Lucene search
CiscoCISCO-SA-IOS-XE-WEBUI-MULTI-VFTKK7YRHistorySep 24, 2020 - 4:00 p.m.
Cisco IOS XE Software Web Management Framework Vulnerabilities
2020-09-2416:00:00
tools.cisco.com
21
0.002 Low
EPSS
Percentile
60.5%
Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service (DoS) condition.
For more information about these vulnerabilities, see the Details [“#details”] section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-webui-multi-vfTkk7yr [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-webui-multi-vfTkk7yr”]
Affected configurations
Node
ciscorvs4000_softwareMatch16.1
ORciscorvs4000_softwareMatch16.2
ORciscorvs4000_softwareMatch16.3
ORciscorvs4000_softwareMatch16.4
ORciscorvs4000_softwareMatch16.5
ORciscorvs4000_softwareMatch16.6
ORciscorvs4000_softwareMatch16.7
ORciscorvs4000_softwareMatch16.8
ORciscorvs4000_softwareMatch16.9
ORciscorvs4000_softwareMatch16.10
ORciscorvs4000_softwareMatch16.11
ORciscorvs4000_softwareMatch16.12
ORciscorvs4000_softwareMatch17.1
ORciscorvs4000_softwareMatch17.2
ORciscorvs4000_softwareMatch16.1.1
ORciscorvs4000_softwareMatch16.1.2
ORciscorvs4000_softwareMatch16.1.3
ORciscorvs4000_softwareMatch16.2.1
ORciscorvs4000_softwareMatch16.2.2
ORciscorvs4000_softwareMatch16.3.1
ORciscorvs4000_softwareMatch16.3.2
ORciscorvs4000_softwareMatch16.3.3
ORciscorvs4000_softwareMatch16.3.1a
ORciscorvs4000_softwareMatch16.3.4
ORciscorvs4000_softwareMatch16.3.5
ORciscorvs4000_softwareMatch16.3.5b
ORciscorvs4000_softwareMatch16.3.6
ORciscorvs4000_softwareMatch16.3.7
ORciscorvs4000_softwareMatch16.3.8
ORciscorvs4000_softwareMatch16.3.9
ORciscorvs4000_softwareMatch16.3.10
ORciscorvs4000_softwareMatch16.4.1
ORciscorvs4000_softwareMatch16.4.2
ORciscorvs4000_softwareMatch16.4.3
ORciscorvs4000_softwareMatch16.5.1
ORciscorvs4000_softwareMatch16.5.1a
ORciscorvs4000_softwareMatch16.5.1b
ORciscorvs4000_softwareMatch16.5.2
ORciscorvs4000_softwareMatch16.5.3
ORciscorvs4000_softwareMatch16.6.1
ORciscorvs4000_softwareMatch16.6.2
ORciscorvs4000_softwareMatch16.6.3
ORciscorvs4000_softwareMatch16.6.4
ORciscorvs4000_softwareMatch16.6.5
ORciscorvs4000_softwareMatch16.6.4s
ORciscorvs4000_softwareMatch16.6.4a
ORciscorvs4000_softwareMatch16.6.5a
ORciscorvs4000_softwareMatch16.6.6
ORciscorvs4000_softwareMatch16.6.5b
ORciscorvs4000_softwareMatch16.6.7
ORciscorvs4000_softwareMatch16.6.7a
ORciscorvs4000_softwareMatch16.6.8
ORciscorvs4000_softwareMatch16.7.1
ORciscorvs4000_softwareMatch16.7.1a
ORciscorvs4000_softwareMatch16.7.1b
ORciscorvs4000_softwareMatch16.7.2
ORciscorvs4000_softwareMatch16.7.3
ORciscorvs4000_softwareMatch16.7.4
ORciscorvs4000_softwareMatch16.8.1
ORciscorvs4000_softwareMatch16.8.1a
ORciscorvs4000_softwareMatch16.8.1b
ORciscorvs4000_softwareMatch16.8.1s
ORciscorvs4000_softwareMatch16.8.1c
