PT-2020-2673 · Cisco · Cisco Ios Xe

Published 2020-06-03 · Updated 2020-06-10 · CVE-2020-3224

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description The issue is related to insufficient input validation of specific HTTP requests in the web-based user interface of Cisco IOS XE Software. This could allow an authenticated, remote attacker with read-only privileges to inject IOS commands to an affected device. The injected commands should require a higher privilege level in order to be executed. An attacker could exploit this by sending crafted HTTP requests to a specific web UI endpoint on an affected device. A successful exploit could allow the attacker to alter the configuration of the device or cause a denial of service (DoS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Command Injection

Using Hardcoded Credentials

OS Command Injection

Weakness Enumeration

CWE-77

CWE-798

CWE-78

Related Identifiers

BDU:2020-02740

BDU:2020-02885

CVE-2020-3224

Affected Products

Cisco Ios Xe

References · 8

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-zM283Zdw · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02740 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-3224 · Security Note
• https://bdu.fstec.ru/vul/2020-02885 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3224 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-zM283Zdw · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-iot-vds-cred-uPMp9zbY · Note
• https://t.me/cvenotify/4145 · Telegram Post