← Database

CVE-2021-34696

MEDIUM CVSS: 5.8 Published: 2021-09-23 Modified: 2026-06-17

Description

A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect programming of hardware when an ACL is configured using a method other than the configuration CLI. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.

Affected Platforms

Cisco Asr 920-24Sz-M RCisco Asr 920-24Tz-M RCisco Asr 920-12Cz-D RCisco Asr 920-12Cz-DCisco Asr 920-12Sz-Im RCisco Asr 920-4Sz-D RCisco Asr 920-12Sz-ImCisco Asr 920-24Sz-MCisco Asr 920-10Sz-Pd RCisco Asr 907

Weakness Type

CWE-284, NVD-CWE-Other

References