Vulnerability-Lookup

BDU:2024-02559

Vulnerability from fstec - Published: 27.03.2024

Title

Уязвимость реализации протоколов NETCONF или RESTCONF службы Data Model Interface (DMI) операционных систем Cisco IOS XE, позволяющая нарушителю обойти ограничения безопасности и получить несанкционированный доступ к ресурсам

Description

Уязвимость реализации протоколов NETCONF или RESTCONF службы Data Model Interface (DMI) операционных систем Cisco IOS XE связана с недостатками обработки ошибочных ситуаций в результате изменения порядка записей списка управления доступом после его обновления. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти ограничения безопасности и получить несанкционированный доступ к ресурсам

Severity ?


                    
                      AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

Vendor

Cisco Systems Inc.

Software Name

Cisco IOS XE

Software Version

16.5.1 (Cisco IOS XE), 16.3.1a (Cisco IOS XE), 16.5.1a (Cisco IOS XE), 16.3.1 (Cisco IOS XE), 16.3.2 (Cisco IOS XE), 16.3.3 (Cisco IOS XE), 16.3.4 (Cisco IOS XE), 16.3.5 (Cisco IOS XE), 16.3.5b (Cisco IOS XE), 16.4.3 (Cisco IOS XE), 16.7.2 (Cisco IOS XE), 16.3.6 (Cisco IOS XE), 16.4.2 (Cisco IOS XE), 16.5.1b (Cisco IOS XE), 16.5.2 (Cisco IOS XE), 16.5.3 (Cisco IOS XE), 16.7.1 (Cisco IOS XE), 16.8.1 (Cisco IOS XE), 16.8.1s (Cisco IOS XE), 16.9.1b (Cisco IOS XE), 16.3.7 (Cisco IOS XE), 16.8.1b (Cisco IOS XE), 16.8.1a (Cisco IOS XE), 16.8.1c (Cisco IOS XE), 16.8.2 (Cisco IOS XE), 16.9.1 (Cisco IOS XE), 16.9.2 (Cisco IOS XE), 16.9.1a (Cisco IOS XE), 16.9.1s (Cisco IOS XE), 16.9.1c (Cisco IOS XE), 16.9.1d (Cisco IOS XE), 16.9.2a (Cisco IOS XE), 16.7.3 (Cisco IOS XE), 16.10.1 (Cisco IOS XE), 16.12.1 (Cisco IOS XE), 16.3 (Cisco IOS XE), 16.8.3 (Cisco IOS XE), 16.9.2s (Cisco IOS XE), 16.9.3h (Cisco IOS XE), 16.3.8 (Cisco IOS XE), 16.4 (Cisco IOS XE), 16.5 (Cisco IOS XE), 16.7 (Cisco IOS XE), 16.8 (Cisco IOS XE), 16.9 (Cisco IOS XE), 16.10 (Cisco IOS XE), 16.11 (Cisco IOS XE), 17.2 (Cisco IOS XE), 17.3 (Cisco IOS XE), 17.4 (Cisco IOS XE), 17.5 (Cisco IOS XE), 17.6 (Cisco IOS XE), 16.10.2 (Cisco IOS XE), 16.3.9 (Cisco IOS XE), 16.6.5a (Cisco IOS XE), 16.6.6 (Cisco IOS XE), 16.6.5b (Cisco IOS XE), 16.9.3 (Cisco IOS XE), 16.9.4 (Cisco IOS XE), 16.9.3s (Cisco IOS XE), 16.9.3a (Cisco IOS XE), 16.9.4c (Cisco IOS XE), 16.10.1a (Cisco IOS XE), 16.10.1b (Cisco IOS XE), 16.10.1s (Cisco IOS XE), 16.10.1e (Cisco IOS XE), 16.10.3 (Cisco IOS XE), 16.11.1 (Cisco IOS XE), 16.11.1a (Cisco IOS XE), 16.11.1b (Cisco IOS XE), 16.11.1s (Cisco IOS XE), 16.11.1c (Cisco IOS XE), 16.12.1a (Cisco IOS XE), 16.12.1c (Cisco IOS XE), 16.12.1s (Cisco IOS XE), 16.12.1t (Cisco IOS XE), 16.11.2 (Cisco IOS XE), 16.3.10 (Cisco IOS XE), 16.6.7 (Cisco IOS XE), 16.6.7a (Cisco IOS XE), 16.6.8 (Cisco IOS XE), 16.9.5 (Cisco IOS XE), 16.9.5f (Cisco IOS XE), 16.12 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.1.1 (Cisco IOS XE), 17.1 (Cisco IOS XE), 16.12.2 (Cisco IOS XE), 16.12.2a (Cisco IOS XE), 16.12.2s (Cisco IOS XE), 16.12.2t (Cisco IOS XE), 16.12.4 (Cisco IOS XE), 16.12.3s (Cisco IOS XE), 16.12.3a (Cisco IOS XE), 16.12.4a (Cisco IOS XE), 17.1.1a (Cisco IOS XE), 17.1.1s (Cisco IOS XE), 17.1.2 (Cisco IOS XE), 17.1.1t (Cisco IOS XE), 17.1.3 (Cisco IOS XE), 17.2.1r (Cisco IOS XE), 17.2.1a (Cisco IOS XE), 17.2.1v (Cisco IOS XE), 17.2.2 (Cisco IOS XE), 17.3.1 (Cisco IOS XE), 17.3.1a (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.9.1a (Cisco IOS XE), 17.10 (Cisco IOS XE), 17.11 (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.11.1a (Cisco IOS XE), 17.12 (Cisco IOS XE), 17.12.1 (Cisco IOS XE), 17.12.1a (Cisco IOS XE), 17.11SW (Cisco IOS XE), 17.11.99SW (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 17.10.1a (Cisco IOS XE), 17.10.1b (Cisco IOS XE), 16.12.3 (Cisco IOS XE), 16.12.8 (Cisco IOS XE), 16.12.5 (Cisco IOS XE), 16.12.6 (Cisco IOS XE), 16.12.6a (Cisco IOS XE), 16.12.7 (Cisco IOS XE), 17.8 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.9 (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9.4 (Cisco IOS XE), 17.9.4a (Cisco IOS XE), 17.7 (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.6.6a (Cisco IOS XE), 17.6.6 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.2a (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.4c (Cisco IOS XE), 17.3.5a (Cisco IOS XE), 17.3.5b (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE), 16.3.11 (Cisco IOS XE), 16.6.9 (Cisco IOS XE), 16.6.10 (Cisco IOS XE), 16.9.6 (Cisco IOS XE), 16.9.7 (Cisco IOS XE), от 16.9.8 до 16.9.8c включительно (Cisco IOS XE), 16.12.5a (Cisco IOS XE), 16.12.5b (Cisco IOS XE), 16.12.9 (Cisco IOS XE), 16.12.10 (Cisco IOS XE), 16.12.10a (Cisco IOS XE), 16.12.11 (Cisco IOS XE), 17.2.3 (Cisco IOS XE), 17.3.3a (Cisco IOS XE), 17.3.4a (Cisco IOS XE), 17.3.4b (Cisco IOS XE), 17.4.1a (Cisco IOS XE), 17.4.1b (Cisco IOS XE), 17.4.1c (Cisco IOS XE), 17.4.2 (Cisco IOS XE), 17.4.2a (Cisco IOS XE), 17.5.1a (Cisco IOS XE), 17.5.1b (Cisco IOS XE), 17.5.1c (Cisco IOS XE), 17.6.1a (Cisco IOS XE), 17.6.3a (Cisco IOS XE), 17.7.1a (Cisco IOS XE), 17.7.1b (Cisco IOS XE), 17.7.2 (Cisco IOS XE), 17.8.1a (Cisco IOS XE), 17.9.2a (Cisco IOS XE), 17.9.3a (Cisco IOS XE), 17.12.2 (Cisco IOS XE), 17.12.2a (Cisco IOS XE)

Possible Mitigations

Использование рекомендаций: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dmi-acl-bypass-Xv8FO8Vz Компенсирующие меры: Рекомендуется отключить использование протоколов NETCONF или RESTCONF.

