Cisco IOS XR Software Standby Route Processor Gigabit Ethernet Management Interface Access Control List Bypass Vulnerability (cisco-sa-xracl-zbWSWREt)

An authentication bypass vulnerability exists in Cisco IOS XR Software due to a logic error, which prevents the ACL from working when applied against the standby route processor management interface. An unauthenticated, remote attacker can exploit this by attempting to access the device through t...

CVE-2020-3364

CVE-2020-3364 concerns Cisco IOS XR Software’s standby route processor (RSP) Gigabit Ethernet Management interface. A logic error in the ACL functionality prevents ACLs from filtering traffic on the standby RSP management interface, allowing an unauthenticated, remote attacker to reach configured...