CVE-2020-3284: Cisco IOS XR Software Enhanced Preboot eXecution Environment Unsigned Code Execution Vulnerability

First published: Fri Nov 06 2020(Updated: )

A vulnerability in the enhanced Preboot eXecution Environment (PXE) boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS and runs over the management interface of hardware platforms that are running Cisco IOS XR Software only. The vulnerability exists because internal commands that are issued when the PXE network boot process is loading a software image are not properly verified. An attacker could exploit this vulnerability by compromising the PXE boot server and replacing a valid software image with a malicious one. Alternatively, the attacker could impersonate the PXE boot server and send a PXE boot reply with a malicious file. A successful exploit could allow the attacker to execute unsigned code on the affected device. Note: To fix this vulnerability, both the Cisco IOS XR Software and the BIOS must be upgraded. The BIOS code is included in Cisco IOS XR Software but might require additional installation steps. For further information, see the Fixed Software section of this advisory.

Credit: ykramarz@cisco.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/type
• agent/weakness
• agent/severity
• agent/references
• agent/author
• agent/title
• agent/description
• agent/first-publish-date
• agent/event
• collector/mitre-cve
• source/MITRE
• agent/last-modified-date
• agent/source
• agent/softwarecombine
• agent/tags
• collector/nvd-index
• agent/software-canonical-lookup-request
• vendor/cisco
• canonical/cisco a9k-rsp880-se
• canonical/cisco ios xrv 9000
• canonical/cisco a9k-rsp880-se firmware
• canonical/cisco a9k-rsp880-tr
• canonical/cisco a9k-rsp880-tr firmware
• canonical/cisco a99-rsp-se
• canonical/cisco a99-rp2-se firmware
• canonical/cisco a99-rp2-tr
• canonical/cisco a99-rp2-tr firmware
• canonical/cisco a99-rsp-se firmware
• canonical/cisco a99-rsp-tr
• canonical/cisco a99-rsp-tr firmware
• canonical/cisco a9k rsp880 lt se
• canonical/cisco a9k-rsp880-lt-se firmware
• canonical/cisco a9k-rsp880-lt-tr
• canonical/cisco a9k-rsp880-lt-tr firmware
• canonical/cisco asr 9901-rp firmware
• canonical/cisco a99-rp3-se firmware
• canonical/cisco a99-rp3-tr firmware
• canonical/cisco a9k-rsp5-se firmware
• canonical/cisco a9k-rsp5-tr
• canonical/cisco a9k-rsp5-tr firmware
• canonical/cisco ncs 1001
• canonical/cisco ncs 1002
• canonical/cisco ncs 1004 firmware
• canonical/cisco n540-12z20g-sys-a/d firmware
• canonical/cisco ncs 540 series
• canonical/cisco n540-24z8q2c-m firmware
• canonical/cisco ncs 540-28z4c-sys-a
• canonical/cisco ncs 540-x series firmware
• canonical/cisco n540-acc-sys
• canonical/cisco n540x-16z4g8q2c-a/d firmware
• canonical/cisco ncs 540x-16z4g8q2c-a/d
• canonical/cisco n540x-12z16g-sys-a/d firmware
• canonical/cisco n540x-12z16g-sys-a/d
• canonical/cisco n560-4-sys
• version/cisco ios xrv 9000/7.0.0
• canonical/cisco ncs 560-4
• canonical/cisco n560-7-sys firmware
• canonical/cisco ncs 560
• canonical/cisco ncs 5001 firmware
• canonical/cisco ncs 5002
• canonical/cisco ncs 5011
• canonical/cisco nc55-rp firmware
• canonical/cisco nc55-rp-e firmware
• canonical/cisco ncs 5501
• canonical/cisco ncs 5501-se
• canonical/cisco ncs 5502-se firmware
• canonical/cisco ncs 5502
• canonical/cisco ncs 5502-se
• canonical/cisco ncs 55a2 mod s
• canonical/cisco ncs-55a2-mod-hd-s
• canonical/cisco ncs 55a2 mod hx-s firmware
• canonical/cisco ncs 55a2 mod se-s firmware
• canonical/cisco ncs-55a2-mod-se-h-s firmware
• canonical/cisco ncs 55a1-36h-se
• canonical/cisco ncs-55a1-36h-se-s firmware
• canonical/cisco ncs 55a1
• canonical/cisco ncs 55a1-48q6h firmware
• canonical/cisco ncs 55 a1 48 q6 h
• canonical/cisco ncs-55a1-24q6h-s firmware