PT-2020-2791 · Cisco · Cisco 829+4

Published 2020-06-03 · Updated 2021-10-26 · CVE-2020-3199

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) running Cisco IOS Software (affected versions not specified)

Description The issue is related to insufficient input validation in the Cisco IOx application environment, which could allow a remote attacker to elevate privileges, execute arbitrary code, or cause a denial of service (DoS) condition on an affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2020-02886

CVE-2020-3199

Affected Products

Cisco 1000 Series Connected Grid Routers

Cisco 809

Cisco 829

Cisco Ios

Cisco Iox

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-3199 · Security Note
• https://bdu.fstec.ru/vul/2020-02886 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-iot-gos-vuln-s9qS8kYL · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3199 · Vendor Advisory