Medium WID-SEC-2024-0631 8 CVEs

Cisco IOS XR: Mehrere Schwachstellen

Published Mar 13, 2024 · Updated Nov 24, 2024 · Revision 2 · de-DE

Vendor: Cisco Product: IOS XR

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco IOS XR ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen oder seine Privilegien zu erweitern.

Product

Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.

Vulnerabilities 8

High 7.8

CVE-2024-20320

A vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series Routers and Cisco Network Conv…

Cisco Cisco IOS XR Software iOS Network devices

Mar 13, 2024
High 7.4

CVE-2024-20318

A vulnerability in the Layer 2 Ethernet services of Cisco IOS XR Software could allow an unauthenticated, adjacent atta…

Cisco Cisco IOS XR Software iOS Network devices

Mar 13, 2024
High 7.4

CVE-2024-20327

A vulnerability in the PPP over Ethernet (PPPoE) termination feature of Cisco IOS XR Software for Cisco ASR 9000 Series…

Cisco Cisco IOS XR Software iOS Network devices

Mar 13, 2024
Medium 6.5

CVE-2024-20262

A vulnerability in the Secure Copy Protocol (SCP) and SFTP feature of Cisco IOS XR Software could allow an authenticate…

Cisco Cisco IOS XR Software iOS Network devices

Mar 13, 2024
Medium 5.8

CVE-2024-20315

A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR…

Cisco Cisco IOS XR Software iOS Network devices

Mar 13, 2024
Medium 5.8

CVE-2024-20322

A vulnerability in the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco …

Cisco Cisco IOS XR Software iOS Network devices

Mar 13, 2024
Medium 5.3

CVE-2024-20266

A vulnerability in the DHCP version 4 (DHCPv4) server feature of Cisco IOS XR Software could allow an unauthenticated, …

Cisco Cisco IOS XR Software iOS Network devices

Mar 13, 2024
Medium 4.3

CVE-2024-20319

A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker t…

Cisco Cisco IOS XR Software iOS Network devices

Mar 13, 2024

Revision history

2024-11-24 #2
Produktzuordnung überprüft
2024-03-13 #1
Initiale Fassung

References

Cisco Security Advisory vom 2024-03-13
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-acl-bypass-RZU5NL3e
Cisco Security Advisory vom 2024-03-13
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-dhcp-dos-3tgPKRdm
Cisco Security Advisory vom 2024-03-13
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-pppma-JKWFgneW
Cisco Security Advisory vom 2024-03-13
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-scp-dos-kb6sUUHw
Cisco Security Advisory vom 2024-03-13
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ssh-privesc-eWDMKew3
Cisco Security Advisory vom 2024-03-13
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-uhv6ZDeF
Cisco Security Advisory vom 2024-03-13
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xrl2vpn-jesrU3fc