The vulnerability of the NETCONF or RESTCONF protocol implementations for the Data Model Interface (DMI) of Cisco IOS XE operating systems allows attackers to circumvent security restrictions and gain unauthorized access to resources.

🗓️ 03 Apr 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Cisco IOS XE DMI NETCONF/RESTCONF vulnerability enables ACL order handling bypass to gain unauthorized access.

Reporter	Title	Published	Views	Family All 11
Cisco	Cisco IOS XE Software NETCONF/RESTCONF IPv4 Access Control List Bypass Vulnerability	27 Mar 202416:00	–	cisco
Tenable Nessus	Cisco IOS XE Software NETCONF/RESTCONF IPv4 Access Control List Bypass (cisco-sa-dmi-acl-bypass-Xv8FO8Vz)	28 Mar 202400:00	–	nessus
CNNVD	Cisco IOS XE Software 安全漏洞	27 Mar 202400:00	–	cnnvd
CVE	CVE-2024-20316	27 Mar 202416:49	–	cve
Cvelist	CVE-2024-20316	27 Mar 202416:49	–	cvelist
EUVD	EUVD-2024-18031	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco products	28 Mar 202400:00	–	ncsc
NVD	CVE-2024-20316	27 Mar 202417:15	–	nvd
Positive Technologies	PT-2024-2551 · Cisco · Cisco Ios Xe	27 Mar 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-20316	23 May 202507:48	–	redhatcve

