Unscored CVE-2014-3396 EUVD-2014-3409GHSA-j7xc-jjfg-828j

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers…

Published Oct 5, 2014 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133.

References

20141003 Cisco IOS XR Software Compression ACL Bypass Vulnerability vendor-advisory