Multiple vulnerabilities in Cisco IOS XE Software



Published: 2020-10-01
Risk Medium
Patch available YES
Number of vulnerabilities 2
CVE ID CVE-2020-3141
CVE-2020-3425
CWE ID CWE-264
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe
Cisco IOS XE
Operating systems & Components / Operating system

Vendor Cisco Systems, Inc

Security Advisory

1) Permissions, Privileges, and Access Controls

Risk: Medium

CVSSv3: 7.7 [CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C] [PCI]

CVE-ID: CVE-2020-3141

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to a lack of input and validation checking mechanisms for certain HTTP requests to APIs on an affected device. A remote authenticated attacker can send a specially crafted HTTP request and execute CLI commands or configuration changes as if they were an administrative user.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Cisco IOS XE: 17.2.1, 17.3, 17.4.1

CPE External links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-webui-priv-esc-K8zvEWM

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Permissions, Privileges, and Access Controls

Risk: Medium

CVSSv3: 7.7 [CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C] [PCI]

CVE-ID: CVE-2020-3425

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a remote attacker to escalate privileges on the system.

The vulnerability exists due to insufficient data protection of sensitive information. A remote authenticated attacker can send a specially crafted API call and gain elevated privileges on the target system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Cisco IOS XE: 16.9.4

CPE External links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-webui-priv-esc-K8zvEWM

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.