PT-2020-2683 · Cisco · Cisco Ios

Published 2020-06-03 · Updated 2021-10-26 · CVE-2020-3258

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) (affected versions not specified)

Description The issue is related to a buffer overflow in memory, which could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. Multiple vulnerabilities in Cisco IOS Software could allow an unauthenticated, remote attacker or an authenticated, local attacker to execute arbitrary code on an affected system or cause an affected system to crash and reload.

Recommendations For Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000), update to a version that includes the software updates released by Cisco to address these vulnerabilities. At the moment, there is no information about specific versions that contain a fix for this vulnerability.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2020-02750

CVE-2020-3258

Affected Products

Cisco Ios

References · 4

• https://bdu.fstec.ru/vul/2020-02750 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-3258 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-iot-rce-xYRSeMNH · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3258 · Vendor Advisory