Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Image Verification Bypass Vulnerability (Cisco Cisco IOS 12.2(60)EZ16)

CVE-2020-3208

MEDIUM 6.7

En bref

Source: NVD
EPSS: EPSS 0.32 % · centile 25 (2026-10-31)
État: PUBLISHED
Publiée: 2020-06-03 17:40 UTC
Mise à jour: 2024-11-15 17:18 UTC
Attribuée par: cisco
Statut NVD: Modified

Rechercher sur…

Description

A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) could allow an authenticated, local attacker to boot a malicious software image on an affected device. The vulnerability is due to insufficient access restrictions on the area of code that manages the image verification feature. An attacker could exploit this vulnerability by first authenticating to the targeted device and then logging in to the Virtual Device Server (VDS) of an affected device. The attacker could then, from the VDS shell, disable Cisco IOS Software integrity (image) verification. A successful exploit could allow the attacker to boot a malicious Cisco IOS Software image on the targeted device. To exploit this vulnerability, the attacker must have valid user credentials at privilege level 15.

Faiblesses (CWE)

CWE-264

Références

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-ir800-img-verif-wHhLYHjK

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.0	MEDIUM 6.7	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	cisco
CVSS 3.1	MEDIUM 6.7	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	NVD · nvd@nist.gov (Primary)
CVSS 3.0	MEDIUM 6.7	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	NVD · psirt@cisco.com (Secondary)
CVSS 2.0	HIGH 7.2	AV:L/AC:L/Au:N/C:C/I:C/A:C	NVD · nvd@nist.gov (Primary)

Références européennes

ENISA EUVD · EUVD-2020-24479
GCVE · GCVE-0-2020-3208

Avis du CERT-FR

CERTFR-2020-AVI-340 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr

Configurations affectées (CPE NVD)

cpe:2.3:o:cisco:ios:12.2\(60\)ez16:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.0\(2\)sg11a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.3\(3\)jaa1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.3\(3\)jpj:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m0a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m2a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m4a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m5:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m6:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m6a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m7:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m8:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m9:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m10:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.5\(3\)m11:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(1\)t:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(1\)t0a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(1\)t1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(1\)t2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(1\)t3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m0a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m1b:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m3:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m3a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m4:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m5:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m6:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m6a:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m6b:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m7:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m8:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.6\(3\)m9:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:15.7\(3\)m:*:*:*:*:*:*:*
+17 autres

Produits affectés

Produit	Versions
Cisco · Cisco IOS 12.2(60)EZ16	affected n/a

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

🟡 Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Image Verification Bypass Vulnerability (Cisco Cisco IOS 12.2(60)EZ16)