CVE-2024-20322

Summary

CVE-2024-20322 is a vulnerability affecting the access control list (ACL) processing on Pseudowire interfaces in the ingress direction of Cisco IOS XR Software. This issue arises from improper assignment of lookup keys to internal interface contexts, enabling an unauthenticated, remote attacker to bypass a configured ACL. The exploitation of this vulnerability allows an attacker to access resources behind the affected device that were intended to be protected, potentially leading to significant security risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.