Multiple vulnerabilities in Cisco IOS XE Software

Published: 2020-10-01

Risk	Medium
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2020-3141 CVE-2020-3425
CWE-ID	CWE-264
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	Cisco IOS XE Operating systems & Components / Operating system
Vendor	Cisco Systems, Inc

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU47238

Risk: Medium

CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2020-3141

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to a lack of input and validation checking mechanisms for certain HTTP requests to APIs on an affected device. A remote authenticated attacker can send a specially crafted HTTP request and execute CLI commands or configuration changes as if they were an administrative user.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Cisco IOS XE: 17.2.1 - 17.4.1

External links

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-webui-priv-esc-K8zvEWM

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU47239