CVE-2020-3416 — Exposed Dangerous Method or Function in Cisco IOS XE Software

CWE-749 — Exposed Dangerous Method or FunctionCWE-94 — Code Injection4 documents4 sources
Severity
6.7MEDIUMNVD
EPSS
0.2%
top 58.46%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco IOS XE SoftwareCisco IOS XE
Timeline
PublishedSep 24
Latest updateMay 24

Description

Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cisco ASR 900 Series Aggregation Services Routers with a Route Switch Processor 3 (RSP3) installed could allow an authenticated, local attacker with high privileges to execute persistent code at bootup and break the chain of trust. These vulnerabilities are due to incorrect validations by boot scripts when specific ROM monitor (ROMMON) variables are set. An attacker could exploit …

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

▶NVDcisco/ios_xe16.12.1, 17.2+1

🔴Vulnerability Details

2
GHSA
GHSA-6v8x-547f-7r6f: Multiple vulnerabilities in the initialization routines that are executed during bootup of Cisco IOS XE Software for Cisco ASR 900 Series Aggregation↗2022-05-24
▶
CVEList
Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities↗2020-09-24
▶

📋Vendor Advisories

1
Cisco
Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities↗2020-09-24
▶
CVE-2020-3416 — Exposed Dangerous Method or Function | cvebase