Reference

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dmi-acl-bypass-Xv8FO8Vz

CWE

CWE-390

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "16.5.1 (Cisco IOS XE), 16.3.1a (Cisco IOS XE), 16.5.1a (Cisco IOS XE), 16.3.1 (Cisco IOS XE), 16.3.2 (Cisco IOS XE), 16.3.3 (Cisco IOS XE), 16.3.4 (Cisco IOS XE), 16.3.5 (Cisco IOS XE), 16.3.5b (Cisco IOS XE), 16.4.3 (Cisco IOS XE), 16.7.2 (Cisco IOS XE), 16.3.6 (Cisco IOS XE), 16.4.2 (Cisco IOS XE), 16.5.1b (Cisco IOS XE), 16.5.2 (Cisco IOS XE), 16.5.3 (Cisco IOS XE), 16.7.1 (Cisco IOS XE), 16.8.1 (Cisco IOS XE), 16.8.1s (Cisco IOS XE), 16.9.1b (Cisco IOS XE), 16.3.7 (Cisco IOS XE), 16.8.1b (Cisco IOS XE), 16.8.1a (Cisco IOS XE), 16.8.1c (Cisco IOS XE), 16.8.2 (Cisco IOS XE), 16.9.1 (Cisco IOS XE), 16.9.2 (Cisco IOS XE), 16.9.1a (Cisco IOS XE), 16.9.1s (Cisco IOS XE), 16.9.1c (Cisco IOS XE), 16.9.1d (Cisco IOS XE), 16.9.2a (Cisco IOS XE), 16.7.3 (Cisco IOS XE), 16.10.1 (Cisco IOS XE), 16.12.1 (Cisco IOS XE), 16.3 (Cisco IOS XE), 16.8.3 (Cisco IOS XE), 16.9.2s (Cisco IOS XE), 16.9.3h (Cisco IOS XE), 16.3.8 (Cisco IOS XE), 16.4 (Cisco IOS XE), 16.5 (Cisco IOS XE), 16.7 (Cisco IOS XE), 16.8 (Cisco IOS XE), 16.9 (Cisco IOS XE), 16.10 (Cisco IOS XE), 16.11 (Cisco IOS XE), 17.2 (Cisco IOS XE), 17.3 (Cisco IOS XE), 17.4 (Cisco IOS XE), 17.5 (Cisco IOS XE), 17.6 (Cisco IOS XE), 16.10.2 (Cisco IOS XE), 16.3.9 (Cisco IOS XE), 16.6.5a (Cisco IOS XE), 16.6.6 (Cisco IOS XE), 16.6.5b (Cisco IOS XE), 16.9.3 (Cisco IOS XE), 16.9.4 (Cisco IOS XE), 16.9.3s (Cisco IOS XE), 16.9.3a (Cisco IOS XE), 16.9.4c (Cisco IOS XE), 16.10.1a (Cisco IOS XE), 16.10.1b (Cisco IOS XE), 16.10.1s (Cisco IOS XE), 16.10.1e (Cisco IOS XE), 16.10.3 (Cisco IOS XE), 16.11.1 (Cisco IOS XE), 16.11.1a (Cisco IOS XE), 16.11.1b (Cisco IOS XE), 16.11.1s (Cisco IOS XE), 16.11.1c (Cisco IOS XE), 16.12.1a (Cisco IOS XE), 16.12.1c (Cisco IOS XE), 16.12.1s (Cisco IOS XE), 16.12.1t (Cisco IOS XE), 16.11.2 (Cisco IOS XE), 16.3.10 (Cisco IOS XE), 16.6.7 (Cisco IOS XE), 16.6.7a (Cisco IOS XE), 16.6.8 (Cisco IOS XE), 16.9.5 (Cisco IOS XE), 16.9.5f (Cisco IOS XE), 16.12 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.1.1 (Cisco IOS XE), 17.1 (Cisco IOS XE), 16.12.2 (Cisco IOS XE), 16.12.2a (Cisco IOS XE), 16.12.2s (Cisco IOS XE), 16.12.2t (Cisco IOS XE), 16.12.4 (Cisco IOS XE), 16.12.3s (Cisco IOS XE), 16.12.3a (Cisco IOS XE), 16.12.4a (Cisco IOS XE), 17.1.1a (Cisco IOS XE), 17.1.1s (Cisco IOS XE), 17.1.2 (Cisco IOS XE), 17.1.1t (Cisco IOS XE), 17.1.3 (Cisco IOS XE), 17.2.1r (Cisco IOS XE), 17.2.1a (Cisco IOS XE), 17.2.1v (Cisco IOS XE), 17.2.2 (Cisco IOS XE), 17.3.1 (Cisco IOS XE), 17.3.1a (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.9.1a (Cisco IOS XE), 17.10 (Cisco IOS XE), 17.11 (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.11.1a (Cisco IOS XE), 17.12 (Cisco IOS XE), 17.12.1 (Cisco IOS XE), 17.12.1a (Cisco IOS XE), 17.11SW (Cisco IOS XE), 17.11.99SW (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 17.10.1a (Cisco IOS XE), 17.10.1b (Cisco IOS XE), 16.12.3 (Cisco IOS XE), 16.12.8 (Cisco IOS XE), 16.12.5 (Cisco IOS XE), 16.12.6 (Cisco IOS XE), 16.12.6a (Cisco IOS XE), 16.12.7 (Cisco IOS XE), 17.8 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.9 (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9.4 (Cisco IOS XE), 17.9.4a (Cisco IOS XE), 17.7 (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.6.6a (Cisco IOS XE), 17.6.6 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.2a (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.4c (Cisco IOS XE), 17.3.5a (Cisco IOS XE), 17.3.5b (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE), 16.3.11 (Cisco IOS XE), 16.6.9 (Cisco IOS XE), 16.6.10 (Cisco IOS XE), 16.9.6 (Cisco IOS XE), 16.9.7 (Cisco IOS XE), \u043e\u0442 16.9.8 \u0434\u043e 16.9.8c \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Cisco IOS XE), 16.12.5a (Cisco IOS XE), 16.12.5b (Cisco IOS XE), 16.12.9 (Cisco IOS XE), 16.12.10 (Cisco IOS XE), 16.12.10a (Cisco IOS XE), 16.12.11 (Cisco IOS XE), 17.2.3 (Cisco IOS XE), 17.3.3a (Cisco IOS XE), 17.3.4a (Cisco IOS XE), 17.3.4b (Cisco IOS XE), 17.4.1a (Cisco IOS XE), 17.4.1b (Cisco IOS XE), 17.4.1c (Cisco IOS XE), 17.4.2 (Cisco IOS XE), 17.4.2a (Cisco IOS XE), 17.5.1a (Cisco IOS XE), 17.5.1b (Cisco IOS XE), 17.5.1c (Cisco IOS XE), 17.6.1a (Cisco IOS XE), 17.6.3a (Cisco IOS XE), 17.7.1a (Cisco IOS XE), 17.7.1b (Cisco IOS XE), 17.7.2 (Cisco IOS XE), 17.8.1a (Cisco IOS XE), 17.9.2a (Cisco IOS XE), 17.9.3a (Cisco IOS XE), 17.12.2 (Cisco IOS XE), 17.12.2a (Cisco IOS XE)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dmi-acl-bypass-Xv8FO8Vz\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 NETCONF \u0438\u043b\u0438 RESTCONF.",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "27.