Vulnerability Description
A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system (OS) of an affected device. The vulnerability is due to insufficient restrictions on Lua function calls within the context of user-supplied Lua scripts. An attacker with valid administrative credentials could exploit this vulnerability by submitting a malicious Lua script. When this file is processed, an exploitable buffer overflow condition could occur. A successful exploit could allow the attacker to execute arbitrary code with root privileges on the underlying Linux OS of the affected device.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios Xe | - |
| Cisco | 1100 Integrated Services Router | - |
| Cisco | 1101 Integrated Services Router | - |
| Cisco | 1109 Integrated Services Router | - |
| Cisco | 1111X Integrated Services Router | - |
| Cisco | 111X Integrated Services Router | - |
| Cisco | 1120 Integrated Services Router | - |
| Cisco | 1160 Integrated Services Router | - |
| Cisco | 4221 Integrated Services Router | - |
| Cisco | 4321 Integrated Services Router | - |
| Cisco | 4331 Integrated Services Router | - |
| Cisco | 4351 Integrated Services Router | - |
| Cisco | 4431 Integrated Services Router | - |
| Cisco | 4451-X Integrated Services Router | - |
| Cisco | 4461 Integrated Services Router | - |
| Cisco | Asr 1001-Hx | - |
| Cisco | Asr 1001-X | - |
| Cisco | Asr 1002-Hx | - |
| Cisco | Asr 1002-X | - |
| Cisco | Asr 1004 | - |
Related Weaknesses (CWE)
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iVendor Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iVendor Advisory
FAQ
What is CVE-2020-3423?
CVE-2020-3423 is a vulnerability with a CVSS score of 5.1 (MEDIUM). A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on ...
How severe is CVE-2020-3423?
CVE-2020-3423 has been rated MEDIUM with a CVSS base score of 5.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-3423?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios Xe, Cisco 1100 Integrated Services Router, Cisco 1101 Integrated Services Router, Cisco 1109 Integrated Services Router, Cisco 1111X Integrated Services Router.