Skip to content
fr Sign in
6.7 Medium

CVE-2020-3215 A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local…

Description

A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local attacker to gain root-level privileges on an affected device. The vulnerability is due to insufficient validation of a user-supplied open virtual appliance (OVA). An attacker could exploit this vulnerability by installing a malicious OVA on an affected device.

Affected products and versions

Product Affected versions Fixed in
Cisco IOS XE Software 3.8.0S Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco IOS XE Software 3.8.0S

The 2 CVEs of Cisco IOS XE Software 3.8.0S →
CVE-2020-3213 A vulnerability in the ROMMON of Cisco IOS XE Software could allow an authenticated, local attacker to elevate… 6.7 Medium
Track this CVE