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "03.04.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "03.04.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-02559",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-20316",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco IOS XE",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Cisco Systems Inc. Cisco IOS XE 16.5.1 , Cisco Systems Inc. Cisco IOS XE 16.3.1a , Cisco Systems Inc. Cisco IOS XE 16.5.1a , Cisco Systems Inc. Cisco IOS XE 16.3.1 , Cisco Systems Inc. Cisco IOS XE 16.3.2 , Cisco Systems Inc. Cisco IOS XE 16.3.3 , Cisco Systems Inc. Cisco IOS XE 16.3.4 , Cisco Systems Inc. Cisco IOS XE 16.3.5 , Cisco Systems Inc. Cisco IOS XE 16.3.5b , Cisco Systems Inc. Cisco IOS XE 16.4.3 , Cisco Systems Inc. Cisco IOS XE 16.7.2 , Cisco Systems Inc. Cisco IOS XE 16.3.6 , Cisco Systems Inc. Cisco IOS XE 16.4.2 , Cisco Systems Inc. Cisco IOS XE 16.5.1b , Cisco Systems Inc. Cisco IOS XE 16.5.2 , Cisco Systems Inc. Cisco IOS XE 16.5.3 , Cisco Systems Inc. Cisco IOS XE 16.7.1 , Cisco Systems Inc. Cisco IOS XE 16.8.1 , Cisco Systems Inc. Cisco IOS XE 16.8.1s , Cisco Systems Inc. Cisco IOS XE 16.9.1b , Cisco Systems Inc. Cisco IOS XE 16.3.7 , Cisco Systems Inc. Cisco IOS XE 16.8.1b , Cisco Systems Inc. Cisco IOS XE 16.8.1a , Cisco Systems Inc. Cisco IOS XE 16.8.1c , Cisco Systems Inc. Cisco IOS XE 16.8.2 , Cisco Systems Inc. Cisco IOS XE 16.9.1 , Cisco Systems Inc. Cisco IOS XE 16.9.2 , Cisco Systems Inc. Cisco IOS XE 16.9.1a , Cisco Systems Inc. Cisco IOS XE 16.9.1s , Cisco Systems Inc. Cisco IOS XE 16.9.1c , Cisco Systems Inc. Cisco IOS XE 16.9.1d , Cisco Systems Inc. Cisco IOS XE 16.9.2a , Cisco Systems Inc. Cisco IOS XE 16.7.3 , Cisco Systems Inc. Cisco IOS XE 16.10.1 , Cisco Systems Inc. Cisco IOS XE 16.12.1 , Cisco Systems Inc. Cisco IOS XE 16.3 , Cisco Systems Inc. Cisco IOS XE 16.8.3 , Cisco Systems Inc. Cisco IOS XE 16.9.2s , Cisco Systems Inc. Cisco IOS XE 16.9.3h , Cisco Systems Inc. Cisco IOS XE 16.3.8 , Cisco Systems Inc. Cisco IOS XE 16.4 , Cisco Systems Inc. Cisco IOS XE 16.5 , Cisco Systems Inc. Cisco IOS XE 16.7 , Cisco Systems Inc. Cisco IOS XE 16.8 , Cisco Systems Inc. Cisco IOS XE 16.9 , Cisco Systems Inc. Cisco IOS XE 16.10 , Cisco Systems Inc. Cisco IOS XE 16.11 , Cisco Systems Inc. Cisco IOS XE 17.2 , Cisco Systems Inc. Cisco IOS XE 17.3 , Cisco Systems Inc. Cisco IOS XE 17.4 , Cisco Systems Inc. Cisco IOS XE 17.5 , Cisco Systems Inc. Cisco IOS XE 17.6 , Cisco Systems Inc. Cisco IOS XE 16.10.2 , Cisco Systems Inc. Cisco IOS XE 16.3.9 , Cisco Systems Inc. Cisco IOS XE 16.6.5a , Cisco Systems Inc. Cisco IOS XE 16.6.6 , Cisco Systems Inc. Cisco IOS XE 16.6.5b , Cisco Systems Inc. Cisco IOS XE 16.9.3 , Cisco Systems Inc. Cisco IOS XE 16.9.4 , Cisco Systems Inc. Cisco IOS XE 16.9.3s , Cisco Systems Inc. Cisco IOS XE 16.9.3a , Cisco Systems Inc. Cisco IOS XE 16.9.4c , Cisco Systems Inc. Cisco IOS XE 16.10.1a , Cisco Systems Inc. Cisco IOS XE 16.10.1b , Cisco Systems Inc. Cisco IOS XE 16.10.1s , Cisco Systems Inc. Cisco IOS XE 16.10.1e , Cisco Systems Inc. Cisco IOS XE 16.10.3 , Cisco Systems Inc. Cisco IOS XE 16.11.1 , Cisco Systems Inc. Cisco IOS XE 16.11.1a , Cisco Systems Inc. Cisco IOS XE 16.11.1b , Cisco Systems Inc. Cisco IOS XE 16.11.1s , Cisco Systems Inc. Cisco IOS XE 16.11.1c , Cisco Systems Inc. Cisco IOS XE 16.12.1a , Cisco Systems Inc. Cisco IOS XE 16.12.1c , Cisco Systems Inc. Cisco IOS XE 16.12.1s , Cisco Systems Inc. Cisco IOS XE 16.12.1t , Cisco Systems Inc. Cisco IOS XE 16.11.2 , Cisco Systems Inc. Cisco IOS XE 16.3.10 , Cisco Systems Inc. Cisco IOS XE 16.6.7 , Cisco Systems Inc. Cisco IOS XE 16.6.7a , Cisco Systems Inc. Cisco IOS XE 16.6.8 , Cisco Systems Inc. Cisco IOS XE 16.9.5 , Cisco Systems Inc. Cisco IOS XE 16.9.5f , Cisco Systems Inc. Cisco IOS XE 16.12 , Cisco Systems Inc. Cisco IOS XE 17.2.1 , Cisco Systems Inc. Cisco IOS XE 17.1.1 , Cisco Systems Inc. Cisco IOS XE 17.1 , Cisco Systems Inc. Cisco IOS XE 16.12.2 , Cisco Systems Inc. Cisco IOS XE 16.12.2a , Cisco Systems Inc. Cisco IOS XE 16.12.2s , Cisco Systems Inc. Cisco IOS XE 16.12.2t , Cisco Systems Inc. Cisco IOS XE 16.12.4 , Cisco Systems Inc. Cisco IOS XE 16.12.3s , Cisco Systems Inc. Cisco IOS XE 16.12.3a , Cisco Systems Inc. Cisco IOS XE 16.12.4a , Cisco Systems Inc. Cisco IOS XE 17.1.1a , Cisco Systems Inc. Cisco IOS XE 17.1.1s , Cisco Systems Inc. Cisco IOS XE 17.1.2 , Cisco Systems Inc. Cisco IOS XE 17.1.1t , Cisco Systems Inc. Cisco IOS XE 17.1.3 , Cisco Systems Inc. Cisco IOS XE 17.2.1r , Cisco Systems Inc. Cisco IOS XE 17.2.1a , Cisco Systems Inc. Cisco IOS XE 17.2.1v , Cisco Systems Inc. Cisco IOS XE 17.2.2 , Cisco Systems Inc. Cisco IOS XE 17.3.1 , Cisco Systems Inc. Cisco IOS XE 17.3.1a , Cisco