CVE-2020-3238 Cisco IOx Application Framework Arbitrary File Creation Vulnerability
An authenticated attacker can upload a malicious package to write or modify arbitrary files within the Cisco IOx virtual instance.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-3238?
CVE-2020-3238 is a high-severity vulnerability in Cisco IOx, published on 3 Jun 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance that is running on the affected device. The vulnerability is due to insufficient input validation of user-supplied application packages. An attacker who can upload a malicious package within Cisco IOx could exploit the vulnerability to modify arbitrary files. The impacts of a successful exploit are limited to the scope of the virtual instance and do not affect the device that is hosting Cisco IOx.
Weakness: CWE-20
Which versions are affected by CVE-2020-3238?
It affects 1 product.
Products include Cisco Iox.
How do I fix CVE-2020-3238?
No fix has been published for CVE-2020-3238 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-3238 being exploited?
There is no known exploitation of CVE-2020-3238 in the wild and no public exploit code.
Other vulnerabilities in Cisco IOx
- CVE-2017-3853 Memory corruption in Cisco IOx
- CVE-2017-3852 Path traversal in Cisco Application-Hosting Framework
- CVE-2017-3851 Path traversal in Cisco Application-Hosting Framework
- CVE-2016-9199 Path traversal in Cisco IOx
- CVE-2020-3233 Cisco IOx Application Framework Local Manager Stored Cross-Site Scripting Vulnerability
Sources
Also known as GHSA-vwph-w88h-2p73.