CVE-2020-3215: Cisco IOS XE Software Privilege Escalation Vulnerability

First published: Wed Jun 03 2020(Updated: )

A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local attacker to gain root-level privileges on an affected device. The vulnerability is due to insufficient validation of a user-supplied open virtual appliance (OVA). An attacker could exploit this vulnerability by installing a malicious OVA on an affected device.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco IOS XE	=3.7.0e
Cisco IOS XE	=3.7.1e
Cisco IOS XE	=3.7.2e
Cisco IOS XE	=3.7.3e
Cisco IOS XE	=3.7.4e
Cisco IOS XE	=3.7.5e
Cisco IOS XE	=3.8.0e
Cisco IOS XE	=3.8.0s
Cisco IOS XE	=3.8.1e
Cisco IOS XE	=3.8.1s
Cisco IOS XE	=3.8.2e
Cisco IOS XE	=3.8.2s
Cisco IOS XE	=3.8.3e
Cisco IOS XE	=3.8.4e
Cisco IOS XE	=3.8.5ae
Cisco IOS XE	=3.8.5e
Cisco IOS XE	=3.8.6e
Cisco IOS XE	=3.8.7e
Cisco IOS XE	=3.8.8e
Cisco IOS XE	=3.9.0as
Cisco IOS XE	=3.9.0e
Cisco IOS XE	=3.9.0s
Cisco IOS XE	=3.9.1as
Cisco IOS XE	=3.9.1e
Cisco IOS XE	=3.9.1s
Cisco IOS XE	=3.9.2be
Cisco IOS XE	=3.9.2e
Cisco IOS XE	=3.9.2s
Cisco IOS XE	=3.10.0ce
Cisco IOS XE	=3.10.0e
Cisco IOS XE	=3.10.0s
Cisco IOS XE	=3.10.1ae
Cisco IOS XE	=3.10.1e
Cisco IOS XE	=3.10.1s
Cisco IOS XE	=3.10.1se
Cisco IOS XE	=3.10.2as
Cisco IOS XE	=3.10.2e
Cisco IOS XE	=3.10.2s
Cisco IOS XE	=3.10.2ts
Cisco IOS XE	=3.10.3e
Cisco IOS XE	=3.10.3s
Cisco IOS XE	=3.10.4s
Cisco IOS XE	=3.10.5s
Cisco IOS XE	=3.10.6s
Cisco IOS XE	=3.10.7s
Cisco IOS XE	=3.10.8as
Cisco IOS XE	=3.10.8s
Cisco IOS XE	=3.10.9s
Cisco IOS XE	=3.10.10s
Cisco IOS XE	=3.11.0e
Cisco IOS XE	=3.11.0s
Cisco IOS XE	=3.11.1s
Cisco IOS XE	=3.11.2s
Cisco IOS XE	=3.11.3e
Cisco IOS XE	=3.11.3s
Cisco IOS XE	=3.11.4s
Cisco IOS XE	=3.12.0as
Cisco IOS XE	=3.12.0s
Cisco IOS XE	=3.12.1s
Cisco IOS XE	=3.12.2s
Cisco IOS XE	=3.12.3s
Cisco IOS XE	=3.12.4s
Cisco IOS XE	=3.13.0as
Cisco IOS XE	=3.13.0s
Cisco IOS XE	=3.13.1s
Cisco IOS XE	=3.13.2as
Cisco IOS XE	=3.13.2s
Cisco IOS XE	=3.13.3s
Cisco IOS XE	=3.13.4s
Cisco IOS XE	=3.13.5as
Cisco IOS XE	=3.13.5s
Cisco IOS XE	=3.13.6as
Cisco IOS XE	=3.13.6bs
Cisco IOS XE	=3.13.6s
Cisco IOS XE	=3.13.7as
Cisco IOS XE	=3.13.7s
Cisco IOS XE	=3.13.8s
Cisco IOS XE	=3.13.9s
Cisco IOS XE	=3.13.10s
Cisco IOS XE	=3.14.0s
Cisco IOS XE	=3.14.1s
Cisco IOS XE	=3.14.2s
Cisco IOS XE	=3.14.3s
Cisco IOS XE	=3.14.4s
Cisco IOS XE	=3.15.0s
Cisco IOS XE	=3.15.1cs
Cisco IOS XE	=3.15.1s
Cisco IOS XE	=3.15.2s
Cisco IOS XE	=3.15.3s
Cisco IOS XE	=3.15.4s
Cisco IOS XE	=3.16.0as
