What is CVE-2020-3216?

CVE-2020-3216 is a medium-severity vulnerability in Cisco Ios Xe Sd-wan Software, classified under Improper Authentication. CVSS score: 6.8/10. Published 2020-06-03.

How severe is CVE-2020-3216?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Auth bypass in Cisco Ios Xe Sd-wan Software

CVE-2020-3216

A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected…

Vulnerability class: Broken Authentication

EPSS: 0.004 (35.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cisco Ios Xe Sd-wan Software — versions n/a
Cisco Ios_xe_sd-wan — versions 16.9.0, 16.9.1, 16.9.2

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2020-3216?: CVE-2020-3216 is a medium-severity vulnerability in Cisco Ios Xe Sd-wan Software, classified under Improper Authentication. CVSS score: 6.8/10. Published 2020-06-03.
How severe is CVE-2020-3216?: Medium severity. CVSS v3 base score is 6.8 out of 10.