CVE-2020-3234: Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Static Credentials Vulnerability

Published Jun 3, 2020

Updated

A vulnerability in the virtual console authentication of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an authenticated but low-privileged, local attacker to log in to the Virtual Device Server (VDS) of an affected device by using a set of default credentials. The vulnerability is due to the presence of weak, hard-coded credentials. An attacker could exploit this vulnerability by authenticating to the targeted device and then connecting to VDS through the device’s virtual console by using the static credentials. A successful exploit could allow the attacker to access the Linux shell of VDS as the root user.

Affected Software

91 affected components

Cisco IOS=12.2\(60\)ez16

Cisco IOS=15.0\(2\)sg11a

Cisco IOS=15.3\(3\)jaa1

Cisco IOS=15.3\(3\)jpj

Cisco IOS=15.4\(1\)cg

Cisco IOS=15.4\(2\)cg

Cisco IOS=15.4\(3\)m

Cisco IOS=15.4\(3\)m1

Cisco IOS=15.4\(3\)m2

Cisco IOS=15.4\(3\)m3

Cisco IOS=15.4\(3\)m4

Cisco IOS=15.4\(3\)m5

Cisco IOS=15.4\(3\)m6

Cisco IOS=15.4\(3\)m6a

Cisco IOS=15.4\(3\)m7

Cisco IOS=15.4\(3\)m8

Cisco IOS=15.4\(3\)m9

Cisco IOS=15.4\(3\)m10

Cisco IOS=15.5\(1\)t

Cisco IOS=15.5\(1\)t2

Cisco IOS=15.5\(1\)t3

Cisco IOS=15.5\(1\)t4

Cisco IOS=15.5\(2\)t

Cisco IOS=15.5\(2\)t1

Cisco IOS=15.5\(2\)t2

Cisco IOS=15.5\(2\)t3

Cisco IOS=15.5\(2\)t4

Cisco IOS=15.5\(3\)m

Cisco IOS=15.5\(3\)m0a

Cisco IOS=15.5\(3\)m1

Cisco IOS=15.5\(3\)m2

Cisco IOS=15.5\(3\)m2a

Cisco IOS=15.5\(3\)m3

Cisco IOS=15.5\(3\)m4

Cisco IOS=15.5\(3\)m4a

Cisco IOS=15.5\(3\)m5

Cisco IOS=15.5\(3\)m6

Cisco IOS=15.5\(3\)m6a

Cisco IOS=15.5\(3\)m7

Cisco IOS=15.5\(3\)m8

Cisco IOS=15.5\(3\)m9

Cisco IOS=15.5\(3\)m10

Cisco IOS=15.5\(3\)m11

Cisco IOS=15.6\(1\)t

Cisco IOS=15.6\(1\)t0a

Cisco IOS=15.6\(1\)t1

Cisco IOS=15.6\(1\)t2

Cisco IOS=15.6\(1\)t3

Cisco IOS=15.6\(2\)t

Cisco IOS=15.6\(2\)t1

Cisco IOS=15.6\(2\)t2

Cisco IOS=15.6\(2\)t3

Cisco IOS=15.6\(3\)m

Cisco IOS=15.6\(3\)m0a

Cisco IOS=15.6\(3\)m1

Cisco IOS=15.6\(3\)m1b

Cisco IOS=15.6\(3\)m2

Cisco IOS=15.6\(3\)m3

Cisco IOS=15.6\(3\)m3a

Cisco IOS=15.6\(3\)m4

Cisco IOS=15.6\(3\)m5

Cisco IOS=15.6\(3\)m6

Cisco IOS=15.6\(3\)m6a

Cisco IOS=15.6\(3\)m6b

Cisco IOS=15.6\(3\)m7

Cisco IOS=15.6\(3\)m8

Cisco IOS=15.6\(3\)m9

Cisco IOS=15.7\(3\)m

Cisco IOS=15.7\(3\)m1

Cisco IOS=15.7\(3\)m2

Cisco IOS=15.7\(3\)m3

Cisco IOS=15.7\(3\)m4

Cisco IOS=15.7\(3\)m4a

Cisco IOS=15.7\(3\)m4b

Cisco IOS=15.7\(3\)m5

Cisco IOS=15.7\(3\)m6

Cisco IOS=15.7\(3\)m7

Cisco IOS=15.8\(3\)m

Cisco IOS=15.8\(3\)m0a

Cisco IOS=15.8\(3\)m1

Cisco IOS=15.8\(3\)m2

Cisco IOS=15.8\(3\)m2a

Cisco IOS=15.8\(3\)m3

Cisco IOS=15.8\(3\)m3a

Cisco IOS=15.8\(3\)m3b

Cisco IOS=15.8\(3\)m4

Cisco IOS=15.8\(3\)m5

Cisco 1120

Cisco 1240

Cisco 809

Cisco 829

Remediation

Patch Available

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-iot-vds-cred-uPMp9zbY

Event History

Jun 3, 2020

CVE Published

via MITRE·05:55 PM

Data Sourced

via MITRE·05:55 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-3234?

The severity of CVE-2020-3234 is classified as medium.

Who is affected by CVE-2020-3234?

CVE-2020-3234 affects Cisco IOS Software versions specifically on Cisco 809 and 829 Industrial Integrated Services Routers and Cisco 1000 Series Connected Grid Routers.

What is the potential impact of CVE-2020-3234?

CVE-2020-3234 could allow an authenticated low-privileged local attacker to log in to the affected systems.

How do I fix CVE-2020-3234?

To fix CVE-2020-3234, users should upgrade to the patched versions of Cisco IOS Software as recommended by Cisco.

Is there a workaround for CVE-2020-3234?

There are no known workarounds for CVE-2020-3234; upgrading to a secure version is the recommended action.