivity Fault Management (CFM) feature of Cisco IOS XR Software could allow an unauthentica…

Cisco Cisco IOS XR Software iOS Network devices

Sep 13, 2023

Revision history

2023-09-13 #1
Initiale Fassung

References

Cisco Security Advisories vom 2023-09-13
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-lnt-L9zOkBz5
Cisco Security Advisories vom 2023-09-13
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB
Cisco Security Advisories vom 2023-09-13
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xr-cfm-3pWN8MKt
Cisco Security Advisories vom 2023-09-13
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnx-acl-PyzDkeYF
Cisco Security Advisories vom 2023-09-13
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-comp3acl-vGmp6BQ3