Vulners

Node

cisco_systems cisco_ios_xeMatch16.5.1

OR

cisco_systems cisco_ios_xeMatch16.3.1a

OR

cisco_systems cisco_ios_xeMatch16.5.1a

OR

cisco_systems cisco_ios_xeMatch16.3.1

OR

cisco_systems cisco_ios_xeMatch16.3.2

OR

cisco_systems cisco_ios_xeMatch16.3.3

OR

cisco_systems cisco_ios_xeMatch16.3.4

OR

cisco_systems cisco_ios_xeMatch16.3.5

OR

cisco_systems cisco_ios_xeMatch16.3.5b

OR

cisco_systems cisco_ios_xeMatch16.4.3

OR

cisco_systems cisco_ios_xeMatch16.7.2

OR

cisco_systems cisco_ios_xeMatch16.3.6

OR

cisco_systems cisco_ios_xeMatch16.4.2

OR

cisco_systems cisco_ios_xeMatch16.5.1b

OR

cisco_systems cisco_ios_xeMatch16.5.2

OR

cisco_systems cisco_ios_xeMatch16.5.3

OR

cisco_systems cisco_ios_xeMatch16.7.1

OR

cisco_systems cisco_ios_xeMatch16.8.1

OR

cisco_systems cisco_ios_xeMatch16.8.1s

OR

cisco_systems cisco_ios_xeMatch16.9.1b

OR

cisco_systems cisco_ios_xeMatch16.3.7

OR

cisco_systems cisco_ios_xeMatch16.8.1b

OR

cisco_systems cisco_ios_xeMatch16.8.1a

OR

cisco_systems cisco_ios_xeMatch16.8.1c

OR

cisco_systems cisco_ios_xeMatch16.8.2

OR

cisco_systems cisco_ios_xeMatch16.9.1

OR

cisco_systems cisco_ios_xeMatch16.9.2

OR

cisco_systems cisco_ios_xeMatch16.9.1a

OR

cisco_systems cisco_ios_xeMatch16.9.1s

OR

cisco_systems cisco_ios_xeMatch16.9.1c

OR

cisco_systems cisco_ios_xeMatch16.9.1d

OR

cisco_systems cisco_ios_xeMatch16.9.2a

OR

cisco_systems cisco_ios_xeMatch16.7.3

OR

cisco_systems cisco_ios_xeMatch16.10.1

OR

cisco_systems cisco_ios_xeMatch16.12.1

OR

cisco_systems cisco_ios_xeMatch16.3

OR

cisco_systems cisco_ios_xeMatch16.8.3

OR

cisco_systems cisco_ios_xeMatch16.9.2s

OR

cisco_systems cisco_ios_xeMatch16.9.3h

OR

cisco_systems cisco_ios_xeMatch16.3.8

OR

cisco_systems cisco_ios_xeMatch16.4

OR

cisco_systems cisco_ios_xeMatch16.5

OR

cisco_systems cisco_ios_xeMatch16.7

OR

cisco_systems cisco_ios_xeMatch16.8

OR

cisco_systems cisco_ios_xeMatch16.9

OR

cisco_systems cisco_ios_xeMatch16.10

OR

cisco_systems cisco_ios_xeMatch16.11

OR

cisco_systems cisco_ios_xeMatch17.2

OR

cisco_systems cisco_ios_xeMatch17.3

OR

cisco_systems cisco_ios_xeMatch17.4

OR

cisco_systems cisco_ios_xeMatch17.5

OR

cisco_systems cisco_ios_xeMatch17.6

OR

cisco_systems cisco_ios_xeMatch16.10.2

OR

cisco_systems cisco_ios_xeMatch16.3.9

OR

cisco_systems cisco_ios_xeMatch16.6.5a

OR

cisco_systems cisco_ios_xeMatch16.6.6

OR

cisco_systems cisco_ios_xeMatch16.6.5b

OR

cisco_systems cisco_ios_xeMatch16.9.3

OR

cisco_systems cisco_ios_xeMatch16.9.4

OR

cisco_systems cisco_ios_xeMatch16.9.3s

OR

cisco_systems cisco_ios_xeMatch16.9.3a

OR

cisco_systems cisco_ios_xeMatch16.9.4c

OR

cisco_systems cisco_ios_xeMatch16.10.1a

OR

cisco_systems cisco_ios_xeMatch16.10.1b

OR

cisco_systems cisco_ios_xeMatch16.10.1s

OR

cisco_systems cisco_ios_xeMatch16.10.1e

OR

cisco_systems cisco_ios_xeMatch16.10.3

OR

cisco_systems cisco_ios_xeMatch16.11.1

OR

cisco_systems cisco_ios_xeMatch16.11.1a

OR

cisco_systems cisco_ios_xeMatch16.11.1b

OR

cisco_systems cisco_ios_xeMatch16.11.1s

OR

cisco_systems cisco_ios_xeMatch16.11.1c

OR

cisco_systems cisco_ios_xeMatch16.12.1a

OR

cisco_systems cisco_ios_xeMatch16.12.1c

OR

cisco_systems cisco_ios_xeMatch16.12.1s

OR

cisco_systems cisco_ios_xeMatch16.12.1t

OR

cisco_systems cisco_ios_xeMatch16.11.2

OR

cisco_systems cisco_ios_xeMatch16.3.10

OR

cisco_systems cisco_ios_xeMatch16.6.7

OR

cisco_systems cisco_ios_xeMatch16.6.7a

OR

cisco_systems cisco_ios_xeMatch16.6.8

OR

cisco_systems cisco_ios_xeMatch16.9.5

OR

cisco_systems cisco_ios_xeMatch16.9.5f

OR

cisco_systems cisco_ios_xeMatch16.12

OR

cisco_systems cisco_ios_xeMatch17.2.1

OR

cisco_systems cisco_ios_xeMatch17.1.1

OR

cisco_systems cisco_ios_xeMatch17.1

OR

cisco_systems cisco_ios_xeMatch16.12.2

OR

cisco_systems cisco_ios_xeMatch16.12.2a

OR

cisco_systems cisco_ios_xeMatch16.12.2s

OR

cisco_systems cisco_ios_xeMatch16.12.2t

OR

cisco_systems cisco_ios_xeMatch16.12.4

OR

cisco_systems cisco_ios_xeMatch16.12.3s

OR

cisco_systems cisco_ios_xeMatch16.12.3a

OR

cisco_systems cisco_ios_xeMatch16.12.4a

OR

cisco_systems cisco_ios_xeMatch17.1.1a

OR

cisco_systems cisco_ios_xeMatch17.1.1s

OR

cisco_systems cisco_ios_xeMatch17.1.2

OR

cisco_systems cisco_ios_xeMatch17.1.1t

OR

cisco_systems cisco_ios_xeMatch17.1.3

