CVE-2021-34696

A vulnerability in the access control list (ACL) programming of Cisco ASR 900 and ASR 920 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect programming of hardware when an ACL is configured using a method other than the configuration CLI. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device.

• CWE-284

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr900acl-UeEyCxkvVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr900acl-UeEyCxkvVendor Advisory

Published

Sep 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34689iDrive RemotePC before 7.6.48 on Windows allows information …5.5
• CVE-2021-3469Foreman versions before 2.3.4 and before 2.4.0 is affected b…5.4
• CVE-2021-34690iDrive RemotePC before 7.6.48 on Windows allows authenticati…9.8
• CVE-2021-34691iDrive RemotePC before 4.0.1 on Linux allows denial of servi…7.5
• CVE-2021-34692iDrive RemotePC before 7.6.48 on Windows allows privilege es…7.8
• CVE-2021-34693net/can/bcm.c in the Linux kernel through 5.12.10 allows loc…5.5
• CVE-2021-34697A vulnerability in the Protection Against Distributed Denial…8.6
• CVE-2021-34698A vulnerability in the proxy service of Cisco AsyncOS for Ci…7.5
• CVE-2021-34699A vulnerability in the TrustSec CLI parser of Cisco IOS and …7.7
• CVE-2021-3470A heap overflow issue was found in Redis in versions before …5.3
• CVE-2021-34700A vulnerability in the CLI interface of Cisco SD-WAN vManage…5.5
• CVE-2021-34701A vulnerability in the web-based management interface of Cis…4.3