Systems Inc. Cisco IOS XE 17.6.1 , Cisco Systems Inc. Cisco IOS XE 17.9.1 , Cisco Systems Inc. Cisco IOS XE 17.9.1a , Cisco Systems Inc. Cisco IOS XE 17.10 , Cisco Systems Inc. Cisco IOS XE 17.11 , Cisco Systems Inc. Cisco IOS XE 17.11.1 , Cisco Systems Inc. Cisco IOS XE 17.11.1a , Cisco Systems Inc. Cisco IOS XE 17.12 , Cisco Systems Inc. Cisco IOS XE 17.12.1 , Cisco Systems Inc. Cisco IOS XE 17.12.1a , Cisco Systems Inc. Cisco IOS XE 17.11SW , Cisco Systems Inc. Cisco IOS XE 17.11.99SW , Cisco Systems Inc. Cisco IOS XE 17.10.1 , Cisco Systems Inc. Cisco IOS XE 17.10.1a , Cisco Systems Inc. Cisco IOS XE 17.10.1b , Cisco Systems Inc. Cisco IOS XE 16.12.3 , Cisco Systems Inc. Cisco IOS XE 16.12.8 , Cisco Systems Inc. Cisco IOS XE 16.12.5 , Cisco Systems Inc. Cisco IOS XE 16.12.6 , Cisco Systems Inc. Cisco IOS XE 16.12.6a , Cisco Systems Inc. Cisco IOS XE 16.12.7 , Cisco Systems Inc. Cisco IOS XE 17.8 , Cisco Systems Inc. Cisco IOS XE 17.8.1 , Cisco Systems Inc. Cisco IOS XE 17.9 , Cisco Systems Inc. Cisco IOS XE 17.9.2 , Cisco Systems Inc. Cisco IOS XE 17.9.3 , Cisco Systems Inc. Cisco IOS XE 17.9.4 , Cisco Systems Inc. Cisco IOS XE 17.9.4a , Cisco Systems Inc. Cisco IOS XE 17.7 , Cisco Systems Inc. Cisco IOS XE 17.7.1 , Cisco Systems Inc. Cisco IOS XE 17.6.5a , Cisco Systems Inc. Cisco IOS XE 17.6.6a , Cisco Systems Inc. Cisco IOS XE 17.6.6 , Cisco Systems Inc. Cisco IOS XE 17.6.2 , Cisco Systems Inc. Cisco IOS XE 17.6.3 , Cisco Systems Inc. Cisco IOS XE 17.6.4 , Cisco Systems Inc. Cisco IOS XE 17.6.5 , Cisco Systems Inc. Cisco IOS XE 17.3.2 , Cisco Systems Inc. Cisco IOS XE 17.3.3 , Cisco Systems Inc. Cisco IOS XE 17.3.2a , Cisco Systems Inc. Cisco IOS XE 17.3.4 , Cisco Systems Inc. Cisco IOS XE 17.3.5 , Cisco Systems Inc. Cisco IOS XE 17.3.6 , Cisco Systems Inc. Cisco IOS XE 17.3.4c , Cisco Systems Inc. Cisco IOS XE 17.3.5a , Cisco Systems Inc. Cisco IOS XE 17.3.5b , Cisco Systems Inc. Cisco IOS XE 17.3.7 , Cisco Systems Inc. Cisco IOS XE 17.3.8 , Cisco Systems Inc. Cisco IOS XE 17.3.8a , Cisco Systems Inc. Cisco IOS XE 17.4.1 , Cisco Systems Inc. Cisco IOS XE 17.5.1 , Cisco Systems Inc. Cisco IOS XE 16.3.11 , Cisco Systems Inc. Cisco IOS XE 16.6.9 , Cisco Systems Inc. Cisco IOS XE 16.6.10 , Cisco Systems Inc. Cisco IOS XE 16.9.6 , Cisco Systems Inc. Cisco IOS XE 16.9.7 , Cisco Systems Inc. Cisco IOS XE \u043e\u0442 16.9.8 \u0434\u043e 16.9.8c \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Cisco Systems Inc. Cisco IOS XE 16.12.5a , Cisco Systems Inc. Cisco IOS XE 16.12.5b , Cisco Systems Inc. Cisco IOS XE 16.12.9 , Cisco Systems Inc. Cisco IOS XE 16.12.10 , Cisco Systems Inc. Cisco IOS XE 16.12.10a , Cisco Systems Inc. Cisco IOS XE 16.12.11 , Cisco Systems Inc. Cisco IOS XE 17.2.3 , Cisco Systems Inc. Cisco IOS XE 17.3.3a , Cisco Systems Inc. Cisco IOS XE 17.3.4a , Cisco Systems Inc. Cisco IOS XE 17.3.4b , Cisco Systems Inc. Cisco IOS XE 17.4.1a , Cisco Systems Inc. Cisco IOS XE 17.4.1b , Cisco Systems Inc. Cisco IOS XE 17.4.1c , Cisco Systems Inc. Cisco IOS XE 17.4.2 , Cisco Systems Inc. Cisco IOS XE 17.4.2a , Cisco Systems Inc. Cisco IOS XE 17.5.1a , Cisco Systems Inc. Cisco IOS XE 17.5.1b , Cisco Systems Inc. Cisco IOS XE 17.5.1c , Cisco Systems Inc. Cisco IOS XE 17.6.1a , Cisco Systems Inc. Cisco IOS XE 17.6.3a , Cisco Systems Inc. Cisco IOS XE 17.7.1a , Cisco Systems Inc. Cisco IOS XE 17.7.1b , Cisco Systems Inc. Cisco IOS XE 17.7.2 , Cisco Systems Inc. Cisco IOS XE 17.8.1a , Cisco Systems Inc. Cisco IOS XE 17.9.2a , Cisco Systems Inc. Cisco IOS XE 17.9.3a , Cisco Systems Inc. Cisco IOS XE 17.12.2 , Cisco Systems Inc. Cisco IOS XE 17.12.2a ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 NETCONF \u0438\u043b\u0438 RESTCONF \u0441\u043b\u0443\u0436\u0431\u044b Data Model Interface (DMI) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u0435\u0437 \u043f\u0440\u0438\u043d\u044f\u0442\u0438\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 (CWE-390)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 NETCONF \u0438\u043b\u0438 RESTCONF \u0441\u043b\u0443\u0436\u0431\u044b Data Model Interface (DMI) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u0447\u043d\u044b\u0445 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0439 \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043f\u043e\u0440\u044f\u0434\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0441\u043f\u0438\u0441\u043a\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043f\u043e\u0441\u043b\u0435 \u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043e\u0431\u043e\u0439\u0442\u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dmi-acl-bypass-Xv8FO8Vz",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-390",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,8)"
}

