RCE in Cisco iOS Xe Software 16.11.1
CVE-2020-3224
A vulnerability in the web-based user interface (web UI) of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to inject IOS commands to an affected device. The injected commands should require a higher privilege level in order to be executed. The vulnerability is due to insufficient input validation of specific HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to a specific web UI endpoint on an affected device. A successful exploit could allow the attacker to inject IOS commands to the affected device, which could allow the attacker to alter the configuration of the device or cause a denial of service (DoS) condition.
Vulnerability class: Command Injection (OS Command Injection)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.018 (77.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 78th percentile — 77.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.018 · newest: 0.018 · change: 0.000
Affected products
- Cisco iOS Xe Software 16.11.1
- Cisco iOS Xe — versions 16.11.1, 16.11.1a, 16.11.1b
Weakness classification (CWE)
References
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cm… (vendor-advisory, Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-3224?
- CVE-2020-3224 is a high-severity vulnerability in Cisco iOS Xe Software 16.11.1, classified under Command Injection. CVSS score: 8.8/10. Published 2020-06-03.
- How severe is CVE-2020-3224?
- High severity. CVSS v3 base score is 8.8 out of 10.