CVE-2020-3207

{"id": "CVE-2020-3207", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2020-06-03T18:15:18.747", "references": [{"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ngwc-cmdinj-KEwWVWR", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the processing of boot options of specific Cisco IOS XE Software switches could allow an authenticated, local attacker with root shell access to the underlying operating system (OS) to conduct a command injection attack during device boot. This vulnerability is due to insufficient input validation checks while processing boot options. An attacker could exploit this vulnerability by modifying device boot options to execute attacker-provided code. A successful exploit may allow an attacker to bypass the Secure Boot process and execute malicious code on an affected device with root-level privileges."}, {"lang": "es", "value": "Una vulnerabilidad en el procesamiento de las opciones de arranque de los switches espec\u00edficos de Cisco IOS XE Software, podr\u00eda permitir a un atacante local autenticado con acceso de shell root al sistema operativo (SO) subyacente llevar a cabo un ataque de inyecci\u00f3n de comando durante el arranque del dispositivo. Esta vulnerabilidad se debe a comprobaciones de entrada insuficientes al procesar las opciones de arranque. Un atacante podr\u00eda explotar esta vulnerabilidad al modificar las opciones de arranque del dispositivo para ejecutar el c\u00f3digo proporcionado por el atacante. Una explotaci\u00f3n con \u00e9xito puede permitir a un atacante omitir el proceso de arranque seguro y ejecutar c\u00f3digo malicioso sobre un dispositivo afectado con privilegios de nivel root."}], "lastModified": "2020-06-05T15:39:04.247", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F29CEE37-4044-4A3C-9685-C9C021FD346A"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5292764A-7D1C-4E04-86EF-809CB68EDD25"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4BF9829-F80E-4837-A420-39B291C4E17B"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB6BD18B-B9BD-452F-986E-16A6668E46B6"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "314C7763-A64D-4023-9F3F-9A821AE4151F"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5820D71D-FC93-45AA-BC58-A26A1A39C936"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC1C85DD-69CC-4AA8-B219-651D57FC3506"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C98DED36-D4B5-48D6-964E-EEEE97936700"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"}, {"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9027A528-2588-4C06-810B-5BB313FE4323"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:catalyst_3650-12x48uq:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7434059A-25B8-4FAC-A756-6E571348B76E"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3650-12x48ur:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "858FEECF-CC69-4E68-8E8A-674643021964"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3650-12x48uz:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "91B9F022-4C3D-493E-9418-E9CDDAFEC9B1"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3650-24pd:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8904EAF5-25E7-4A6B-8117-1859F913B83B"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3650-24pdm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "59A990D6-B748-4AFD-B924-1D19680BD3DB"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3650-48fq:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "426B68A6-3A41-43DB-846F-AEFBA62E221B"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3650-48fqm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9C96215F-A300-4B4E-9D3A-C32E484BFC5B"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3650-8x24uq:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "991CBDFB-6836-4D1F-80A9-14EBCE3F855F"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-24xs:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "295C46B4-5E9F-4DD8-861B-00BA43923306"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-48xs:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F8E9B149-AA2B-4421-8CC3-5A4B32B7AADF"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-nm-2-40g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "35490BDE-DF21-495E-9F8A-7631FCB32A1F"}, {"criteria": "cpe:2.3:h:cisco:catalyst_3850-nm-8-10g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "20EFB5B8-4A38-48C5-A363-3C7F7763C1D5"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200-24p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "18736C74-F68F-4D0B-AE2B-4BC1834EF794"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200-24t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D223C2AB-22A4-42B5-8BBB-78E2CBF23B40"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200-48p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BDD3EAA2-8F25-4099-B76F-5ACC3BE34610"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200-48t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AE9BD57F-BDAC-46DD-AF87-8914B29670F2"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-24p-4g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AFCEBFFC-DD60-4CB1-A7F2-9AC09977BA4F"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-24p-4x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B9F7B21F-1DAA-45C7-8C24-D3A19F1C5459"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-24pxg-2y:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1C4F9918-E075-4F78-AFD7-0BB7FA97C1F6"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-24pxg-4x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C7E00A0B-A58E-472F-B107-0FE106751F2D"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-24t-4g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BCB45406-5216-4A11-B8D3-C44639DC26B0"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-24t-4x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "215D01AE-3767-482A-85C5-3361506F0AC3"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-48p-4g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A06E37A8-166F-4534-9089-D20B1227F4DD"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-48p-4x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B9D6DAE3-BAD0-46D8-B899-45B955F532F7"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-48pxg-2y:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "327167E8-4B65-4F9D-8760-34CDA03887CA"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-48pxg-4x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A0DA2253-C6A9-4749-B313-6552628A96F3"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-48t-4g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C925086A-94B9-4FE0-9FEB-3242C1217453"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9200l-48t-4x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6EB14B34-4035-41D2-834B-7FB069264207"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300-24p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "F257D2BE-7618-4B6A-AFCE-6D9D0084FA1D"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300-24s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8BA927CE-9D8E-4BC0-9EA6-641E7C4F71B3"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300-24t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9A46D298-1685-410E-879C-2EBC45C185AC"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300-24u:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CA4ACF54-E576-4D8A-A4E6-17A37EEC53DA"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300-24ux:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "196A7C06-8371-479D-973D-591DEB181739"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300-48p:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EE42511E-9883-4779-A8E5-FC3E16EF2793"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300-48s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DB06AD21-91A7-46B8-8F44-683828A5422D"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300-48t:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5DA169AF-3743-4051-B63B-FF6E1ADCD886"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300-48u:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "7D13CF5B-4482-4C7D-8D6A-E220F3E4F868"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300-48un:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "92134C0A-4E5B-43EF-8439-484DF504C43C"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300-48uxm:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "26ECF9BD-F632-4A02-8993-C0D44B91289C"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-24p-4g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "48730DB5-94AF-4BE7-8047-52B8B47CE35A"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-24p-4x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E3A88142-3284-4C25-8774-36004B5F9087"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-24t-4g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8EB76311-4B6D-4897-A683-4244E92BD570"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-24t-4x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CDDA2975-CDB7-4182-A03E-D34F15CDF6F1"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-48p-4g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "35B9D0B5-4BE1-490E-9A68-00A3D357BC3D"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-48p-4x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "71FA2F5A-6146-4142-96A8-552118E4BB67"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-48t-4g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BEF786D6-F28F-49D8-A15C-BFD0AA934355"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9300l-48t-4x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CA32B0AC-1B0A-4ED8-8532-9C7BE6E059D4"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9500-12q:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6BFEE45F-C5AC-483D-9DE6-4CEB98D80A0C"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9500-16x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "FD6F5BBC-4627-4A3E-B827-3CEE7EE969D0"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9500-24q:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8B2E41E2-00CE-42C4-8C91-9307D76F5D7A"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9500-24y4c:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "98CB2D23-B5F8-4FA9-8431-3B0124CE2140"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9500-32c:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E8A8BA9F-3361-43CD-8031-A5DF0AD68BEB"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9500-32qc:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6DFE4BB6-FC9A-42B3-B8A0-2610D71BB9B8"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9500-40x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "53D13F1D-345D-45D5-9000-DAFE8A85D71B"}, {"criteria": "cpe:2.3:h:cisco:catalyst_c9500-48y4c:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8CFB064E-E390-47B5-AA76-5D3D2E368055"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ykramarz@cisco.com"}