Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2020-3473

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups within the source code. An attacker could exploit this vulnerability by first authenticating to the local CLI shell on the device and using the CLI command to bypass the task group–based checks. A successful exploit could allow the attacker to elevate privileges and perform actions on the device without authorization checks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.8%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
Products affected by CVE-2020-3473
  • Cisco » 8201 » Version: N/A
    cpe:2.3:h:cisco:8201:-
  • Cisco » 8202 » Version: N/A
    cpe:2.3:h:cisco:8202:-
  • Cisco » 8808 » Version: N/A
    cpe:2.3:h:cisco:8808:-
  • Cisco » 8812 » Version: N/A
    cpe:2.3:h:cisco:8812:-
  • Cisco » 8818 » Version: N/A
    cpe:2.3:h:cisco:8818:-
  • Cisco » Ios Xrv 9000 » Version: N/A
    cpe:2.3:h:cisco:ios_xrv_9000:-
  • Cisco » Ncs 4009 » Version: N/A
    cpe:2.3:h:cisco:ncs_4009:-
  • Cisco » Ncs 4016 » Version: N/A
    cpe:2.3:h:cisco:ncs_4016:-
  • Cisco » Ncs 540 » Version: N/A
    cpe:2.3:h:cisco:ncs_540:-
  • Cisco » Ncs 5501-Se » Version: N/A
    cpe:2.3:h:cisco:ncs_5501-se:-
  • Cisco » Ncs 5501 » Version: N/A
    cpe:2.3:h:cisco:ncs_5501:-
  • Cisco » Ncs 5502-Se » Version: N/A
    cpe:2.3:h:cisco:ncs_5502-se:-
  • Cisco » Ncs 5502 » Version: N/A
    cpe:2.3:h:cisco:ncs_5502:-
  • Cisco » Ncs 5508 » Version: N/A
    cpe:2.3:h:cisco:ncs_5508:-
  • Cisco » Ncs 5516 » Version: N/A
    cpe:2.3:h:cisco:ncs_5516:-
  • Cisco » Ncs 560 » Version: N/A
    cpe:2.3:h:cisco:ncs_560:-
  • Cisco » Ncs 6000 » Version: N/A
    cpe:2.3:h:cisco:ncs_6000:-
  • Cisco » Ncs 6008 » Version: N/A
    cpe:2.3:h:cisco:ncs_6008:-
  • Cisco » Ios Xr » Version: 5.0.0
    cpe:2.3:o:cisco:ios_xr:5.0.0
  • Cisco » Ios Xr » Version: 5.0.1
    cpe:2.3:o:cisco:ios_xr:5.0.1
  • Cisco » Ios Xr » Version: 5.0.3.ce
    cpe:2.3:o:cisco:ios_xr:5.0.3.ce
  • Cisco » Ios Xr » Version: 5.0_base
    cpe:2.3:o:cisco:ios_xr:5.0_base
  • Cisco » Ios Xr » Version: 5.1.0
    cpe:2.3:o:cisco:ios_xr:5.1.0
  • Cisco » Ios Xr » Version: 5.1.1
    cpe:2.3:o:cisco:ios_xr:5.1.1
  • Cisco » Ios Xr » Version: 5.1.1.k9sec
    cpe:2.3:o:cisco:ios_xr:5.1.1.k9sec
  • Cisco » Ios Xr » Version: 5.1.2
    cpe:2.3:o:cisco:ios_xr:5.1.2
  • Cisco » Ios Xr » Version: 5.1.3
    cpe:2.3:o:cisco:ios_xr:5.1.3
  • Cisco » Ios Xr » Version: 5.1.3.03
    cpe:2.3:o:cisco:ios_xr:5.1.3.03
  • Cisco » Ios Xr » Version: 5.1.4.base
    cpe:2.3:o:cisco:ios_xr:5.1.4.base
  • Cisco » Ios Xr » Version: 5.2.0
    cpe:2.3:o:cisco:ios_xr:5.2.0
  • Cisco » Ios Xr » Version: 5.2.0.base
    cpe:2.3:o:cisco:ios_xr:5.2.0.base
  • Cisco » Ios Xr » Version: 5.2.1
    cpe:2.3:o:cisco:ios_xr:5.2.1
  • Cisco » Ios Xr » Version: 5.2.2
    cpe:2.3:o:cisco:ios_xr:5.2.2
  • Cisco » Ios Xr » Version: 5.2.3
