PT-2020-2678 · Cisco · Cisco Ios

Published 2020-06-03 · Updated 2020-06-10 · CVE-2020-3210

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) (affected versions not specified)

Description A vulnerability in the CLI parsers of Cisco IOS Software could allow an authenticated, local attacker to execute arbitrary shell commands on the Virtual Device Server (VDS) of an affected device. The attacker must have valid user credentials at privilege level 15. The vulnerability is due to insufficient validation of arguments that are passed to specific VDS-related CLI commands. An attacker could exploit this vulnerability by authenticating to the targeted device and including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands in the context of the Linux shell of VDS with the privileges of the root user.

Recommendations For Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000), update to a version that includes the software updates released by Cisco to address this vulnerability. As a temporary workaround, consider restricting access to the VDS-related CLI commands to minimize the risk of exploitation.

Fix

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

BDU:2020-02745

CVE-2020-3210

Affected Products

Cisco Ios

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-3210 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3210 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-iot-vds-cmd-inj-VfJtqGhE · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-02745 · Security Note