7.8

CVE-2020-3473

Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerability

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups within the source code. An attacker could exploit this vulnerability by first authenticating to the local CLI shell on the device and using the CLI command to bypass the task group–based checks. A successful exploit could allow the attacker to elevate privileges and perform actions on the device without authorization checks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xr Version >= 5.0.0 < 7.0.12
   Cisco ≫ 8201 Version -
   Cisco ≫ 8202 Version -
   Cisco ≫ 8808 Version -
   Cisco ≫ 8812 Version -
   Cisco ≫ 8818 Version -
Cisco ≫ Ios Xr Version >= 7.1.0 < 7.2.1
   Cisco ≫ 8201 Version -
   Cisco ≫ 8202 Version -
   Cisco ≫ 8808 Version -
   Cisco ≫ 8812 Version -
   Cisco ≫ 8818 Version -
Cisco ≫ Ios Xr Version >= 5.0.0 < 6.6.3
   Cisco ≫ Ios Xrv 9000 Version -
   Cisco ≫ Ncs 540 Version -
   Cisco ≫ Ncs 5501 Version -
   Cisco ≫ Ncs 5501-se Version -
   Cisco ≫ Ncs 5502 Version -
   Cisco ≫ Ncs 5502-se Version -
   Cisco ≫ Ncs 5508 Version -
   Cisco ≫ Ncs 5516 Version -
   Cisco ≫ Ncs 560 Version -
   Cisco ≫ Ncs 6000 Version -
   Cisco ≫ Ncs 6008 Version -
Cisco ≫ Ios Xr Version >= 7.0.0 < 7.0.2
   Cisco ≫ Ios Xrv 9000 Version -
   Cisco ≫ Ncs 540 Version -
   Cisco ≫ Ncs 5501 Version -
   Cisco ≫ Ncs 5501-se Version -
   Cisco ≫ Ncs 5502 Version -
   Cisco ≫ Ncs 5502-se Version -
   Cisco ≫ Ncs 5508 Version -
   Cisco ≫ Ncs 5516 Version -
   Cisco ≫ Ncs 560 Version -
   Cisco ≫ Ncs 6000 Version -
   Cisco ≫ Ncs 6008 Version -
Cisco ≫ Ios Xr Version >= 7.1.0 < 7.1.1
   Cisco ≫ Ios Xrv 9000 Version -
   Cisco ≫ Ncs 540 Version -
   Cisco ≫ Ncs 5501 Version -
   Cisco ≫ Ncs 5501-se Version -
   Cisco ≫ Ncs 5502 Version -
   Cisco ≫ Ncs 5502-se Version -
   Cisco ≫ Ncs 5508 Version -
   Cisco ≫ Ncs 5516 Version -
   Cisco ≫ Ncs 560 Version -
   Cisco ≫ Ncs 6000 Version -
   Cisco ≫ Ncs 6008 Version -
Cisco ≫ Ios Xr Version >= 5.0.0 < 6.5.29
   Cisco ≫ Ncs 4009 Version -
   Cisco ≫ Ncs 4016 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.38% 0.3
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Cisco PSIRT 7.8 1.8 5.9
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-863 Incorrect Authorization

The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-LJtNFjeN
Vendor Advisory