Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-3208

A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) could allow an authenticated, local attacker to boot a malicious software image on an affected device. The vulnerability is due to insufficient access restrictions on the area of code that manages the image verification feature. An attacker could exploit this vulnerability by first authenticating to the targeted device and then logging in to the Virtual Device Server (VDS) of an affected device. The attacker could then, from the VDS shell, disable Cisco IOS Software integrity (image) verification. A successful exploit could allow the attacker to boot a malicious Cisco IOS Software image on the targeted device. To exploit this vulnerability, the attacker must have valid user credentials at privilege level 15.

Published

2020-06-03T18:15:18.870

Last Modified

2024-11-21T05:30:33.767

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-264
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios 12.2\(60\)ez16 Yes
Operating System cisco ios 15.0\(2\)sg11a Yes
Operating System cisco ios 15.3\(3\)jaa1 Yes
Operating System cisco ios 15.3\(3\)jpj Yes
Operating System cisco ios 15.5\(3\)m0a Yes
Operating System cisco ios 15.5\(3\)m1 Yes
Operating System cisco ios 15.5\(3\)m2 Yes
Operating System cisco ios 15.5\(3\)m2a Yes
Operating System cisco ios 15.5\(3\)m3 Yes
Operating System cisco ios 15.5\(3\)m4 Yes
Operating System cisco ios 15.5\(3\)m4a Yes
Operating System cisco ios 15.5\(3\)m5 Yes
Operating System cisco ios 15.5\(3\)m6 Yes
Operating System cisco ios 15.5\(3\)m6a Yes
Operating System cisco ios 15.5\(3\)m7 Yes
Operating System cisco ios 15.5\(3\)m8 Yes
Operating System cisco ios 15.5\(3\)m9 Yes
Operating System cisco ios 15.5\(3\)m10 Yes
Operating System cisco ios 15.5\(3\)m11 Yes
Operating System cisco ios 15.6\(1\)t Yes
Operating System cisco ios 15.6\(1\)t0a Yes
Operating System cisco ios 15.6\(1\)t1 Yes
Operating System cisco ios 15.6\(1\)t2 Yes
Operating System cisco ios 15.6\(1\)t3 Yes
Operating System cisco ios 15.6\(3\)m Yes
Operating System cisco ios 15.6\(3\)m0a Yes
Operating System cisco ios 15.6\(3\)m1 Yes
Operating System cisco ios 15.6\(3\)m1b Yes
Operating System cisco ios 15.6\(3\)m2 Yes
Operating System cisco ios 15.6\(3\)m3 Yes
Operating System cisco ios 15.6\(3\)m3a Yes
Operating System cisco ios 15.6\(3\)m4 Yes
Operating System cisco ios 15.6\(3\)m5 Yes
Operating System cisco ios 15.6\(3\)m6 Yes
Operating System cisco ios 15.6\(3\)m6a Yes
Operating System cisco ios 15.6\(3\)m6b Yes
Operating System cisco ios 15.6\(3\)m7 Yes
Operating System cisco ios 15.6\(3\)m8 Yes
Operating System cisco ios 15.6\(3\)m9 Yes
Operating System cisco ios 15.7\(3\)m Yes
Operating System cisco ios 15.7\(3\)m1 Yes
Operating System cisco ios 15.7\(3\)m2 Yes
Operating System cisco ios 15.7\(3\)m3 Yes
Operating System cisco ios 15.7\(3\)m4 Yes
Operating System cisco ios 15.7\(3\)m4a Yes
Operating System cisco ios 15.7\(3\)m4b Yes
Operating System cisco ios 15.7\(3\)m5 Yes
Operating System cisco ios 15.7\(3\)m6 Yes
Operating System cisco ios 15.7\(3\)m7 Yes
Operating System cisco ios 15.8\(3\)m Yes
Operating System cisco ios 15.8\(3\)m0a Yes
Operating System cisco ios 15.8\(3\)m1 Yes
Operating System cisco ios 15.8\(3\)m2 Yes
Operating System cisco ios 15.8\(3\)m2a Yes
Operating System cisco ios 15.8\(3\)m3 Yes
Operating System cisco ios 15.8\(3\)m4 Yes
Operating System cisco ios 15.8\(3\)m5 Yes
Hardware cisco 1120 - No
Hardware cisco 1240 * No
Hardware cisco 809 * No
Hardware cisco 829 * No
References