CVE-2024-20316 (GCVE-0-2024-20316)

Vulnerability from cvelistv5 – Published: 2024-03-27 16:49 – Updated: 2024-08-01 21:59

Summary

A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list (ACL). This vulnerability is due to improper handling of error conditions when a successfully authorized device administrator updates an IPv4 ACL using the NETCONF or RESTCONF protocol, and the update would reorder access control entries (ACEs) in the updated ACL. An attacker could exploit this vulnerability by accessing resources that should have been protected across an affected device.

Severity ?

5.8 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

CWE

CWE-390 - Detection of Error Condition Without Action

Assigner

cisco

References

URL

Tags

https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

	Vendor	Product	Version
	Cisco	Cisco IOS XE Software	Affected: 16.3.1 Affected: 16.3.2 Affected: 16.3.3 Affected: 16.3.1a Affected: 16.3.4 Affected: 16.3.5 Affected: 16.3.5b Affected: 16.3.6 Affected: 16.3.7 Affected: 16.3.8 Affected: 16.3.9 Affected: 16.3.10 Affected: 16.3.11 Affected: 16.4.1 Affected: 16.4.2 Affected: 16.4.3 Affected: 16.5.1 Affected: 16.5.1a Affected: 16.5.1b Affected: 16.5.2 Affected: 16.5.3 Affected: 16.6.1 Affected: 16.6.2 Affected: 16.6.3 Affected: 16.6.4 Affected: 16.6.5 Affected: 16.6.4a Affected: 16.6.5a Affected: 16.6.6 Affected: 16.6.7 Affected: 16.6.8 Affected: 16.6.9 Affected: 16.6.10 Affected: 16.7.1 Affected: 16.7.2 Affected: 16.7.3 Affected: 16.8.1 Affected: 16.8.1a Affected: 16.8.1b Affected: 16.8.1s Affected: 16.8.1c Affected: 16.8.2 Affected: 16.8.3 Affected: 16.9.1 Affected: 16.9.2 Affected: 16.9.1a Affected: 16.9.1b Affected: 16.9.1s Affected: 16.9.3 Affected: 16.9.4 Affected: 16.9.3a Affected: 16.9.5 Affected: 16.9.5f Affected: 16.9.6 Affected: 16.9.7 Affected: 16.9.8 Affected: 16.10.1 Affected: 16.10.1a Affected: 16.10.1b Affected: 16.10.1s Affected: 16.10.1e Affected: 16.10.2 Affected: 16.10.3 Affected: 16.11.1 Affected: 16.11.1a Affected: 16.11.1b Affected: 16.11.2 Affected: 16.11.1s Affected: 16.12.1 Affected: 16.12.1s Affected: 16.12.1a Affected: 16.12.1c Affected: 16.12.2 Affected: 16.12.2a Affected: 16.12.3 Affected: 16.12.8 Affected: 16.12.2s Affected: 16.12.1t Affected: 16.12.4 Affected: 16.12.3s Affected: 16.12.3a Affected: 16.12.4a Affected: 16.12.5 Affected: 16.12.6 Affected: 16.12.5a Affected: 16.12.5b Affected: 16.12.6a Affected: 16.12.7 Affected: 16.12.9 Affected: 16.12.10 Affected: 16.12.10a Affected: 16.12.11 Affected: 17.1.1 Affected: 17.1.1a Affected: 17.1.1s Affected: 17.1.1t Affected: 17.1.3 Affected: 17.2.1 Affected: 17.2.1r Affected: 17.2.1a Affected: 17.2.1v Affected: 17.2.2 Affected: 17.2.3 Affected: 17.3.1 Affected: 17.3.2 Affected: 17.3.3 Affected: 17.3.1a Affected: 17.3.2a Affected: 17.3.4 Affected: 17.3.5 Affected: 17.3.4a Affected: 17.3.6 Affected: 17.3.4b Affected: 17.3.4c Affected: 17.3.5a Affected: 17.3.5b Affected: 17.3.7 Affected: 17.3.8 Affected: 17.3.8a Affected: 17.4.1 Affected: 17.4.2 Affected: 17.4.1a Affected: 17.4.1b Affected: 17.4.2a Affected: 17.5.1 Affected: 17.5.1a Affected: 17.6.1 Affected: 17.6.2 Affected: 17.6.1a Affected: 17.6.3 Affected: 17.6.3a Affected: 17.6.4 Affected: 17.6.5 Affected: 17.6.6 Affected: 17.6.6a Affected: 17.6.5a Affected: 17.7.1 Affected: 17.7.1a Affected: 17.7.1b Affected: 17.7.2 Affected: 17.10.1 Affected: 17.10.1a Affected: 17.10.1b Affected: 17.8.1 Affected: 17.8.1a Affected: 17.9.1 Affected: 17.9.2 Affected: 17.9.1a Affected: 17.9.3 Affected: 17.9.2a Affected: 17.9.3a Affected: 17.9.4 Affected: 17.9.4a Affected: 17.11.1 Affected: 17.11.1a Affected: 17.12.1 Affected: 17.12.1a Affected: 17.12.2 Affected: 17.12.2a Affected: 17.11.99SW

