CVE-2019-15998 Cisco IOS XR Software NETCONF Over Secure Shell ACL Bypass Vulnerability

Medium 5.3 Published 26 Nov 2019 Updated 19 Nov 2024

Attackers can bypass ACL restrictions to connect to NETCONF over SSH on Cisco IOS XR devices, requiring valid credentials for access.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-15998?

CVE-2019-15998 is a medium-severity missing authorization vulnerability in Cisco Ios Xr, published on 26 Nov 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the access-control logic of the NETCONF over Secure Shell (SSH) of Cisco IOS XR Software may allow connections despite an access control list (ACL) that is configured to deny access to the NETCONF over SSH of an affected device. The vulnerability is due to a missing check in the NETCONF over SSH access control list (ACL). An attacker could exploit this vulnerability by connecting to an affected device using NETCONF over SSH. A successful exploit could allow the attacker to connect to the device on the NETCONF port. Valid credentials are required to access the device. This vulnerability does not affect connections to the default SSH process on the device.

Weakness: CWE-862, CWE-284

Which versions are affected by CVE-2019-15998?

It affects 1 product.

Products include Cisco Ios Xr.

How do I fix CVE-2019-15998?

No fix has been published for CVE-2019-15998 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2019-15998 being exploited?

There is no known exploitation of CVE-2019-15998 in the wild and no public exploit code.

All Cisco Ios Xr vulnerabilities

Sources

Also known as GHSA-w36j-549f-hchr.