OR

cisco_systems cisco_ios_xeMatch17.2.1r

OR

cisco_systems cisco_ios_xeMatch17.2.1a

OR

cisco_systems cisco_ios_xeMatch17.2.1v

OR

cisco_systems cisco_ios_xeMatch17.2.2

OR

cisco_systems cisco_ios_xeMatch17.3.1

OR

cisco_systems cisco_ios_xeMatch17.3.1a

OR

cisco_systems cisco_ios_xeMatch17.6.1

OR

cisco_systems cisco_ios_xeMatch17.9.1

OR

cisco_systems cisco_ios_xeMatch17.9.1a

OR

cisco_systems cisco_ios_xeMatch17.10

OR

cisco_systems cisco_ios_xeMatch17.11

OR

cisco_systems cisco_ios_xeMatch17.11.1

OR

cisco_systems cisco_ios_xeMatch17.11.1a

OR

cisco_systems cisco_ios_xeMatch17.12

OR

cisco_systems cisco_ios_xeMatch17.12.1

OR

cisco_systems cisco_ios_xeMatch17.12.1a

OR

cisco_systems cisco_ios_xeMatch17.11sw

OR

cisco_systems cisco_ios_xeMatch17.11.99sw

OR

cisco_systems cisco_ios_xeMatch17.10.1

OR

cisco_systems cisco_ios_xeMatch17.10.1a

OR

cisco_systems cisco_ios_xeMatch17.10.1b

OR

cisco_systems cisco_ios_xeMatch16.12.3

OR

cisco_systems cisco_ios_xeMatch16.12.8

OR

cisco_systems cisco_ios_xeMatch16.12.5

OR

cisco_systems cisco_ios_xeMatch16.12.6

OR

cisco_systems cisco_ios_xeMatch16.12.6a

OR

cisco_systems cisco_ios_xeMatch16.12.7

OR

cisco_systems cisco_ios_xeMatch17.8

OR

cisco_systems cisco_ios_xeMatch17.8.1

OR

cisco_systems cisco_ios_xeMatch17.9

OR

cisco_systems cisco_ios_xeMatch17.9.2

OR

cisco_systems cisco_ios_xeMatch17.9.3

OR

cisco_systems cisco_ios_xeMatch17.9.4

OR

cisco_systems cisco_ios_xeMatch17.9.4a

OR

cisco_systems cisco_ios_xeMatch17.7

OR

cisco_systems cisco_ios_xeMatch17.7.1

OR

cisco_systems cisco_ios_xeMatch17.6.5a

OR

cisco_systems cisco_ios_xeMatch17.6.6a

OR

cisco_systems cisco_ios_xeMatch17.6.6

OR

cisco_systems cisco_ios_xeMatch17.6.2

OR

cisco_systems cisco_ios_xeMatch17.6.3

OR

cisco_systems cisco_ios_xeMatch17.6.4

OR

cisco_systems cisco_ios_xeMatch17.6.5

OR

cisco_systems cisco_ios_xeMatch17.3.2

OR

cisco_systems cisco_ios_xeMatch17.3.3

OR

cisco_systems cisco_ios_xeMatch17.3.2a

OR

cisco_systems cisco_ios_xeMatch17.3.4

OR

cisco_systems cisco_ios_xeMatch17.3.5

OR

cisco_systems cisco_ios_xeMatch17.3.6

OR

cisco_systems cisco_ios_xeMatch17.3.4c

OR

cisco_systems cisco_ios_xeMatch17.3.5a

OR

cisco_systems cisco_ios_xeMatch17.3.5b

OR

cisco_systems cisco_ios_xeMatch17.3.7

OR

cisco_systems cisco_ios_xeMatch17.3.8

OR

cisco_systems cisco_ios_xeMatch17.3.8a

OR

cisco_systems cisco_ios_xeMatch17.4.1

OR

cisco_systems cisco_ios_xeMatch17.5.1

OR

cisco_systems cisco_ios_xeMatch16.3.11

OR

cisco_systems cisco_ios_xeMatch16.6.9

OR

cisco_systems cisco_ios_xeMatch16.6.10

OR

cisco_systems cisco_ios_xeMatch16.9.6

OR

cisco_systems cisco_ios_xeMatch16.9.7

OR

cisco_systems cisco_ios_xeRange16.9.8–16.9.8c

OR

cisco_systems cisco_ios_xeMatch16.12.5a

OR

cisco_systems cisco_ios_xeMatch16.12.5b

OR

cisco_systems cisco_ios_xeMatch16.12.9

OR

cisco_systems cisco_ios_xeMatch16.12.10

OR

cisco_systems cisco_ios_xeMatch16.12.10a

OR

cisco_systems cisco_ios_xeMatch16.12.11

OR

cisco_systems cisco_ios_xeMatch17.2.3

OR

cisco_systems cisco_ios_xeMatch17.3.3a

OR

cisco_systems cisco_ios_xeMatch17.3.4a

OR

cisco_systems cisco_ios_xeMatch17.3.4b

OR

cisco_systems cisco_ios_xeMatch17.4.1a

OR

cisco_systems cisco_ios_xeMatch17.4.1b

OR

cisco_systems cisco_ios_xeMatch17.4.1c

OR

cisco_systems cisco_ios_xeMatch17.4.2

OR

cisco_systems cisco_ios_xeMatch17.4.2a

OR

cisco_systems cisco_ios_xeMatch17.5.1a

OR

cisco_systems cisco_ios_xeMatch17.5.1b

OR

cisco_systems cisco_ios_xeMatch17.5.1c

OR

cisco_systems cisco_ios_xeMatch17.6.1a

OR

cisco_systems cisco_ios_xeMatch17.6.3a

OR

cisco_systems cisco_ios_xeMatch17.7.1a

OR

cisco_systems cisco_ios_xeMatch17.7.1b

OR

cisco_systems cisco_ios_xeMatch17.7.2

OR

cisco_systems cisco_ios_xeMatch17.8.1a

OR

cisco_systems cisco_ios_xeMatch17.9.2a

OR

cisco_systems cisco_ios_xeMatch17.9.3a

OR

cisco_systems cisco_ios_xeMatch17.12.2

OR

cisco_systems cisco_ios_xeMatch17.12.2a

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dmi-acl-bypass-Xv8FO8Vz
web	www.web.nvd.nist.gov/view/vuln/detail

03 Apr 2024 00:00Current

5.4Medium risk

Vulners AI Score5.4

CVSS 25

CVSS 35.8

EPSS0.00451

Cisco IOS XE network configuration protocol rest configuration protocol data model interface access control list unauthorized access vulnerability