CVE-2020-3393
Summary
| CVE | CVE-2020-3393 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-09-24 18:15:00 UTC |
| Updated | 2023-11-07 03:22:00 UTC |
| Description | A vulnerability in the application-hosting subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to root on an affected device. The attacker could execute IOS XE commands outside the application-hosting subsystem Docker container as well as on the underlying Linux operating system. These commands could be run as the root user. The vulnerability is due to a combination of two factors: (a) incomplete input validation of the user payload of CLI commands, and (b) improper role-based access control (RBAC) when commands are issued at the command line within the application-hosting subsystem. An attacker could exploit this vulnerability by using a CLI command with crafted user input. A successful exploit could allow the lower-privileged attacker to execute arbitrary CLI commands with root privileges. The attacker would need valid user credentials to exploit this vulnerability. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | 1100-4gltegb Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-4gltena Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-4g Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-4p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-6g Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-8p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-lte Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1101-4p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1101 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1109-2p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1109-4p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1109 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1111x-8p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1111x Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 111x Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1120 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1160 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4221 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4331 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4431 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4451 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4461 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | Asr1001-hx | - | All | All | All |
| Hardware | Cisco | Asr1001-hx | - | All | All | All |
| Hardware | Cisco | Asr1001-hx-rf | - | All | All | All |
| Hardware | Cisco | Asr1001-hx-rf | - | All | All | All |
| Hardware | Cisco | Asr1001-x-rf | - | All | All | All |
| Hardware | Cisco | Asr1001-x-rf | - | All | All | All |
| Hardware | Cisco | Asr1001-x-ws | - | All | All | All |
| Hardware | Cisco | Asr1001-x-ws | - | All | All | All |
| Hardware | Cisco | Asr1002-hx | - | All | All | All |
| Hardware | Cisco | Asr1002-hx | - | All | All | All |
| Hardware | Cisco | Asr1002-hx-rf | - | All | All | All |
| Hardware | Cisco | Asr1002-hx-rf | - | All | All | All |
| Hardware | Cisco | Asr1002-hx-ws | - | All | All | All |
| Hardware | Cisco | Asr1002-hx-ws | - | All | All | All |
| Hardware | Cisco | Asr1002-x-rf | - | All | All | All |
| Hardware | Cisco | Asr1002-x-rf | - | All | All | All |
| Hardware | Cisco | Asr1002-x-ws | - | All | All | All |
| Hardware | Cisco | Asr1002-x-ws | - | All | All | All |
| Hardware | Cisco | Asr 1000-x | - | All | All | All |
| Hardware | Cisco | Asr 1000-x | - | All | All | All |
| Hardware | Cisco | Asr 1001 | - | All | All | All |
| Hardware | Cisco | Asr 1001 | - | All | All | All |
| Hardware | Cisco | Asr 1001-x | - | All | All | All |
| Hardware | Cisco | Asr 1001-x | - | All | All | All |
| Hardware | Cisco | Asr 1002 | - | All | All | All |
| Hardware | Cisco | Asr 1002 | - | All | All | All |
| Hardware | Cisco | Asr 1002-x | - | All | All | All |
| Hardware | Cisco | Asr 1002-x | - | All | All | All |
| Hardware | Cisco | Asr 1004 | - | All | All | All |
| Hardware | Cisco | Asr 1004 | - | All | All | All |
| Hardware | Cisco | Asr 1006 | - | All | All | All |
| Hardware | Cisco | Asr 1006 | - | All | All | All |
| Hardware | Cisco | Asr 1013 | - | All | All | All |
| Hardware | Cisco | Asr 1013 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-40 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-40 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-80 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-80 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-cl | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-cl | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l-c | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l-c | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l-f | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l-f | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-24p | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-24p | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-24t | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-24t | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-48p | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-48p | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-48t | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-48t | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24pxg-2y | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24pxg-2y | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24pxg-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24pxg-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48pxg-2y | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48pxg-2y | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48pxg-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48pxg-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24p | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24p | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24s | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24s | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24t | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24t | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24u | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24u | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24ux | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24ux | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48p | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48p | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48s | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48s | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48t | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48t | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48u | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48u | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48un | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48un | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48uxm | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48uxm | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9404r | - | All | All | All |
| Hardware | Cisco | Catalyst C9404r | - | All | All | All |
| Hardware | Cisco | Catalyst C9407r | - | All | All | All |
| Hardware | Cisco | Catalyst C9407r | - | All | All | All |
| Hardware | Cisco | Catalyst C9410r | - | All | All | All |