Cisco IOS XE	=3.16.0bs
Cisco IOS XE	=3.16.0cs
Cisco IOS XE	=3.16.0s
Cisco IOS XE	=3.16.1as
Cisco IOS XE	=3.16.1s
Cisco IOS XE	=3.16.2as
Cisco IOS XE	=3.16.2bs
Cisco IOS XE	=3.16.2s
Cisco IOS XE	=3.16.3as
Cisco IOS XE	=3.16.3s
Cisco IOS XE	=3.16.4as
Cisco IOS XE	=3.16.4bs
Cisco IOS XE	=3.16.4cs
Cisco IOS XE	=3.16.4ds
Cisco IOS XE	=3.16.4es
Cisco IOS XE	=3.16.4gs
Cisco IOS XE	=3.16.4s
Cisco IOS XE	=3.16.5as
Cisco IOS XE	=3.16.5bs
Cisco IOS XE	=3.16.5s
Cisco IOS XE	=3.16.6bs
Cisco IOS XE	=3.16.6s
Cisco IOS XE	=3.16.7as
Cisco IOS XE	=3.16.7bs
Cisco IOS XE	=3.16.7s
Cisco IOS XE	=3.16.8s
Cisco IOS XE	=3.16.9s
Cisco IOS XE	=3.17.0s
Cisco IOS XE	=3.17.1as
Cisco IOS XE	=3.17.1s
Cisco IOS XE	=3.17.2s
Cisco IOS XE	=3.17.3s
Cisco IOS XE	=3.17.4s
Cisco IOS XE	=3.18.0as
Cisco IOS XE	=3.18.0s
Cisco IOS XE	=3.18.0sp
Cisco IOS XE	=3.18.1asp
Cisco IOS XE	=3.18.1bsp
Cisco IOS XE	=3.18.1csp
Cisco IOS XE	=3.18.1gsp
Cisco IOS XE	=3.18.1hsp
Cisco IOS XE	=3.18.1isp
Cisco IOS XE	=3.18.1s
Cisco IOS XE	=3.18.1sp
Cisco IOS XE	=3.18.2asp
Cisco IOS XE	=3.18.2s
Cisco IOS XE	=3.18.2sp
Cisco IOS XE	=3.18.3asp
Cisco IOS XE	=3.18.3bsp
Cisco IOS XE	=3.18.3s
Cisco IOS XE	=3.18.3sp
Cisco IOS XE	=3.18.4s
Cisco IOS XE	=3.18.4sp
Cisco IOS XE	=3.18.5sp
Cisco IOS XE	=3.18.6sp
Cisco IOS XE	=16.1.1
Cisco IOS XE	=16.1.2
Cisco IOS XE	=16.1.3
Cisco IOS XE	=16.2.1
Cisco IOS XE	=16.2.2
Cisco IOS XE	=16.3.1
Cisco IOS XE	=16.3.1a
Cisco IOS XE	=16.3.2
Cisco IOS XE	=16.3.3
Cisco IOS XE	=16.3.4
Cisco IOS XE	=16.3.5
Cisco IOS XE	=16.3.5b
Cisco IOS XE	=16.3.6
Cisco IOS XE	=16.3.7
Cisco IOS XE	=16.3.8
Cisco IOS XE	=16.3.9
Cisco IOS XE	=16.4.1
Cisco IOS XE	=16.4.2
Cisco IOS XE	=16.4.3
Cisco IOS XE	=16.5.1
Cisco IOS XE	=16.5.1a
Cisco IOS XE	=16.5.1b
Cisco IOS XE	=16.5.2
Cisco IOS XE	=16.5.3
Cisco IOS XE	=16.6.1
Cisco IOS XE	=16.6.2
Cisco IOS XE	=16.6.3
Cisco IOS XE	=16.6.4
Cisco IOS XE	=16.6.4a
Cisco IOS XE	=16.6.4s
Cisco IOS XE	=16.6.5
Cisco IOS XE	=16.6.5a
Cisco IOS XE	=16.6.5b
Cisco IOS XE	=16.6.6
Cisco IOS XE	=16.7.1
Cisco IOS XE	=16.7.1a
Cisco IOS XE	=16.7.1b
Cisco IOS XE	=16.7.2
Cisco IOS XE	=16.7.3
Cisco IOS XE	=16.7.4
Cisco IOS XE	=16.8.1
Cisco IOS XE	=16.8.1a
Cisco IOS XE	=16.8.1b
Cisco IOS XE	=16.8.1c
Cisco IOS XE	=16.8.1d
Cisco IOS XE	=16.8.1e
Cisco IOS XE	=16.8.1s
Cisco IOS XE	=16.8.2
Cisco IOS XE	=16.8.3
Cisco IOS XE	=16.9.1
Cisco IOS XE	=16.9.1a
Cisco IOS XE	=16.9.1b
Cisco IOS XE	=16.9.1c
Cisco IOS XE	=16.9.1d
Cisco IOS XE	=16.9.1s
Cisco IOS XE	=16.9.2
Cisco IOS XE	=16.9.2a
Cisco IOS XE	=16.9.2s
