PT-2020-4424 · Cisco+1 · Cisco Ios Xe+1

Victor Kamensky

·

Published

2020-09-24

·

Updated

2024-12-19

·

CVE-2020-3393

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software (affected versions not specified)
Description: A vulnerability in the application-hosting subsystem could allow an authenticated, local attacker to elevate privileges to root on an affected device. The attacker could execute IOS XE commands outside the application-hosting subsystem Docker container as well as on the underlying Linux operating system. These commands could be run as the root user. The vulnerability is due to a combination of two factors: (a) incomplete input validation of the user payload of CLI commands, and (b) improper role-based access control (RBAC) when commands are issued at the command line within the application-hosting subsystem. An attacker could exploit this vulnerability by using a CLI command with crafted user input. A successful exploit could allow the lower-privileged attacker to execute arbitrary CLI commands with root privileges. The attacker would need valid user credentials to exploit this vulnerability.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

RCE

Weakness Enumeration

CWE-269CWE-20

Related Identifiers

BDU:2020-04953
CVE-2020-3393

Affected Products

Cisco Ios Xe
Linux