The vulnerability of the NETCONF or RESTCONF protocol implementations for the Data Model Interface (DMI) of Cisco IOS XE operating systems allows attackers to circumvent security restrictions and gain unauthorized access to resources.

The vulnerability of the NETCONF or RESTCONF protocols for the Data Model Interface DMI service of Cisco IOS XE lies in the lack of error-handling mechanisms when the order of entries in the access control list is changed after an update. Exploiting this vulnerability allows a malicious actor to...