CVE-2020-3216
Cisco IOS XE SD-WAN Software Authentication Bypass Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in Cisco IOS XE SD-WAN Software could allow an unauthenticated, physical attacker to bypass authentication and gain unrestricted access to the root shell of an affected device. The vulnerability exists because the affected software has insufficient authentication mechanisms for certain commands. An attacker could exploit this vulnerability by stopping the boot initialization of an affected device. A successful exploit could allow the attacker to bypass authentication and gain unrestricted access to the root shell of the affected device.
Una vulnerabilidad en Cisco IOS XE SD-WAN Software, podría permitir a un atacante físico no autenticado omitir la autenticación y conseguir acceso sin restricciones al shell root de un dispositivo afectado. La vulnerabilidad se presenta porque el software afectado presenta mecanismos de autenticación insuficientes para determinados comandos. Un atacante podría explotar esta vulnerabilidad al detener la inicialización de arranque de un dispositivo afectado. Una explotación con éxito podría permitir al atacante omitir la autenticación y conseguir acceso sin restricciones al shell root del dispositivo afectado.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2019-12-12 CVE Reserved
- 2020-06-03 CVE Published
- 2023-03-08 EPSS Updated
- 2024-11-15 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-287: Improper Authentication
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-auth-b-NzwhJHH7 | 2020-06-10 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Ios Xe Sd-wan Search vendor "Cisco" for product "Ios Xe Sd-wan" | 16.9.0 Search vendor "Cisco" for product "Ios Xe Sd-wan" and version "16.9.0" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Ios Xe Sd-wan Search vendor "Cisco" for product "Ios Xe Sd-wan" | 16.9.1 Search vendor "Cisco" for product "Ios Xe Sd-wan" and version "16.9.1" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Ios Xe Sd-wan Search vendor "Cisco" for product "Ios Xe Sd-wan" | 16.9.2 Search vendor "Cisco" for product "Ios Xe Sd-wan" and version "16.9.2" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Ios Xe Sd-wan Search vendor "Cisco" for product "Ios Xe Sd-wan" | 16.9.3 Search vendor "Cisco" for product "Ios Xe Sd-wan" and version "16.9.3" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Ios Xe Sd-wan Search vendor "Cisco" for product "Ios Xe Sd-wan" | 16.9.4 Search vendor "Cisco" for product "Ios Xe Sd-wan" and version "16.9.4" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Ios Xe Sd-wan Search vendor "Cisco" for product "Ios Xe Sd-wan" | 16.10.0 Search vendor "Cisco" for product "Ios Xe Sd-wan" and version "16.10.0" | - |
Affected
| ||||||
Cisco Search vendor "Cisco" | Ios Xe Sd-wan Search vendor "Cisco" for product "Ios Xe Sd-wan" | 16.10.1 Search vendor "Cisco" for product "Ios Xe Sd-wan" and version "16.10.1" | - |
Affected
|