CVE-2020-3205 — HIGH (8.8) — White Hats Nepal

Vulnerability Description

A vulnerability in the implementation of the inter-VM channel of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, adjacent attacker to execute arbitrary shell commands on the Virtual Device Server (VDS) of an affected device. The vulnerability is due to insufficient validation of signaling packets that are destined to VDS. An attacker could exploit this vulnerability by sending malicious packets to an affected device. A successful exploit could allow the attacker to execute arbitrary commands in the context of the Linux shell of VDS with the privileges of the root user. Because the device is designed on a hypervisor architecture, exploitation of a vulnerability that affects the inter-VM channel may lead to a complete system compromise. For more information about this vulnerability, see the Details section of this advisory.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Cisco	Ios	12.2\(60\)ez16
Cisco	1120	-
Cisco	1240	-
Cisco	809	-
Cisco	829	-

Related Weaknesses (CWE)

CWE-20 CWE-78

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iPatchVendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iPatchVendor Advisory

FAQ

What is CVE-2020-3205?

CVE-2020-3205 is a vulnerability with a CVSS score of 8.8 (HIGH). A vulnerability in the implementation of the inter-VM channel of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid ...

How severe is CVE-2020-3205?

CVE-2020-3205 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-3205?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios, Cisco 1120, Cisco 1240, Cisco 809, Cisco 829.