| Hardware | Cisco | Catalyst C9410r | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-12q | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-12q | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-16x | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-16x | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-24q | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-24q | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-24y4c | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-24y4c | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-32c | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-32c | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-32qc | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-32qc | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-40x | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-40x | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-48y4c | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-48y4c | - | All | All | All |
| Hardware | Cisco | Csr 1000v | All | All | All | All |
| Hardware | Cisco | Csr 1000v | All | All | All | All |
| Hardware | Cisco | Integrated Services Router 4221 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4221 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4331 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4331 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4431 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4431 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4451 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4451 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4461 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4461 | - | All | All | All |
| Application | Cisco | Ios Xe | 16.12.1 | All | All | All |
| Application | Cisco | Ios Xe | 16.12.1 | All | All | All |
| Hardware | Cisco | Isr1100 | - | All | All | All |
| Hardware | Cisco | Isr1100 | - | All | All | All |
| Hardware | Cisco | Isr1100-4g | - | All | All | All |
| Hardware | Cisco | Isr1100-4g | - | All | All | All |
| Hardware | Cisco | Isr1100-4gltegb | - | All | All | All |
| Hardware | Cisco | Isr1100-4gltegb | - | All | All | All |
| Hardware | Cisco | Isr1100-4gltena | - | All | All | All |
| Hardware | Cisco | Isr1100-4gltena | - | All | All | All |
| Hardware | Cisco | Isr1100-6g | - | All | All | All |
| Hardware | Cisco | Isr1100-6g | - | All | All | All |
| Hardware | Cisco | Isr1100-lte | - | All | All | All |
| Hardware | Cisco | Isr1100-lte | - | All | All | All |
| Hardware | Cisco | Isr 1100-4p | - | All | All | All |
| Hardware | Cisco | Isr 1100-4p | - | All | All | All |
| Hardware | Cisco | Isr 1100-8p | - | All | All | All |
| Hardware | Cisco | Isr 1100-8p | - | All | All | All |
| Hardware | Cisco | Isr 1101 | - | All | All | All |
| Hardware | Cisco | Isr 1101 | - | All | All | All |
| Hardware | Cisco | Isr 1101-4p | - | All | All | All |
| Hardware | Cisco | Isr 1101-4p | - | All | All | All |
| Hardware | Cisco | Isr 1109 | - | All | All | All |
| Hardware | Cisco | Isr 1109 | - | All | All | All |
| Hardware | Cisco | Isr 1109-2p | - | All | All | All |
| Hardware | Cisco | Isr 1109-2p | - | All | All | All |
| Hardware | Cisco | Isr 1109-4p | - | All | All | All |
| Hardware | Cisco | Isr 1109-4p | - | All | All | All |
| Hardware | Cisco | Isr 1111x | - | All | All | All |
| Hardware | Cisco | Isr 1111x | - | All | All | All |
| Hardware | Cisco | Isr 1111x-8p | - | All | All | All |
| Hardware | Cisco | Isr 1111x-8p | - | All | All | All |
| Hardware | Cisco | Isr 111x | - | All | All | All |
| Hardware | Cisco | Isr 111x | - | All | All | All |
| Hardware | Cisco | Isr 1120 | - | All | All | All |
| Hardware | Cisco | Isr 1120 | - | All | All | All |
| Hardware | Cisco | Isr 1160 | - | All | All | All |
| Hardware | Cisco | Isr 1160 | - | All | All | All |
| Hardware | Cisco | Ws-c3650-12x48uq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-12x48uq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-12x48ur | - | All | All | All |
| Hardware | Cisco | Ws-c3650-12x48ur | - | All | All | All |
| Hardware | Cisco | Ws-c3650-12x48uz | - | All | All | All |
| Hardware | Cisco | Ws-c3650-12x48uz | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24pd | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24pd | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24pdm | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24pdm | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24ps | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24ps | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24td | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24td | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24ts | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24ts | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fd | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fd | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fqm | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fqm | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fs | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fs | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48pd | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48pd | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48pq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48pq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48ps | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48ps | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48td | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48td | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48tq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48tq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48ts | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48ts | - | All | All | All |
| Hardware | Cisco | Ws-c3650-8x24uq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-8x24uq | - | All | All | All |
| Hardware | Cisco | Ws-c3850 | - | All | All | All |
| Hardware | Cisco | Ws-c3850 | - | All | All | All |
| Hardware | Cisco | Ws-c3850-12s | - | All | All | All |
| Hardware | Cisco | Ws-c3850-12s | - | All | All | All |
| Hardware | Cisco | Ws-c3850-12x48u | - | All | All | All |
| Hardware | Cisco | Ws-c3850-12x48u | - | All | All | All |
| Hardware | Cisco | Ws-c3850-12xs | - | All | All | All |
| Hardware | Cisco | Ws-c3850-12xs | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24p | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24p | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24s | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24s | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24t | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24t | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24u | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24u | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24xs | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24xs | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24xu | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24xu | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48f | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48f | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48p | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48p | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48t | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48t | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48u | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48u | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48xs | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48xs | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco IOS XE Software IOx Application Hosting Privilege Escalation Vulnerability | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.