cisco-sa-caf-file-mVnPqKW9: Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability

Published Jun 3, 2020
·
Updated

A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, local attacker to overwrite arbitrary files in the virtual instance that is running on the affected device. The vulnerability is due to insufficient path restriction enforcement. An attacker could exploit this vulnerability by including a crafted file in an application package. An exploit could allow the attacker to overwrite files.

Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-caf-file-mVnPqKW9

Affected Software

1 affected componentFixes available
Cisco Platform=IR510 WPAN Industrial Routers, <IR510 Operating System Release 6.1.27, =IOS XE devices:, <Cisco IOS XE Software Release 17.2(1), >=IC3000 Industrial Compute Gateway, <=IE 4000 Series Switches, <Cisco IOS Software Release 15.2.(7a)E0b, =CGR1000 Compute Module, <IOx image for CGR1000 Release 1.10.0.6, =800 Series ISRs, <Not fixed; IOx has reached end of life on the Cisco 800 Series ISRs., =800 Series Industrial ISRs, <Cisco IOS Software Release 15.9(3)M
IR510 Operating System Release 6.1.27Cisco IOS XE Software Release 17.2(1)Cisco IOS Software Release 15.2.(7a)E0bIOx image for CGR1000 Release 1.10.0.6Not fixed; IOx has reached end of life on the Cisco 800 Series ISRs.Cisco IOS Software Release 15.9(3)M

Event History

Jun 3, 2020
Advisory Published
via Cisco·04:00 PM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the vulnerability ID of this Cisco IOx vulnerability?

The vulnerability ID is cisco-sa-caf-file-mVnPqKW9.

2

What is the severity level of cisco-sa-caf-file-mVnPqKW9 vulnerability?

The severity level of cisco-sa-caf-file-mVnPqKW9 vulnerability is medium.

3

How does the cisco-sa-caf-file-mVnPqKW9 vulnerability affect Cisco devices?

The cisco-sa-caf-file-mVnPqKW9 vulnerability allows an authenticated, local attacker to overwrite arbitrary files in the virtual instance running on the affected device.

4

Which Cisco devices are affected by the cisco-sa-caf-file-mVnPqKW9 vulnerability?

The following Cisco devices are affected by the cisco-sa-caf-file-mVnPqKW9 vulnerability: IR510 Operating System Release 6.1.27, Cisco IOS XE Software Release 17.2(1), Cisco IOS Software Release 15.2.(7a)E0b, IOx image for CGR1000 Release 1.10.0.6, Not fixed; IOx has reached end of life on the Cisco 800 Series ISRs, Cisco IOS Software Release 15.9(3)M.

5

Is there a fix available for the cisco-sa-caf-file-mVnPqKW9 vulnerability?

No, there is no fix available for the cisco-sa-caf-file-mVnPqKW9 vulnerability as IOx has reached end of life on the Cisco 800 Series ISRs.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203