Vulnerability · Published Jun 3, 2020 · Assigned by cisco
CVE-2020-3214Cisco IOS XE Software Privilege Escalation Vulnerability
Medium 6.7
In plain English
A medium-severity security flaw in Cisco IOS XE Software 16.11.1 from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Severity (CVSS 3.0)6.7Medium
Exploit odds (30 days)0.4%top 70.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a user with root-level privileges. The vulnerability is due to insufficient validation of user-supplied content. This vulnerability could allow an attacker to load malicious software onto an affected device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco IOS XE Software 16.11.1 | n/a |
Weakness: CWE-264 · Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- 20200603 Cisco IOS XE Software Privilege Escalation Vulnerability vendor-advisory, x_refsource_CISCO