CVE-2020-3503

🗓️ 24 Sep 2020 17:51:57Reported by ciscoType

Vulnerability in Cisco IOS XE Software allows local attacker to obtain critical file acces

Reporter	Title	Published	Views	Family All 11
Cisco	Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability	24 Sep 202016:00	–	cisco
Tenable Nessus	Cisco IOS XE Software Guest Shell Unauthorized File System Access (cisco-sa-unauth-file-access-eBTWkKVW)	2 Oct 202000:00	–	nessus
CNVD	Cisco IOS XE File System Override Access Vulnerability	25 Sep 202000:00	–	cnvd
Cvelist	CVE-2020-3503 Cisco IOS XE Software Guest Shell Unauthorized File System Access Vulnerability	24 Sep 202017:51	–	cvelist
EUVD	EUVD-2020-24774	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Cisco IOS and IOS XE	25 Sep 202000:00	–	ncsc
NVD	CVE-2020-3503	24 Sep 202018:15	–	nvd
OSV	CVE-2020-3503	24 Sep 202018:15	–	osv
Prion	Design/Logic Flaw	24 Sep 202018:15	–	prion
Positive Technologies	PT-2020-4429 · Cisco · Cisco Ios Xe	24 Sep 202000:00	–	ptsecurity

NVD

Node

cisco ios_xeMatch16.12.1

AND

cisco 1100-4g_integrated_services_routerMatch-

cisco 1100-4gltegb_integrated_services_routerMatch-

cisco 1100-4gltena_integrated_services_routerMatch-

cisco 1100-4p_integrated_services_routerMatch-

cisco 1100-6g_integrated_services_routerMatch-

cisco 1100-8p_integrated_services_routerMatch-

cisco 1100-lte_integrated_services_routerMatch-

cisco 1100_integrated_services_routerMatch-

cisco 1101-4p_integrated_services_routerMatch-

cisco 1101_integrated_services_routerMatch-

cisco 1109-2p_integrated_services_routerMatch-

cisco 1109-4p_integrated_services_routerMatch-

cisco 1109_integrated_services_routerMatch-

cisco 1111x-8p_integrated_services_routerMatch-

cisco 1111x_integrated_services_routerMatch-

cisco 111x_integrated_services_routerMatch-

cisco 1120_integrated_services_routerMatch-

cisco 1160_integrated_services_routerMatch-

cisco 4221_integrated_services_routerMatch-

cisco 4331_integrated_services_routerMatch-

cisco 4431_integrated_services_routerMatch-

cisco 4451_integrated_services_routerMatch-

cisco 4461_integrated_services_routerMatch-

cisco asr_1000-xMatch-

cisco asr_1001Match-

cisco asr_1001-xMatch-

cisco asr_1002Match-

cisco asr_1002-xMatch-

cisco asr_1004Match-

cisco asr_1006Match-

cisco asr_1013Match-

cisco asr1001-hxMatch-

cisco asr1001-hx-rfMatch-

cisco asr1001-x-rfMatch-

cisco asr1001-x-wsMatch-

cisco asr1002-hxMatch-

cisco asr1002-hx-rfMatch-

cisco asr1002-hx-wsMatch-

cisco asr1002-x-rfMatch-

cisco asr1002-x-wsMatch-

cisco catalyst_9800-40Match-

cisco catalyst_9800-80Match-

cisco catalyst_9800-clMatch-

cisco catalyst_9800-lMatch-

cisco catalyst_9800-l-cMatch-

cisco catalyst_9800-l-fMatch-

cisco catalyst_c9200-24pMatch-

cisco catalyst_c9200-24tMatch-