Cisco IOS XE	=16.9.3
Cisco IOS XE	=16.9.3a
Cisco IOS XE	=16.9.3h
Cisco IOS XE	=16.9.3s
Cisco IOS XE	=16.10.1
Cisco IOS XE	=16.10.1a
Cisco IOS XE	=16.10.1b
Cisco IOS XE	=16.10.1c
Cisco IOS XE	=16.10.1d
Cisco IOS XE	=16.10.1e
Cisco IOS XE	=16.10.1f
Cisco IOS XE	=16.10.1g
Cisco IOS XE	=16.10.1s
Cisco IOS XE	=16.10.2
Cisco IOS XE	=16.11.1
Cisco IOS XE	=16.11.1a
Cisco IOS XE	=16.11.1b
Cisco IOS XE	=16.11.1c
Cisco IOS XE	=16.11.1s
Cisco IOS XE	=16.12.1y

Never miss a vulnerability like this again

Reference Links

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-priv-esc1-OKMKFRhV

collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/references
agent/severity
agent/weakness
agent/title
agent/author
agent/tags
agent/description
agent/first-publish-date
agent/event
vendor/cisco
canonical/cisco ios xe
version/cisco ios xe/3.7.0e
version/cisco ios xe/3.7.1e
version/cisco ios xe/3.7.2e
version/cisco ios xe/3.7.3e
version/cisco ios xe/3.7.4e
version/cisco ios xe/3.7.5e
version/cisco ios xe/3.8.0e
version/cisco ios xe/3.8.0s
version/cisco ios xe/3.8.1e
version/cisco ios xe/3.8.1s
version/cisco ios xe/3.8.2e
version/cisco ios xe/3.8.2s
version/cisco ios xe/3.8.3e
version/cisco ios xe/3.8.4e
version/cisco ios xe/3.8.5ae
version/cisco ios xe/3.8.5e
version/cisco ios xe/3.8.6e
version/cisco ios xe/3.8.7e
version/cisco ios xe/3.8.8e
version/cisco ios xe/3.9.0as
version/cisco ios xe/3.9.0e
version/cisco ios xe/3.9.0s
version/cisco ios xe/3.9.1as
version/cisco ios xe/3.9.1e
version/cisco ios xe/3.9.1s
version/cisco ios xe/3.9.2be
version/cisco ios xe/3.9.2e
version/cisco ios xe/3.9.2s
version/cisco ios xe/3.10.0ce
version/cisco ios xe/3.10.0e
version/cisco ios xe/3.10.0s
version/cisco ios xe/3.10.1ae
version/cisco ios xe/3.10.1e
version/cisco ios xe/3.10.1s
version/cisco ios xe/3.10.1se
version/cisco ios xe/3.10.2as
version/cisco ios xe/3.10.2e
version/cisco ios xe/3.10.2s
version/cisco ios xe/3.10.2ts
version/cisco ios xe/3.10.3e
version/cisco ios xe/3.10.3s
version/cisco ios xe/3.10.4s
version/cisco ios xe/3.10.5s
version/cisco ios xe/3.10.6s
version/cisco ios xe/3.10.7s
version/cisco ios xe/3.10.8as
version/cisco ios xe/3.10.8s
version/cisco ios xe/3.10.9s
version/cisco ios xe/3.10.10s
version/cisco ios xe/3.11.0e
version/cisco ios xe/3.11.0s
version/cisco ios xe/3.11.1s
version/cisco ios xe/3.11.2s
version/cisco ios xe/3.11.3e
version/cisco ios xe/3.11.3s
version/cisco ios xe/3.11.4s
version/cisco ios xe/3.12.0as
version/cisco ios xe/3.12.0s
