CVE-2020-3215

A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local attacker to gain root-level privileges on an affected device. The vulnerability is due to insufficient validation of a user-supplied open virtual appliance (OVA). An attacker could exploit this vulnerability by installing a malicious OVA on an affected device.

• cisco ios xe 3.7.0e • cisco ios xe 3.7.1e • cisco ios xe 3.7.2e • cisco ios xe 3.7.3e • cisco ios xe 3.7.4e • cisco ios xe 3.7.5e • cisco ios xe 3.8.0e • cisco ios xe 3.8.0s • cisco ios xe 3.8.1e • cisco ios xe 3.8.1s • cisco ios xe 3.8.2e • cisco ios xe 3.8.2s • cisco ios xe 3.8.3e • cisco ios xe 3.8.4e • cisco ios xe 3.8.5ae • cisco ios xe 3.8.5e • cisco ios xe 3.8.6e • cisco ios xe 3.8.7e • cisco ios xe 3.8.8e • cisco ios xe 3.9.0as • cisco ios xe 3.9.0e • cisco ios xe 3.9.0s • cisco ios xe 3.9.1as • cisco ios xe 3.9.1e • cisco ios xe 3.9.1s • cisco ios xe 3.9.2be • cisco ios xe 3.9.2e • cisco ios xe 3.9.2s • cisco ios xe 3.10.0ce • cisco ios xe 3.10.0e • cisco ios xe 3.10.0s • cisco ios xe 3.10.1ae • cisco ios xe 3.10.1e • cisco ios xe 3.10.1s • cisco ios xe 3.10.1se • cisco ios xe 3.10.2as • cisco ios xe 3.10.2e • cisco ios xe 3.10.2s • cisco ios xe 3.10.2ts • cisco ios xe 3.10.3e • cisco ios xe 3.10.3s • cisco ios xe 3.10.4s • cisco ios xe 3.10.5s • cisco ios xe 3.10.6s • cisco ios xe 3.10.7s • cisco ios xe 3.10.8as • cisco ios xe 3.10.8s • cisco ios xe 3.10.9s • cisco ios xe 3.10.10s • cisco ios xe 3.11.0e • cisco ios xe 3.11.0s • cisco ios xe 3.11.1s • cisco ios xe 3.11.2s • cisco ios xe 3.11.3e • cisco ios xe 3.11.3s • cisco ios xe 3.11.4s • cisco ios xe 3.12.0as • cisco ios xe 3.12.0s • cisco ios xe 3.12.1s • cisco ios xe 3.12.2s … and 164 more