cisco catalyst_c9200-48pMatch-

cisco catalyst_c9200-48tMatch-

cisco catalyst_c9200l-24p-4gMatch-

cisco catalyst_c9200l-24p-4xMatch-

cisco catalyst_c9200l-24pxg-2yMatch-

cisco catalyst_c9200l-24pxg-4xMatch-

cisco catalyst_c9200l-24t-4gMatch-

cisco catalyst_c9200l-24t-4xMatch-

cisco catalyst_c9200l-48p-4gMatch-

cisco catalyst_c9200l-48p-4xMatch-

cisco catalyst_c9200l-48pxg-2yMatch-

cisco catalyst_c9200l-48pxg-4xMatch-

cisco catalyst_c9200l-48t-4gMatch-

cisco catalyst_c9200l-48t-4xMatch-

cisco catalyst_c9300-24pMatch-

cisco catalyst_c9300-24sMatch-

cisco catalyst_c9300-24tMatch-

cisco catalyst_c9300-24uMatch-

cisco catalyst_c9300-24uxMatch-

cisco catalyst_c9300-48pMatch-

cisco catalyst_c9300-48sMatch-

cisco catalyst_c9300-48tMatch-

cisco catalyst_c9300-48uMatch-

cisco catalyst_c9300-48unMatch-

cisco catalyst_c9300-48uxmMatch-

cisco catalyst_c9300l-24p-4gMatch-

cisco catalyst_c9300l-24p-4xMatch-

cisco catalyst_c9300l-24t-4gMatch-

cisco catalyst_c9300l-24t-4xMatch-

cisco catalyst_c9300l-48p-4gMatch-

cisco catalyst_c9300l-48p-4xMatch-

cisco catalyst_c9300l-48t-4gMatch-

cisco catalyst_c9300l-48t-4xMatch-

cisco catalyst_c9404rMatch-

cisco catalyst_c9407rMatch-

cisco catalyst_c9410rMatch-

cisco catalyst_c9500-12qMatch-

cisco catalyst_c9500-16xMatch-

cisco catalyst_c9500-24qMatch-

cisco catalyst_c9500-24y4cMatch-

cisco catalyst_c9500-32cMatch-

cisco catalyst_c9500-32qcMatch-

cisco catalyst_c9500-40xMatch-

cisco catalyst_c9500-48y4cMatch-

cisco csr_1000v

cisco ws-c3650-12x48uqMatch-

cisco ws-c3650-12x48urMatch-

cisco ws-c3650-12x48uzMatch-

cisco ws-c3650-24pdMatch-

cisco ws-c3650-24pdmMatch-

cisco ws-c3650-24psMatch-

cisco ws-c3650-24tdMatch-

cisco ws-c3650-24tsMatch-

cisco ws-c3650-48fdMatch-

cisco ws-c3650-48fqMatch-

cisco ws-c3650-48fqmMatch-

cisco ws-c3650-48fsMatch-

cisco ws-c3650-48pdMatch-

cisco ws-c3650-48pqMatch-

cisco ws-c3650-48psMatch-

cisco ws-c3650-48tdMatch-

cisco ws-c3650-48tqMatch-

cisco ws-c3650-48tsMatch-

cisco ws-c3650-8x24uqMatch-

cisco ws-c3850Match-

cisco ws-c3850-12sMatch-

cisco ws-c3850-12x48uMatch-

cisco ws-c3850-12xsMatch-

cisco ws-c3850-24pMatch-

cisco ws-c3850-24sMatch-

cisco ws-c3850-24tMatch-

cisco ws-c3850-24uMatch-

cisco ws-c3850-24xsMatch-

cisco ws-c3850-24xuMatch-

cisco ws-c3850-48fMatch-

cisco ws-c3850-48pMatch-

cisco ws-c3850-48tMatch-

cisco ws-c3850-48uMatch-

cisco ws-c3850-48xsMatch-

[
  {
    "product": "Cisco IOS XE Software",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-unauth-file-access-eBTWkKVW

19 Dec 2024 13:52Current

5.7Medium risk

Vulners AI Score5.7

CVSS 23.6

CVSS 3.16

EPSS0.0013

SSVC

cisco ios xe software vulnerability file system permissions cve-2020-3503 nvd information security