version/cisco ios xe/3.12.1s
version/cisco ios xe/3.12.2s
version/cisco ios xe/3.12.3s
version/cisco ios xe/3.12.4s
version/cisco ios xe/3.13.0as
version/cisco ios xe/3.13.0s
version/cisco ios xe/3.13.1s
version/cisco ios xe/3.13.2as
version/cisco ios xe/3.13.2s
version/cisco ios xe/3.13.3s
version/cisco ios xe/3.13.4s
version/cisco ios xe/3.13.5as
version/cisco ios xe/3.13.5s
version/cisco ios xe/3.13.6as
version/cisco ios xe/3.13.6bs
version/cisco ios xe/3.13.6s
version/cisco ios xe/3.13.7as
version/cisco ios xe/3.13.7s
version/cisco ios xe/3.13.8s
version/cisco ios xe/3.13.9s
version/cisco ios xe/3.13.10s
version/cisco ios xe/3.14.0s
version/cisco ios xe/3.14.1s
version/cisco ios xe/3.14.2s
version/cisco ios xe/3.14.3s
version/cisco ios xe/3.14.4s
version/cisco ios xe/3.15.0s
version/cisco ios xe/3.15.1cs
version/cisco ios xe/3.15.1s
version/cisco ios xe/3.15.2s
version/cisco ios xe/3.15.3s
version/cisco ios xe/3.15.4s
version/cisco ios xe/3.16.0as
version/cisco ios xe/3.16.0bs
version/cisco ios xe/3.16.0cs
version/cisco ios xe/3.16.0s
version/cisco ios xe/3.16.1as
version/cisco ios xe/3.16.1s
version/cisco ios xe/3.16.2as
version/cisco ios xe/3.16.2bs
version/cisco ios xe/3.16.2s
version/cisco ios xe/3.16.3as
version/cisco ios xe/3.16.3s
version/cisco ios xe/3.16.4as
version/cisco ios xe/3.16.4bs
version/cisco ios xe/3.16.4cs
version/cisco ios xe/3.16.4ds
version/cisco ios xe/3.16.4es
version/cisco ios xe/3.16.4gs
version/cisco ios xe/3.16.4s
version/cisco ios xe/3.16.5as
version/cisco ios xe/3.16.5bs
version/cisco ios xe/3.16.5s
version/cisco ios xe/3.16.6bs
version/cisco ios xe/3.16.6s
version/cisco ios xe/3.16.7as
version/cisco ios xe/3.16.7bs
version/cisco ios xe/3.16.7s
version/cisco ios xe/3.16.8s
version/cisco ios xe/3.16.9s
version/cisco ios xe/3.17.0s
version/cisco ios xe/3.17.1as
version/cisco ios xe/3.17.1s
version/cisco ios xe/3.17.2s
version/cisco ios xe/3.17.3s
version/cisco ios xe/3.17.4s
version/cisco ios xe/3.18.0as
version/cisco ios xe/3.18.0s
version/cisco ios xe/3.18.0sp
version/cisco ios xe/3.18.1asp
version/cisco ios xe/3.18.1bsp
version/cisco ios xe/3.18.1csp
version/cisco ios xe/3.18.1gsp
version/cisco ios xe/3.18.1hsp
version/cisco ios xe/3.18.1isp
version/cisco ios xe/3.18.1s
version/cisco ios xe/3.18.1sp
version/cisco ios xe/3.18.2asp
version/cisco ios xe/3.18.2s
version/cisco ios xe/3.18.2sp
version/cisco ios xe/3.18.3asp
version/cisco ios xe/3.18.3bsp
version/cisco ios xe/3.18.3s
version/cisco ios xe/3.18.3sp
