Design/Logic Flaw

Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133...

CVE-2014-3396

Cisco IOS XR on ASR 9000 Series (Typhoon line cards) is affected by CVE-2014-3396 due to improper compression encoding of port-range and address-range in ACL processing. The root cause is incorrect encoding in the compression module, which could allow an unauthenticated, remote attacker to bypass...