CVE-2023-20191

A vulnerability in the access control list (ACL) processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incomplete support for this feature. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device. There are workarounds that address this vulnerability. This advisory is part of the September 2023 release of the Cisco IOS XR Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: September 2023 Semiannual Cisco IOS XR Software Security Advisory Bundled Publication .

• CWE-284
• CWE-863

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnx-acl-PyzDkeYFVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnx-acl-PyzDkeYFVendor Advisory

Published

Sep 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20186A vulnerability in the Authentication, Authorization, and Ac…9.1
• CVE-2023-20187A vulnerability in the Multicast Leaf Recycle Elimination (m…7.5
• CVE-2023-20188A vulnerability in the web-based management interface of Cis…4.8
• CVE-2023-20189Multiple vulnerabilities in the web-based user interface of …9.8
• CVE-2023-2019A flaw was found in the Linux kernel's netdevsim device driv…4.4
• CVE-2023-20190A vulnerability in the classic access control list (ACL) com…5.3
• CVE-2023-20192Multiple vulnerabilities in Cisco Expressway Series and Cisc…7.7
• CVE-2023-20193A vulnerability in the Embedded Service Router (ESR) of Cisc…6.7
• CVE-2023-20194A vulnerability in the ERS API of Cisco ISE could allow an a…4.9
• CVE-2023-20195Two vulnerabilities in Cisco ISE could allow an authenticate…7.2
• CVE-2023-20196Two vulnerabilities in Cisco ISE could allow an authenticate…7.2
• CVE-2023-20197A vulnerability in the filesystem image parser for Hierarchi…7.5