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:o:cisco:ios_xe:16.3.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.3.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.3.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.3.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.3.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.3.5b:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.3.6:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.3.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.3.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.3.9:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.3.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.3.11:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.4.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.5.1b:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.6.5a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.6.9:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.6.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.9.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.6:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.5a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.5b:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.6a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.9:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.10:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.10a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:16.12.11:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.4a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.6:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.4b:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.4c:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.5a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.5b:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.7:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.8:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.3.8a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.4.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.4.2a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.5.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.5.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.6.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.6.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.6.3a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.6.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.6.5:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.6.6:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.6.6a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.6.5a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.7.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.7.1b:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.7.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.10.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.10.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.10.1b:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.8.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.9.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.9.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.9.3:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.9.2a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.9.3a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.9.4:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.9.4a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.11.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.11.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.12.1:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.12.1a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.12.2:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.12.2a:*:*:*:*:*:*:*",
              "cpe:2.3:o:cisco:ios_xe:17.11.99SW:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "ios_xe",
            "vendor": "cisco",
            "versions": [
              {
                "status": "affected",
                "version": "16.3.1"
              },
              {
                "status": "affected",
                "version": "16.3.2"
              },
              {
                "status": "affected",
                "version": "16.3.3"
              },
              {
                "status": "affected",
                "version": "16.3.1a"
              },
              {
                "status": "affected",
                "version": "16.3.4"
              },
              {
                "status": "affected",
                "version": "16.3.5"
              },
              {
                "status": "affected",
                "version": "16.3.5b"
              },
              {
                "status": "affected",
                "version": "16.3.6"
              },
              {
                "status": "affected",
                "version": "16.3.7"
              },
              {
                "status": "affected",
                "version": "16.3.8"
              },
              {
                "status": "affected",
                "version": "16.3.9"
              },
              {
                "status": "affected",
                "version": "16.3.10"
              },
              {
                "status": "affected",
                "version": "16.3.11"
              },
              {
                "status": "affected",
                "version": "16.4.1"
              },
              {
                "status": "affected",
                "version": "16.4.2"
              },
              {
                "status": "affected",
                "version": "16.4.3"
              },
              {
                "status": "affected",
                "version": "16.5.1"
              },
              {
                "status": "affected",
                "version": "16.5.1a"
              },
              {
                "status": "affected",
                "version": "16.5.1b"
              },
              {
                "status": "affected",
                "version": "16.5.2"
              },
              {
                "status": "affected",
                "version": "16.5.3"
              },
              {
                "status": "affected",
                "version": "16.6.1"
              },
              {
                "status": "affected",
                "version": "16.6.2"
              },
              {
                "status": "affected",
                "version": "16.6.3"
              },
              {
                "status": "affected",
                "version": "16.6.4"
              },
              {
                "status": "affected",
                "version": "16.6.5"
              },
              {
                "status": "affected",
                "version": "16.6.4a"
              },
              {
                "status": "affected",
                "version": "16.6.5a"
              },
              {
                "status": "affected",
                "version": "16.6.6"
              },
              {
                "status": "affected",
                "version": "16.6.7"
              },
              {
                "status": "affected",
                "version": "16.6.8"
              },
              {
                "status": "affected",
                "version": "16.6.9"
              },
              {
                "status": "affected",
                "version": "16.6.10"
              },
              {
                "status": "affected",
                "version": "16.7.1"
              },
              {
                "status": "affected",
                "version": "16.7.2"
              },
              {
                "status": "affected",
                "version": "16.7.3"
              },
              {
                "status": "affected",
                "version": "16.8.1"
              },
              {
                "status": "affected",
                "version": "16.8.1a"
              },
              {
                "status": "affected",
                "version": "16.8.1b"
              },
              {
                "status": "affected",
                "version": "16.8.1s"
              },
              {
                "status": "affected",
                "version": "16.8.1c"
              },
              {
                "status": "affected",
                "version": "16.8.2"
              },
              {
                "status": "affected",
                "version": "16.8.3"
              },
              {
                "status": "affected",
                "version": "16.9.1"
              },
              {
                "status": "affected",
                "version": "16.9.2"
              },
              {
                "status": "affected",
                "version": "16.9.1a"
              },
              {
                "status": "affected",
                "version": "16.9.1b"
              },
              {
                "status": "affected",
                "version": "16.9.1s"
              },
              {
                "status": "affected",
                "version": "16.9.3"
              },
              {
                "status": "affected",
                "version": "16.9.4"
              },
              {
                "status": "affected",
                "version": "16.9.3a"
              },
              {
                "status": "affected",
                "version": "16.9.5"
              },
              {
                "status": "affected",
                "version": "16.9.5f"
              },
              {
                "status": "affected",
                "version": "16.9.6"
              },
              {
                "status": "affected",
                "version": "16.9.7"
              },
              {
                "status": "affected",
                "version": "16.9.8"
              },
              {
                "status": "affected",
                "version": "16.10.1"
              },
              {
                "status": "affected",
                "version": "16.10.1a"
              },
              {
                "status": "affected",
                "version": "16.10.1b"
              },
              {
                "status": "affected",
                "version": "16.10.1s"
              },
              {
                "status": "affected",
                "version": "16.10.1e"
              },
              {
                "status": "affected",
                "version": "16.10.2"
              },
              {
                "status": "affected",
                "version": "16.10.3"
              },
              {
                "status": "affected",
                "version": "16.11.1"
              },
              {
                "status": "affected",
                "version": "16.11.1a"
              },
              {
                "status": "affected",
                "version": "16.11.1b"
              },
              {
                "status": "affected",
                "version": "16.11.2"
              },
              {
                "status": "affected",
                "version": "16.11.1s"
              },
              {
                "status": "affected",
                "version": "16.12.1"
              },
              {
                "status": "affected",
                "version": "16.12.1s"
              },
              {
                "status": "affected",
                "version": "16.12.1a"
              },
              {
                "status": "affected",
                "version": "16.12.1c"
              },
              {
                "status": "affected",
                "version": "16.12.2"
              },
              {
                "status": "affected",
                "version": "16.12.2a"
              },
              {
                "status": "affected",
                "version": "16.12.3"
              },
              {
                "status": "affected",
                "version": "16.12.8"
              },
              {
                "status": "affected",
                "version": "16.12.2s"
              },
              {
                "status": "affected",
                "version": "16.12.1t"
              },
              {
                "status": "affected",
                "version": "16.12.4"
              },
              {
                "status": "affected",
                "version": "16.12.3s"
              },
              {
                "status": "affected",
                "version": "16.12.3a"
              },
              {
                "status": "affected",
                "version": "16.12.4a"
              },
              {
                "status": "affected",
                "version": "16.12.5"
              },
              {
                "status": "affected",
                "version": "16.12.6"
