CVE-2020-3216
Summary
| CVE | CVE-2020-3216 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-06-03 18:15:00 UTC |
| Updated | 2020-06-10 17:20:00 UTC |
| Description | A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient authentication mechanisms for certain commands. An attacker could exploit this vulnerability by stopping the boot initialization of an affected device. A successful exploit could allow the attacker to bypass authentication and gain unrestricted access to the root shell of the affected device. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cisco | Ios Xe Sd-wan | 16.10.0 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.10.1 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.9.0 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.9.1 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.9.2 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.9.3 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.9.4 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.10.0 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.10.1 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.9.0 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.9.1 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.9.2 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.9.3 | All | All | All |
| Operating System | Cisco | Ios Xe Sd-wan | 16.9.4 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco IOS XE SD-WAN Software Authentication Bypass Vulnerability | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.