version/cisco ios xe/3.18.4s
version/cisco ios xe/3.18.4sp
version/cisco ios xe/3.18.5sp
version/cisco ios xe/3.18.6sp
version/cisco ios xe/16.1.1
version/cisco ios xe/16.1.2
version/cisco ios xe/16.1.3
version/cisco ios xe/16.2.1
version/cisco ios xe/16.2.2
version/cisco ios xe/16.3.1
version/cisco ios xe/16.3.1a
version/cisco ios xe/16.3.2
version/cisco ios xe/16.3.3
version/cisco ios xe/16.3.4
version/cisco ios xe/16.3.5
version/cisco ios xe/16.3.5b
version/cisco ios xe/16.3.6
version/cisco ios xe/16.3.7
version/cisco ios xe/16.3.8
version/cisco ios xe/16.3.9
version/cisco ios xe/16.4.1
version/cisco ios xe/16.4.2
version/cisco ios xe/16.4.3
version/cisco ios xe/16.5.1
version/cisco ios xe/16.5.1a
version/cisco ios xe/16.5.1b
version/cisco ios xe/16.5.2
version/cisco ios xe/16.5.3
version/cisco ios xe/16.6.1
version/cisco ios xe/16.6.2
version/cisco ios xe/16.6.3
version/cisco ios xe/16.6.4
version/cisco ios xe/16.6.4a
version/cisco ios xe/16.6.4s
version/cisco ios xe/16.6.5
version/cisco ios xe/16.6.5a
version/cisco ios xe/16.6.5b
version/cisco ios xe/16.6.6
version/cisco ios xe/16.7.1
version/cisco ios xe/16.7.1a
version/cisco ios xe/16.7.1b
version/cisco ios xe/16.7.2
version/cisco ios xe/16.7.3
version/cisco ios xe/16.7.4
version/cisco ios xe/16.8.1
version/cisco ios xe/16.8.1a
version/cisco ios xe/16.8.1b
version/cisco ios xe/16.8.1c
version/cisco ios xe/16.8.1d
version/cisco ios xe/16.8.1e
version/cisco ios xe/16.8.1s
version/cisco ios xe/16.8.2
version/cisco ios xe/16.8.3
version/cisco ios xe/16.9.1
version/cisco ios xe/16.9.1a
version/cisco ios xe/16.9.1b
version/cisco ios xe/16.9.1c
version/cisco ios xe/16.9.1d
version/cisco ios xe/16.9.1s
version/cisco ios xe/16.9.2
version/cisco ios xe/16.9.2a
version/cisco ios xe/16.9.2s
version/cisco ios xe/16.9.3
version/cisco ios xe/16.9.3a
version/cisco ios xe/16.9.3h
version/cisco ios xe/16.9.3s
version/cisco ios xe/16.10.1
version/cisco ios xe/16.10.1a
version/cisco ios xe/16.10.1b
version/cisco ios xe/16.10.1c
version/cisco ios xe/16.10.1d
version/cisco ios xe/16.10.1e
version/cisco ios xe/16.10.1f
version/cisco ios xe/16.10.1g
version/cisco ios xe/16.10.1s
version/cisco ios xe/16.10.2
version/cisco ios xe/16.11.1
version/cisco ios xe/16.11.1a
version/cisco ios xe/16.11.1b
version/cisco ios xe/16.11.1c
version/cisco ios xe/16.11.1s
version/cisco ios xe/16.12.1y

CVE-2020-3215: Cisco IOS XE Software Privilege Escalation Vulnerability

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact