CVE-2020-3503
Summary
| CVE | CVE-2020-3503 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-09-24 18:15:00 UTC |
| Updated | 2023-11-07 03:22:00 UTC |
| Description | A vulnerability in the file system permissions of Cisco IOS XE Software could allow an authenticated, local attacker to obtain read and write access to critical configuration or system files. The vulnerability is due to insufficient file system permissions on an affected device. An attacker could exploit this vulnerability by connecting to an affected device's guest shell, and accessing or modifying restricted files. A successful exploit could allow the attacker to view or modify restricted information or configurations that are normally not accessible to system administrators. |
Risk And Classification
Problem Types: CWE-732
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Cisco | 1100-4gltegb Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-4gltena Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-4g Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-4p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-6g Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-8p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100-lte Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1100 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1101-4p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1101 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1109-2p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1109-4p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1109 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1111x-8p Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1111x Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 111x Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1120 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 1160 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4221 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4331 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4431 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4451 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | 4461 Integrated Services Router | - | All | All | All |
| Hardware | Cisco | Asr1001-hx | - | All | All | All |
| Hardware | Cisco | Asr1001-hx | - | All | All | All |
| Hardware | Cisco | Asr1001-hx-rf | - | All | All | All |
| Hardware | Cisco | Asr1001-hx-rf | - | All | All | All |
| Hardware | Cisco | Asr1001-x-rf | - | All | All | All |
| Hardware | Cisco | Asr1001-x-rf | - | All | All | All |
| Hardware | Cisco | Asr1001-x-ws | - | All | All | All |
| Hardware | Cisco | Asr1001-x-ws | - | All | All | All |
| Hardware | Cisco | Asr1002-hx | - | All | All | All |
| Hardware | Cisco | Asr1002-hx | - | All | All | All |
| Hardware | Cisco | Asr1002-hx-rf | - | All | All | All |
| Hardware | Cisco | Asr1002-hx-rf | - | All | All | All |
| Hardware | Cisco | Asr1002-hx-ws | - | All | All | All |
| Hardware | Cisco | Asr1002-hx-ws | - | All | All | All |
| Hardware | Cisco | Asr1002-x-rf | - | All | All | All |
| Hardware | Cisco | Asr1002-x-rf | - | All | All | All |
| Hardware | Cisco | Asr1002-x-ws | - | All | All | All |
| Hardware | Cisco | Asr1002-x-ws | - | All | All | All |
| Hardware | Cisco | Asr 1000-x | - | All | All | All |
| Hardware | Cisco | Asr 1000-x | - | All | All | All |
| Hardware | Cisco | Asr 1001 | - | All | All | All |
| Hardware | Cisco | Asr 1001 | - | All | All | All |
| Hardware | Cisco | Asr 1001-x | - | All | All | All |
| Hardware | Cisco | Asr 1001-x | - | All | All | All |
| Hardware | Cisco | Asr 1002 | - | All | All | All |
| Hardware | Cisco | Asr 1002 | - | All | All | All |
| Hardware | Cisco | Asr 1002-x | - | All | All | All |
| Hardware | Cisco | Asr 1002-x | - | All | All | All |
| Hardware | Cisco | Asr 1004 | - | All | All | All |
| Hardware | Cisco | Asr 1004 | - | All | All | All |
| Hardware | Cisco | Asr 1006 | - | All | All | All |
| Hardware | Cisco | Asr 1006 | - | All | All | All |
| Hardware | Cisco | Asr 1013 | - | All | All | All |
| Hardware | Cisco | Asr 1013 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-40 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-40 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-80 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-80 | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-cl | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-cl | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l-c | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l-c | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l-f | - | All | All | All |
| Hardware | Cisco | Catalyst 9800-l-f | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-24p | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-24p | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-24t | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-24t | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-48p | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-48p | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-48t | - | All | All | All |
| Hardware | Cisco | Catalyst C9200-48t | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24pxg-2y | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24pxg-2y | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24pxg-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24pxg-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-24t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48pxg-2y | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48pxg-2y | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48pxg-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48pxg-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9200l-48t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24p | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24p | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24s | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24s | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24t | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24t | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24u | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24u | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24ux | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-24ux | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48p | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48p | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48s | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48s | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48t | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48t | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48u | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48u | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48un | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48un | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48uxm | - | All | All | All |
| Hardware | Cisco | Catalyst C9300-48uxm | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-24t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48p-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48p-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48t-4g | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9300l-48t-4x | - | All | All | All |
| Hardware | Cisco | Catalyst C9404r | - | All | All | All |
| Hardware | Cisco | Catalyst C9404r | - | All | All | All |
| Hardware | Cisco | Catalyst C9407r | - | All | All | All |
| Hardware | Cisco | Catalyst C9407r | - | All | All | All |
| Hardware | Cisco | Catalyst C9410r | - | All | All | All |
| Hardware | Cisco | Catalyst C9410r | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-12q | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-12q | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-16x | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-16x | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-24q | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-24q | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-24y4c | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-24y4c | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-32c | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-32c | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-32qc | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-32qc | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-40x | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-40x | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-48y4c | - | All | All | All |
| Hardware | Cisco | Catalyst C9500-48y4c | - | All | All | All |
| Hardware | Cisco | Csr 1000v | All | All | All | All |
| Hardware | Cisco | Csr 1000v | All | All | All | All |
| Hardware | Cisco | Integrated Services Router 4221 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4221 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4331 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4331 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4431 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4431 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4451 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4451 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4461 | - | All | All | All |
| Hardware | Cisco | Integrated Services Router 4461 | - | All | All | All |
| Application | Cisco | Ios Xe | 16.12.1 | All | All | All |
| Application | Cisco | Ios Xe | 16.12.1 | All | All | All |
| Hardware | Cisco | Isr1100 | - | All | All | All |
| Hardware | Cisco | Isr1100 | - | All | All | All |
| Hardware | Cisco | Isr1100-4g | - | All | All | All |
| Hardware | Cisco | Isr1100-4g | - | All | All | All |
| Hardware | Cisco | Isr1100-4gltegb | - | All | All | All |
| Hardware | Cisco | Isr1100-4gltegb | - | All | All | All |
| Hardware | Cisco | Isr1100-4gltena | - | All | All | All |
| Hardware | Cisco | Isr1100-4gltena | - | All | All | All |
| Hardware | Cisco | Isr1100-6g | - | All | All | All |
| Hardware | Cisco | Isr1100-6g | - | All | All | All |
| Hardware | Cisco | Isr1100-lte | - | All | All | All |
| Hardware | Cisco | Isr1100-lte | - | All | All | All |
| Hardware | Cisco | Isr 1100-4p | - | All | All | All |
| Hardware | Cisco | Isr 1100-4p | - | All | All | All |
| Hardware | Cisco | Isr 1100-8p | - | All | All | All |
| Hardware | Cisco | Isr 1100-8p | - | All | All | All |
| Hardware | Cisco | Isr 1101 | - | All | All | All |
| Hardware | Cisco | Isr 1101 | - | All | All | All |
| Hardware | Cisco | Isr 1101-4p | - | All | All | All |
| Hardware | Cisco | Isr 1101-4p | - | All | All | All |
| Hardware | Cisco | Isr 1109 | - | All | All | All |
| Hardware | Cisco | Isr 1109 | - | All | All | All |
| Hardware | Cisco | Isr 1109-2p | - | All | All | All |
| Hardware | Cisco | Isr 1109-2p | - | All | All | All |
| Hardware | Cisco | Isr 1109-4p | - | All | All | All |
| Hardware | Cisco | Isr 1109-4p | - | All | All | All |
| Hardware | Cisco | Isr 1111x | - | All | All | All |
| Hardware | Cisco | Isr 1111x | - | All | All | All |
| Hardware | Cisco | Isr 1111x-8p | - | All | All | All |
| Hardware | Cisco | Isr 1111x-8p | - | All | All | All |
| Hardware | Cisco | Isr 111x | - | All | All | All |
| Hardware | Cisco | Isr 111x | - | All | All | All |
| Hardware | Cisco | Isr 1120 | - | All | All | All |
| Hardware | Cisco | Isr 1120 | - | All | All | All |
| Hardware | Cisco | Isr 1160 | - | All | All | All |
| Hardware | Cisco | Isr 1160 | - | All | All | All |
| Hardware | Cisco | Ws-c3650-12x48uq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-12x48uq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-12x48ur | - | All | All | All |
| Hardware | Cisco | Ws-c3650-12x48ur | - | All | All | All |
| Hardware | Cisco | Ws-c3650-12x48uz | - | All | All | All |
| Hardware | Cisco | Ws-c3650-12x48uz | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24pd | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24pd | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24pdm | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24pdm | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24ps | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24ps | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24td | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24td | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24ts | - | All | All | All |
| Hardware | Cisco | Ws-c3650-24ts | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fd | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fd | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fqm | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fqm | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fs | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48fs | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48pd | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48pd | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48pq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48pq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48ps | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48ps | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48td | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48td | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48tq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48tq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48ts | - | All | All | All |
| Hardware | Cisco | Ws-c3650-48ts | - | All | All | All |
| Hardware | Cisco | Ws-c3650-8x24uq | - | All | All | All |
| Hardware | Cisco | Ws-c3650-8x24uq | - | All | All | All |
| Hardware | Cisco | Ws-c3850 | - | All | All | All |
| Hardware | Cisco | Ws-c3850 | - | All | All | All |
| Hardware | Cisco | Ws-c3850-12s | - | All | All | All |
| Hardware | Cisco | Ws-c3850-12s | - | All | All | All |
| Hardware | Cisco | Ws-c3850-12x48u | - | All | All | All |
| Hardware | Cisco | Ws-c3850-12x48u | - | All | All | All |
| Hardware | Cisco | Ws-c3850-12xs | - | All | All | All |
| Hardware | Cisco | Ws-c3850-12xs | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24p | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24p | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24s | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24s | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24t | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24t | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24u | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24u | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24xs | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24xs | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24xu | - | All | All | All |
| Hardware | Cisco | Ws-c3850-24xu | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48f | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48f | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48p | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48p | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48t | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48t | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48u | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48u | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48xs | - | All | All | All |
| Hardware | Cisco | Ws-c3850-48xs | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.