              },
              {
                "status": "affected",
                "version": "16.12.5a"
              },
              {
                "status": "affected",
                "version": "16.12.5b"
              },
              {
                "status": "affected",
                "version": "16.12.6a"
              },
              {
                "status": "affected",
                "version": "16.12.7"
              },
              {
                "status": "affected",
                "version": "16.12.9"
              },
              {
                "status": "affected",
                "version": "16.12.10"
              },
              {
                "status": "affected",
                "version": "16.12.10a"
              },
              {
                "status": "affected",
                "version": "16.12.11"
              },
              {
                "status": "affected",
                "version": "17.1.1"
              },
              {
                "status": "affected",
                "version": "17.1.1a"
              },
              {
                "status": "affected",
                "version": "17.1.1s"
              },
              {
                "status": "affected",
                "version": "17.1.1t"
              },
              {
                "status": "affected",
                "version": "17.1.3"
              },
              {
                "status": "affected",
                "version": "17.2.1"
              },
              {
                "status": "affected",
                "version": "17.2.1r"
              },
              {
                "status": "affected",
                "version": "17.2.1a"
              },
              {
                "status": "affected",
                "version": "17.2.1v"
              },
              {
                "status": "affected",
                "version": "17.2.2"
              },
              {
                "status": "affected",
                "version": "17.2.3"
              },
              {
                "status": "affected",
                "version": "17.3.1"
              },
              {
                "status": "affected",
                "version": "17.3.2"
              },
              {
                "status": "affected",
                "version": "17.3.3"
              },
              {
                "status": "affected",
                "version": "17.3.1a"
              },
              {
                "status": "affected",
                "version": "17.3.2a"
              },
              {
                "status": "affected",
                "version": "17.3.4"
              },
              {
                "status": "affected",
                "version": "17.3.5"
              },
              {
                "status": "affected",
                "version": "17.3.4a"
              },
              {
                "status": "affected",
                "version": "17.3.6"
              },
              {
                "status": "affected",
                "version": "17.3.4b"
              },
              {
                "status": "affected",
                "version": "17.3.4c"
              },
              {
                "status": "affected",
                "version": "17.3.5a"
              },
              {
                "status": "affected",
                "version": "17.3.5b"
              },
              {
                "status": "affected",
                "version": "17.3.7"
              },
              {
                "status": "affected",
                "version": "17.3.8"
              },
              {
                "status": "affected",
                "version": "17.3.8a"
              },
              {
                "status": "affected",
                "version": "17.4.1"
              },
              {
                "status": "affected",
                "version": "17.4.2"
              },
              {
                "status": "affected",
                "version": "17.4.1a"
              },
              {
                "status": "affected",
                "version": "17.4.1b"
              },
              {
                "status": "affected",
                "version": "17.4.2a"
              },
              {
                "status": "affected",
                "version": "17.5.1"
              },
              {
                "status": "affected",
                "version": "17.5.1a"
              },
              {
                "status": "affected",
                "version": "17.6.1"
              },
              {
                "status": "affected",
                "version": "17.6.2"
              },
              {
                "status": "affected",
                "version": "17.6.1a"
              },
              {
                "status": "affected",
                "version": "17.6.3"
              },
              {
                "status": "affected",
                "version": "17.6.3a"
              },
              {
                "status": "affected",
                "version": "17.6.4"
              },
              {
                "status": "affected",
                "version": "17.6.5"
              },
              {
                "status": "affected",
                "version": "17.6.6"
              },
              {
                "status": "affected",
                "version": "17.6.6a"
              },
              {
                "status": "affected",
                "version": "17.6.5a"
              },
              {
                "status": "affected",
                "version": "17.7.1"
              },
              {
                "status": "affected",
                "version": "17.7.1a"
              },
              {
                "status": "affected",
                "version": "17.7.1b"
              },
              {
                "status": "affected",
                "version": "17.7.2"
              },
              {
                "status": "affected",
                "version": "17.10.1"
              },
              {
                "status": "affected",
                "version": "17.10.1a"
              },
              {
                "status": "affected",
                "version": "17.10.1b"
              },
              {
                "status": "affected",
                "version": "17.8.1"
              },
              {
                "status": "affected",
                "version": "17.8.1a"
              },
              {
                "status": "affected",
                "version": "17.9.1"
              },
              {
                "status": "affected",
                "version": "17.9.2"
              },
              {
                "status": "affected",
                "version": "17.9.1a"
              },
              {
                "status": "affected",
                "version": "17.9.3"
              },
              {
                "status": "affected",
                "version": "17.9.2a"
              },
              {
                "status": "affected",
                "version": "17.9.3a"
              },
              {
                "status": "affected",
                "version": "17.9.4"
              },
              {
                "status": "affected",
                "version": "17.9.4a"
              },
              {
                "status": "affected",
                "version": "17.11.1"
              },
              {
                "status": "affected",
                "version": "17.11.1a"
              },
              {
                "status": "affected",
                "version": "17.12.1"
              },
              {
                "status": "affected",
                "version": "17.12.1a"
              },
              {
                "status": "affected",
                "version": "17.12.2"
              },
              {
                "status": "affected",
                "version": "17.12.2a"
              },
              {
                "status": "affected",
                "version": "17.11.99SW"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-20316",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-29T17:11:12.713334Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-07-02T16:25:58.752Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-01T21:59:42.197Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "cisco-sa-dmi-acl-bypass-Xv8FO8Vz",
            "tags": [
              "x_transferred"
            ],
            "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dmi-acl-bypass-Xv8FO8Vz"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco IOS XE Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "16.3.1"
            },
            {
              "status": "affected",
              "version": "16.3.2"
            },
            {
              "status": "affected",
              "version": "16.3.3"
            },
            {
              "status": "affected",
              "version": "16.3.1a"
            },
            {
              "status": "affected",
              "version": "16.3.4"
            },
            {
              "status": "affected",
              "version": "16.3.5"
            },
            {
              "status": "affected",
              "version": "16.3.5b"
            },
            {
              "status": "affected",
              "version": "16.3.6"
            },
            {
              "status": "affected",
              "version": "16.3.7"
            },
            {
              "status": "affected",
              "version": "16.3.8"
            },
            {
              "status": "affected",
              "version": "16.3.9"
            },
            {
              "status": "affected",
              "version": "16.3.10"
            },
            {
              "status": "affected",
              "version": "16.3.11"
            },
            {
              "status": "affected",
              "version": "16.4.1"
            },
            {
              "status": "affected",
              "version": "16.4.2"
            },
            {
              "status": "affected",
              "version": "16.4.3"
            },
            {
              "status": "affected",
              "version": "16.5.1"
            },
            {
              "status": "affected",
              "version": "16.5.1a"
            },
            {
              "status": "affected",
              "version": "16.5.1b"
            },
            {
              "status": "affected",
              "version": "16.5.2"
            },
            {
              "status": "affected",
              "version": "16.5.3"
            },
            {
              "status": "affected",
              "version": "16.6.1"
            },
            {
              "status": "affected",
              "version": "16.6.2"
            },
            {
              "status": "affected",
              "version": "16.6.3"
            },
            {
              "status": "affected",
              "version": "16.6.4"
            },
            {
              "status": "affected",
              "version": "16.6.5"
            },
            {
              "status": "affected",
              "version": "16.6.4a"
            },
            {
              "status": "affected",
              "version": "16.6.5a"
            },
            {
              "status": "affected",
              "version": "16.6.6"
            },
            {
              "status": "affected",
              "version": "16.6.7"
            },
            {
              "status": "affected",
              "version": "16.6.8"
            },
            {
              "status": "affected",
              "version": "16.6.9"
            },
            {
              "status": "affected",
              "version": "16.6.10"
            },
            {
              "status": "affected",
              "version": "16.7.1"
            },
            {
              "status": "affected",
              "version": "16.7.2"
            },
            {
              "status": "affected",
              "version": "16.7.3"
            },
            {
              "status": "affected",
              "version": "16.8.1"
            },
            {
              "status": "affected",
              "version": "16.8.1a"
            },
            {
              "status": "affected",
              "version": "16.8.1b"
            },
            {
              "status": "affected",
              "version": "16.8.1s"
            },
            {
              "status": "affected",
              "version": "16.8.1c"
            },
            {
              "status": "affected",
              "version": "16.8.2"
            },
            {
              "status": "affected",
              "version": "16.8.3"
            },
            {
