Tracker / CVE-2014-3396
CVE-2014-3396
High 7.5
Cisco IOS XR on ASR 9000 devices does not properly use compression for port-range and address-range encoding, which allows remote attackers to bypass intended Typhoon line-card ACL restrictions via transit traffic, aka Bug ID CSCup30133.
Affected products and versions
| cisco | asr_9000_rsp440_router |
|---|---|
| cisco | asr_9001 |
| cisco | asr_9006 |
| cisco | asr_9010 |
| cisco | asr_9904 |
| cisco | asr_9912 |
| cisco | asr_9922 |
| cisco | ios_xr |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.