First published: Wed Jun 03 2020(Updated: )
A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a user with root-level privileges. The vulnerability is due to insufficient validation of user-supplied content. This vulnerability could allow an attacker to load malicious software onto an affected device.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS XE | =16.11.1 | |
Cisco IOS XE | =16.11.1a | |
Cisco IOS XE | =16.11.1b | |
Cisco IOS XE | =16.11.1c | |
Cisco IOS XE | =16.11.1s | |
Cisco IOS XE | =16.11.2 | |
Cisco IOS XE | =16.12.1 | |
Cisco IOS XE | =16.12.1a | |
Cisco IOS XE | =16.12.1c | |
Cisco IOS XE | =16.12.1s | |
Cisco IOS XE | =16.12.1t | |
Cisco IOS XE | =16.12.1w | |
Cisco IOS XE | =16.12.1x | |
Cisco 1100 Integrated Services Router | ||
Cisco 1101 Integrated Services Router | ||
Cisco 1109 Integrated Services Router | ||
Cisco 1111x Integrated Services Router | ||
Cisco 111x Integrated Services Router | ||
Cisco 1120 Integrated Services Router | ||
Cisco 1160 Integrated Services Router | ||
Cisco 422 Integrated Services Router | ||
Cisco 4331 Integrated Services Router | ||
Cisco 4431 Integrated Services Router | ||
Cisco 4461 Integrated Services Router | ||
Cisco Asr 1000-x | ||
Cisco Asr 1001 | ||
Cisco Asr 1001-x | ||
Cisco Asr 1002 | ||
Cisco Asr 1002-x | ||
Cisco Asr 1004 | ||
Cisco Asr 1006 | ||
Cisco Asr 1013 | ||
Cisco Catalyst 9800-40 | ||
Cisco Catalyst 9800-80 | ||
Cisco Catalyst 9800-cl | ||
Cisco Catalyst 9800-l | ||
Cisco Catalyst 9800-l-c | ||
Cisco Catalyst 9800-l-f | ||
Cisco Catalyst C9200-24p | ||
Cisco Catalyst C9200-24t | ||
Cisco Catalyst C9200-48p | ||
Cisco Catalyst C9200-48t | ||
Cisco Catalyst C9200l-24p-4g | ||
Cisco Catalyst C9200l-24p-4x | ||
Cisco Catalyst C9200l-24pxg-2y | ||
Cisco Catalyst C9200l-24pxg-4x | ||
Cisco Catalyst C9200l-24t-4g | ||
Cisco Catalyst C9200l-24t-4x | ||
Cisco Catalyst C9200l-48p-4g | ||
Cisco Catalyst C9200l-48p-4x | ||
Cisco Catalyst C9200l-48pxg-2y | ||
Cisco Catalyst C9200l-48pxg-4x | ||
Cisco Catalyst C9200l-48t-4g | ||
Cisco Catalyst C9200l-48t-4x | ||
Cisco Catalyst C9300-24p | ||
Cisco Catalyst C9300-24s | ||
Cisco Catalyst C9300-24t | ||
Cisco Catalyst C9300-24u | ||
Cisco Catalyst C9300-24ux | ||
Cisco Catalyst C9300-48p | ||
Cisco Catalyst C9300-48s | ||
Cisco Catalyst C9300-48t | ||
Cisco Catalyst C9300-48u | ||
Cisco Catalyst C9300-48un | ||
Cisco Catalyst C9300-48uxm | ||
Cisco Catalyst C9300l-24p-4g | ||
Cisco Catalyst C9300l-24p-4x | ||
Cisco Catalyst C9300l-24t-4g | ||
Cisco Catalyst C9300l-24t-4x | ||
Cisco Catalyst C9300l-48p-4g | ||
Cisco Catalyst C9300l-48p-4x | ||
Cisco Catalyst C9300l-48t-4g | ||
Cisco Catalyst C9300l-48t-4x | ||
Cisco Catalyst C9404r | ||
Cisco Catalyst C9407r | ||
Cisco Catalyst C9410r | ||
Cisco Catalyst C9500-12q | ||
Cisco Catalyst C9500-16x | ||
Cisco Catalyst C9500-24q | ||
Cisco Catalyst C9500-24y4c | ||
Cisco Catalyst C9500-32c | ||
Cisco Catalyst C9500-32qc | ||
Cisco Catalyst C9500-40x | ||
Cisco Catalyst C9500-48y4c | ||
Cisco Nexus 1000v | ||
Cisco Ws-c3650-12x48uq | ||
Cisco Ws-c3650-12x48ur | ||
Cisco Ws-c3650-12x48uz | ||
Cisco Ws-c3650-24pd | ||
Cisco Ws-c3650-24pdm | ||
Cisco Ws-c3650-24ps | ||
Cisco Ws-c3650-24td | ||
Cisco Ws-c3650-24ts | ||
Cisco Ws-c3650-48fd | ||
Cisco Ws-c3650-48fq | ||
Cisco Ws-c3650-48fqm | ||
Cisco Ws-c3650-48fs | ||
Cisco Ws-c3650-48pd | ||
Cisco Ws-c3650-48pq | ||
Cisco Ws-c3650-48ps | ||
Cisco Ws-c3650-48td | ||
Cisco Ws-c3650-48tq | ||
Cisco Ws-c3650-48ts | ||
Cisco Ws-c3650-8x24uq | ||
Cisco Ws-c3850-12s | ||
Cisco Ws-c3850-12x48u | ||
Cisco Ws-c3850-12xs | ||
Cisco Ws-c3850-24p | ||
Cisco Ws-c3850-24s | ||
Cisco Ws-c3850-24t | ||
Cisco Ws-c3850-24u | ||
Cisco Ws-c3850-24xs | ||
Cisco Ws-c3850-24xu | ||
Cisco Ws-c3850-48f | ||
Cisco Ws-c3850-48p | ||
Cisco Ws-c3850-48t | ||
Cisco Ws-c3850-48u | ||
Cisco Ws-c3850-48xs |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.