CVE-2020-3530 Cisco IOS XR Authenticated User Privilege Escalation Vulnerability

High 8.4 Published 4 Sep 2020 Updated 13 Nov 2024

An authenticated local attacker can execute a restricted command to invalidate disk integrity and restart the device, bypassing administrative privilege requirements.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2020-3530?

CVE-2020-3530 is a high-severity vulnerability in Cisco Ios Xr, published on 4 Sep 2020. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The vulnerability is due to incorrect mapping in the source code of task group assignments for a specific command. An attacker could exploit this vulnerability by issuing the command, which they should not be authorized to issue, on an affected device. A successful exploit could allow the attacker to invalidate the integrity of the disk and cause the device to restart. This vulnerability could allow a user with read permissions to issue a specific command that should require Administrator privileges.

Weakness: CWE-863, CWE-264

Which versions are affected by CVE-2020-3530?

It affects 1 product.

Products include Cisco Ios Xr.

How do I fix CVE-2020-3530?

No fix has been published for CVE-2020-3530 yet. Limit exposure of the affected software until one is available.

Is CVE-2020-3530 being exploited?

There is no known exploitation of CVE-2020-3530 in the wild and no public exploit code.

All Cisco Ios Xr vulnerabilities

Sources

Also known as GHSA-582q-vw7h-43v8.