cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt: Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Inter-VM Channel Command Injection Vulnerability
First published: Wed Jun 03 2020(Updated: )
A vulnerability in the implementation of the inter-VM channel of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, adjacent attacker to execute arbitrary shell commands on the Virtual Device Server (VDS) of an affected device. The vulnerability is due to insufficient validation of signaling packets that are destined to VDS. An attacker could exploit this vulnerability by sending malicious packets to an affected device. A successful exploit could allow the attacker to execute arbitrary commands in the context of the Linux shell of VDS with the privileges of the root user. Because the device is designed on a hypervisor architecture, exploitation of a vulnerability that affects the inter-VM channel may lead to a complete system compromise. For more information about this vulnerability, see the Details section of this advisory. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt This advisory is part of the June 3, 2020, release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication, which includes 23 Cisco Security Advisories that describe 25 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: June 2020 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication.
Credit: by X.B. the Cisco Advanced Security Initiatives GroupE.I. Cisco PSIRT
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Puppet Cisco IOS | ||
| Cisco 809 Industrial Integrated Services Router Firmware | ||
| Cisco 829 Industrial Integrated Services Router Firmware | ||
| Cisco 1000 Series Connected Grid Router |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt?
The severity of cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt is rated high due to potential remote code execution by unauthenticated attackers.
How do I fix cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt?
To fix cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt, apply the latest security updates provided by Cisco for affected IOS software and router models.
Who is affected by cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt?
Cisco 809 and 829 Industrial Integrated Services Routers, along with Cisco 1000 Series Connected Grid Routers, are affected by cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt.
What type of attack does cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt exploit?
cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt exploits vulnerabilities in the inter-VM channel implementation that could allow remote code execution.
Is authentication required to exploit cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt?
No, cisco-sa-ios-iot-udp-vds-inj-f2D5Jzrt can be exploited by unauthenticated, adjacent attackers.
- agent/type
- agent/author
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/severity
- agent/title
- agent/weakness
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/puppet cisco ios
- canonical/cisco 809 industrial integrated services router firmware
- canonical/cisco 829 industrial integrated services router firmware
- canonical/cisco 1000 series connected grid router