CVEvulnerability

CVE-2020-3214

6.7 MEDIUM Published 2020-06-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-06-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
6.7 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20, CWE-264

Description

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a user with root-level privileges. The vulnerability is due to insufficient validation of user-supplied content. This vulnerability could allow an attacker to load malicious software onto an affected device.

Affected configurations

• cisco ios xe 16.11.1 • cisco ios xe 16.11.1a • cisco ios xe 16.11.1b • cisco ios xe 16.11.1c • cisco ios xe 16.11.1s • cisco ios xe 16.11.2 • cisco ios xe 16.12.1 • cisco ios xe 16.12.1a • cisco ios xe 16.12.1c • cisco ios xe 16.12.1s • cisco ios xe 16.12.1t • cisco ios xe 16.12.1w • cisco ios xe 16.12.1x

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References