ORciscorvs4000_softwareMatch16.8.1d
ORciscorvs4000_softwareMatch16.8.2
ORciscorvs4000_softwareMatch16.8.1e
ORciscorvs4000_softwareMatch16.8.3
ORciscorvs4000_softwareMatch16.9.1
ORciscorvs4000_softwareMatch16.9.2
ORciscorvs4000_softwareMatch16.9.1a
ORciscorvs4000_softwareMatch16.9.1b
ORciscorvs4000_softwareMatch16.9.1s
ORciscorvs4000_softwareMatch16.9.1c
ORciscorvs4000_softwareMatch16.9.1d
ORciscorvs4000_softwareMatch16.9.3
ORciscorvs4000_softwareMatch16.9.2a
ORciscorvs4000_softwareMatch16.9.2s
ORciscorvs4000_softwareMatch16.9.3h
ORciscorvs4000_softwareMatch16.9.4
ORciscorvs4000_softwareMatch16.9.3s
ORciscorvs4000_softwareMatch16.9.3a
ORciscorvs4000_softwareMatch16.9.4c
ORciscorvs4000_softwareMatch16.9.5
ORciscorvs4000_softwareMatch16.9.5f
ORciscorvs4000_softwareMatch16.10.1
ORciscorvs4000_softwareMatch16.10.1a
ORciscorvs4000_softwareMatch16.10.1b
ORciscorvs4000_softwareMatch16.10.1s
ORciscorvs4000_softwareMatch16.10.1c
ORciscorvs4000_softwareMatch16.10.1e
ORciscorvs4000_softwareMatch16.10.1d
ORciscorvs4000_softwareMatch16.10.2
ORciscorvs4000_softwareMatch16.10.1f
ORciscorvs4000_softwareMatch16.10.1g
ORciscorvs4000_softwareMatch16.10.3
ORciscorvs4000_softwareMatch16.11.1
ORciscorvs4000_softwareMatch16.11.1a
ORciscorvs4000_softwareMatch16.11.1b
ORciscorvs4000_softwareMatch16.11.2
ORciscorvs4000_softwareMatch16.11.1s
ORciscorvs4000_softwareMatch16.11.1c
ORciscorvs4000_softwareMatch16.12.1
ORciscorvs4000_softwareMatch16.12.1s
ORciscorvs4000_softwareMatch16.12.1a
ORciscorvs4000_softwareMatch16.12.1c
ORciscorvs4000_softwareMatch16.12.1w
ORciscorvs4000_softwareMatch16.12.2
ORciscorvs4000_softwareMatch16.12.1y
ORciscorvs4000_softwareMatch16.12.2a
ORciscorvs4000_softwareMatch16.12.3
ORciscorvs4000_softwareMatch16.12.2s
ORciscorvs4000_softwareMatch16.12.1x
ORciscorvs4000_softwareMatch16.12.1t
ORciscorvs4000_softwareMatch16.12.2t
ORciscorvs4000_softwareMatch16.12.3s
ORciscorvs4000_softwareMatch16.12.1z
ORciscorvs4000_softwareMatch16.12.3a
ORciscorvs4000_softwareMatch16.12.1z1
ORciscorvs4000_softwareMatch17.1.1
ORciscorvs4000_softwareMatch17.1.1a
ORciscorvs4000_softwareMatch17.1.1s
ORciscorvs4000_softwareMatch17.1.2
ORciscorvs4000_softwareMatch17.1.1t
ORciscorvs4000_softwareMatch17.2.1
ORciscorvs4000_softwareMatch17.2.1r
ORciscorvs4000_softwareMatch17.2.1a
ORciscorvs4000_softwareMatch17.2.1v
Related
nessus
nessus
prion
prion
Design/Logic Flaw
2020-09-24 18:15:00
Design/Logic Flaw
2020-09-24 18:15:00
cvelist
cvelist
CVE-2020-3474 Cisco IOS XE Software Web Management Framework Vulnerabilities
2020-09-24 00:00:00
CVE-2020-3475 Cisco IOS XE Software Web Management Framework Vulnerabilities
2020-09-24 00:00:00
nvd
nvd
CVE-2020-3474
2020-09-24 18:15:19
CVE-2020-3475
2020-09-24 18:15:19
cve
cve
CVE-2020-3474
2020-09-24 18:15:19
CVE-2020-3475
2020-09-24 18:15:19