              "status": "affected",
              "version": "16.9.1"
            },
            {
              "status": "affected",
              "version": "16.9.2"
            },
            {
              "status": "affected",
              "version": "16.9.1a"
            },
            {
              "status": "affected",
              "version": "16.9.1b"
            },
            {
              "status": "affected",
              "version": "16.9.1s"
            },
            {
              "status": "affected",
              "version": "16.9.3"
            },
            {
              "status": "affected",
              "version": "16.9.4"
            },
            {
              "status": "affected",
              "version": "16.9.3a"
            },
            {
              "status": "affected",
              "version": "16.9.5"
            },
            {
              "status": "affected",
              "version": "16.9.5f"
            },
            {
              "status": "affected",
              "version": "16.9.6"
            },
            {
              "status": "affected",
              "version": "16.9.7"
            },
            {
              "status": "affected",
              "version": "16.9.8"
            },
            {
              "status": "affected",
              "version": "16.10.1"
            },
            {
              "status": "affected",
              "version": "16.10.1a"
            },
            {
              "status": "affected",
              "version": "16.10.1b"
            },
            {
              "status": "affected",
              "version": "16.10.1s"
            },
            {
              "status": "affected",
              "version": "16.10.1e"
            },
            {
              "status": "affected",
              "version": "16.10.2"
            },
            {
              "status": "affected",
              "version": "16.10.3"
            },
            {
              "status": "affected",
              "version": "16.11.1"
            },
            {
              "status": "affected",
              "version": "16.11.1a"
            },
            {
              "status": "affected",
              "version": "16.11.1b"
            },
            {
              "status": "affected",
              "version": "16.11.2"
            },
            {
              "status": "affected",
              "version": "16.11.1s"
            },
            {
              "status": "affected",
              "version": "16.12.1"
            },
            {
              "status": "affected",
              "version": "16.12.1s"
            },
            {
              "status": "affected",
              "version": "16.12.1a"
            },
            {
              "status": "affected",
              "version": "16.12.1c"
            },
            {
              "status": "affected",
              "version": "16.12.2"
            },
            {
              "status": "affected",
              "version": "16.12.2a"
            },
            {
              "status": "affected",
              "version": "16.12.3"
            },
            {
              "status": "affected",
              "version": "16.12.8"
            },
            {
              "status": "affected",
              "version": "16.12.2s"
            },
            {
              "status": "affected",
              "version": "16.12.1t"
            },
            {
              "status": "affected",
              "version": "16.12.4"
            },
            {
              "status": "affected",
              "version": "16.12.3s"
            },
            {
              "status": "affected",
              "version": "16.12.3a"
            },
            {
              "status": "affected",
              "version": "16.12.4a"
            },
            {
              "status": "affected",
              "version": "16.12.5"
            },
            {
              "status": "affected",
              "version": "16.12.6"
            },
            {
              "status": "affected",
              "version": "16.12.5a"
            },
            {
              "status": "affected",
              "version": "16.12.5b"
            },
            {
              "status": "affected",
              "version": "16.12.6a"
            },
            {
              "status": "affected",
              "version": "16.12.7"
            },
            {
              "status": "affected",
              "version": "16.12.9"
            },
            {
              "status": "affected",
              "version": "16.12.10"
            },
            {
              "status": "affected",
              "version": "16.12.10a"
            },
            {
              "status": "affected",
              "version": "16.12.11"
            },
            {
              "status": "affected",
              "version": "17.1.1"
            },
            {
              "status": "affected",
              "version": "17.1.1a"
            },
            {
              "status": "affected",
              "version": "17.1.1s"
            },
            {
              "status": "affected",
              "version": "17.1.1t"
            },
            {
              "status": "affected",
              "version": "17.1.3"
            },
            {
              "status": "affected",
              "version": "17.2.1"
            },
            {
              "status": "affected",
              "version": "17.2.1r"
            },
            {
              "status": "affected",
              "version": "17.2.1a"
            },
            {
              "status": "affected",
              "version": "17.2.1v"
            },
            {
              "status": "affected",
              "version": "17.2.2"
            },
            {
              "status": "affected",
              "version": "17.2.3"
            },
            {
              "status": "affected",
              "version": "17.3.1"
            },
            {
              "status": "affected",
              "version": "17.3.2"
            },
            {
              "status": "affected",
              "version": "17.3.3"
            },
            {
              "status": "affected",
              "version": "17.3.1a"
            },
            {
              "status": "affected",
              "version": "17.3.2a"
            },
            {
              "status": "affected",
              "version": "17.3.4"
            },
            {
              "status": "affected",
              "version": "17.3.5"
            },
            {
              "status": "affected",
              "version": "17.3.4a"
            },
            {
              "status": "affected",
              "version": "17.3.6"
            },
            {
              "status": "affected",
              "version": "17.3.4b"
            },
            {
              "status": "affected",
              "version": "17.3.4c"
            },
            {
              "status": "affected",
              "version": "17.3.5a"
            },
            {
              "status": "affected",
              "version": "17.3.5b"
            },
            {
              "status": "affected",
              "version": "17.3.7"
            },
            {
              "status": "affected",
              "version": "17.3.8"
            },
            {
              "status": "affected",
              "version": "17.3.8a"
            },
            {
              "status": "affected",
              "version": "17.4.1"
            },
            {
              "status": "affected",
              "version": "17.4.2"
            },
            {
              "status": "affected",
              "version": "17.4.1a"
            },
            {
              "status": "affected",
              "version": "17.4.1b"
            },
            {
              "status": "affected",
              "version": "17.4.2a"
            },
            {
              "status": "affected",
              "version": "17.5.1"
            },
            {
              "status": "affected",
              "version": "17.5.1a"
            },
            {
              "status": "affected",
              "version": "17.6.1"
            },
            {
              "status": "affected",
              "version": "17.6.2"
            },
            {
              "status": "affected",
              "version": "17.6.1a"
            },
            {
              "status": "affected",
              "version": "17.6.3"
            },
            {
              "status": "affected",
              "version": "17.6.3a"
            },
            {
              "status": "affected",
              "version": "17.6.4"
            },
            {
              "status": "affected",
              "version": "17.6.5"
            },
            {
              "status": "affected",
              "version": "17.6.6"
            },
            {
              "status": "affected",
              "version": "17.6.6a"
            },
            {
              "status": "affected",
              "version": "17.6.5a"
            },
            {
              "status": "affected",
              "version": "17.7.1"
            },
            {
              "status": "affected",
              "version": "17.7.1a"
            },
            {
              "status": "affected",
              "version": "17.7.1b"
            },
            {
              "status": "affected",
              "version": "17.7.2"
            },
            {
              "status": "affected",
              "version": "17.10.1"
            },
            {
              "status": "affected",
              "version": "17.10.1a"
            },
            {
              "status": "affected",
              "version": "17.10.1b"
            },
            {
              "status": "affected",
              "version": "17.8.1"
            },
            {
              "status": "affected",
              "version": "17.8.1a"
            },
            {
              "status": "affected",
              "version": "17.9.1"
            },
            {
              "status": "affected",
              "version": "17.9.2"
            },
            {
              "status": "affected",
              "version": "17.9.1a"
            },
            {
              "status": "affected",
              "version": "17.9.3"
            },
            {
              "status": "affected",
              "version": "17.9.2a"
            },
            {
              "status": "affected",
              "version": "17.9.3a"
            },
            {
              "status": "affected",
              "version": "17.9.4"
            },
            {
              "status": "affected",
              "version": "17.9.4a"
            },
            {
              "status": "affected",
              "version": "17.11.1"
            },
            {
              "status": "affected",
              "version": "17.11.1a"
            },
            {
              "status": "affected",
              "version": "17.12.1"
            },
            {
              "status": "affected",
              "version": "17.12.1a"
            },
            {
              "status": "affected",
              "version": "17.12.2"
            },
            {
              "status": "affected",
              "version": "17.12.2a"
            },
            {
              "status": "affected",
              "version": "17.11.99SW"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access resources that should have been protected by a configured IPv4 access control list (ACL).\r\n\r This vulnerability is due to improper handling of error conditions when a successfully authorized device administrator updates an IPv4 ACL using the NETCONF or RESTCONF protocol, and the update would reorder access control entries (ACEs) in the updated ACL. An attacker could exploit this vulnerability by accessing resources that should have been protected across an affected device."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-390",
              "description": "Detection of Error Condition Without Action",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-27T16:49:03.113Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-dmi-acl-bypass-Xv8FO8Vz",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dmi-acl-bypass-Xv8FO8Vz"
        }
      ],
      "source": {
        "advisory": "cisco-sa-dmi-acl-bypass-Xv8FO8Vz",
        "defects": [
          "CSCwf92391",
          "CSCwe12169"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2024-20316",
    "datePublished": "2024-03-27T16:49:03.113Z",
    "dateReserved": "2023-11-08T15:08:07.632Z",
    "dateUpdated": "2024-08-01T21:59:42.197Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

BDU:2024-02559

CVE-2024-20316 (GCVE-0-2024-20316)

Tags

Sightings

Nomenclature