Improper access control in Cisco IOS XR Software
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 1 |
| CVE-ID | CVE-2023-20191 |
| CWE-ID | CWE-284 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
Cisco IOS XR Operating systems & Components / Operating system NCS 5700 Series Routers Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Network Convergence System 540 Series Routers Hardware solutions / Routers & switches, VoIP, GSM, etc NCS5500 Hardware solutions / Firmware NCS560 Hardware solutions / Firmware IOS XR White box Operating systems & Components / Operating system package or component |
| Vendor | Cisco Systems, Inc |
Security Bulletin
This security bulletin contains one high risk vulnerability.
1) Improper access control
EUVDB-ID: #VU80767
Risk: High
CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber]
CVE-ID: CVE-2023-20191
CWE-ID:
CWE-284 - Improper Access Control
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to incomplete support in the access control list (ACL) processing on MPLS interfaces in the ingress direction. A remote attacker can bypass an ACL on the affected device.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco IOS XR: 6.4.0 - 7.10
NCS 5700 Series Routers: All versions
NCS5500: All versions
NCS560: All versions
Cisco Network Convergence System 540 Series Routers: All versions
IOS XR White box: All versions
CPE2.3- cpe:2.3:o:cisco_systems:cisco_ios_xr:6.4.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios_xr:6.5:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios_xr:6.6:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios_xr:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios_xr:7.10:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios_xr:7.2.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios_xr:7.3:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios_xr:7.4:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios_xr:7.5.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios_xr:7.6.0:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:ncs_5700_series_routers:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:ncs5500:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:ncs560:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco_systems:cisco_network_convergence_system_540_series_routers:*:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:ios_xr_white_box:*:*:*:*:*:*:*:*
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnx-acl-PyzDkeYF
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
