CVE-2019-15998

A vulnerability in the access-control logic of the NETCONF over Secure Shell (SSH) of Cisco IOS XR Software may allow connections despite an access control list (ACL) that is configured to deny access to the NETCONF over SSH of an affected device. The vulnerability is due to a missing check in the NETCONF over SSH access control list (ACL). An attacker could exploit this vulnerability by connecting to an affected device using NETCONF over SSH. A successful exploit could allow the attacker to connect to the device on the NETCONF port. Valid credentials are required to access the device. This vulnerability does not affect connections to the default SSH process on the device.

Link	Resource
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191120-iosxr-ssh-bypass	Vendor Advisory

Configuration 1

---

Published : 2019-11-26 04:15

Updated : 2020-10-16 01:32

---

NVD link : CVE-2019-15998

Mitre link : CVE-2019-15998

Asr 9001

Asr 9006

Asr 9010

Asr 9901

Asr 9904

Asr 9912

Asr 9922

Cisco

Ios Xr

CWE-862