    cpe:2.3:o:cisco:ios_xr:5.2.3
  • Cisco » Ios Xr » Version: 5.2.4
    cpe:2.3:o:cisco:ios_xr:5.2.4
  • Cisco » Ios Xr » Version: 5.2.4.00
    cpe:2.3:o:cisco:ios_xr:5.2.4.00
  • Cisco » Ios Xr » Version: 5.2.5
    cpe:2.3:o:cisco:ios_xr:5.2.5
  • Cisco » Ios Xr » Version: 5.2.5.ce
    cpe:2.3:o:cisco:ios_xr:5.2.5.ce
  • Cisco » Ios Xr » Version: 5.2.6
    cpe:2.3:o:cisco:ios_xr:5.2.6
  • Cisco » Ios Xr » Version: 5.3.0
    cpe:2.3:o:cisco:ios_xr:5.3.0
  • Cisco » Ios Xr » Version: 5.3.0_base
    cpe:2.3:o:cisco:ios_xr:5.3.0_base
  • Cisco » Ios Xr » Version: 5.3.1
    cpe:2.3:o:cisco:ios_xr:5.3.1
  • Cisco » Ios Xr » Version: 5.3.2
    cpe:2.3:o:cisco:ios_xr:5.3.2
  • Cisco » Ios Xr » Version: 5.3.3
    cpe:2.3:o:cisco:ios_xr:5.3.3
  • Cisco » Ios Xr » Version: 5.3.4
    cpe:2.3:o:cisco:ios_xr:5.3.4
  • Cisco » Ios Xr » Version: 5.3.4.base
    cpe:2.3:o:cisco:ios_xr:5.3.4.base
  • Cisco » Ios Xr » Version: 5.4.3.ce
    cpe:2.3:o:cisco:ios_xr:5.4.3.ce
  • Cisco » Ios Xr » Version: 6.0.0
    cpe:2.3:o:cisco:ios_xr:6.0.0
  • Cisco » Ios Xr » Version: 6.0.1
    cpe:2.3:o:cisco:ios_xr:6.0.1
  • Cisco » Ios Xr » Version: 6.0.2
    cpe:2.3:o:cisco:ios_xr:6.0.2
  • Cisco » Ios Xr » Version: 6.0.2.01
    cpe:2.3:o:cisco:ios_xr:6.0.2.01
  • Cisco » Ios Xr » Version: 6.0.2.base
    cpe:2.3:o:cisco:ios_xr:6.0.2.base
  • Cisco » Ios Xr » Version: 6.0.4.base
    cpe:2.3:o:cisco:ios_xr:6.0.4.base
  • Cisco » Ios Xr » Version: 6.0_base
    cpe:2.3:o:cisco:ios_xr:6.0_base
  • Cisco » Ios Xr » Version: 6.1.0
    cpe:2.3:o:cisco:ios_xr:6.1.0
  • Cisco » Ios Xr » Version: 6.1.1
    cpe:2.3:o:cisco:ios_xr:6.1.1
  • Cisco » Ios Xr » Version: 6.1.2
    cpe:2.3:o:cisco:ios_xr:6.1.2
  • Cisco » Ios Xr » Version: 6.1.3
    cpe:2.3:o:cisco:ios_xr:6.1.3
  • Cisco » Ios Xr » Version: 6.1.3.01
    cpe:2.3:o:cisco:ios_xr:6.1.3.01
  • Cisco » Ios Xr » Version: 6.1.4
    cpe:2.3:o:cisco:ios_xr:6.1.4
  • Cisco » Ios Xr » Version: 6.1.4.base
    cpe:2.3:o:cisco:ios_xr:6.1.4.base
  • Cisco » Ios Xr » Version: 6.2.0
    cpe:2.3:o:cisco:ios_xr:6.2.0
  • Cisco » Ios Xr » Version: 6.2.1
    cpe:2.3:o:cisco:ios_xr:6.2.1
  • Cisco » Ios Xr » Version: 6.2.2
    cpe:2.3:o:cisco:ios_xr:6.2.2
  • Cisco » Ios Xr » Version: 6.2.25
    cpe:2.3:o:cisco:ios_xr:6.2.25
  • Cisco » Ios Xr » Version: 6.2.3
    cpe:2.3:o:cisco:ios_xr:6.2.3
  • Cisco » Ios Xr » Version: 6.2.3.base
    cpe:2.3:o:cisco:ios_xr:6.2.3.base
  • Cisco » Ios Xr » Version: 6.3.1
    cpe:2.3:o:cisco:ios_xr:6.3.1
  • Cisco » Ios Xr » Version: 6.3.15
    cpe:2.3:o:cisco:ios_xr:6.3.15
  • Cisco » Ios Xr » Version: 6.3.2
    cpe:2.3:o:cisco:ios_xr:6.3.2
  • Cisco » Ios Xr » Version: 6.3.3
    cpe:2.3:o:cisco:ios_xr:6.3.3
  • Cisco » Ios Xr » Version: 6.3.3_base
    cpe:2.3:o:cisco:ios_xr:6.3.3_base
  • Cisco » Ios Xr » Version: 6.4.0
    cpe:2.3:o:cisco:ios_xr:6.4.0
  • Cisco » Ios Xr » Version: 6.4.1
    cpe:2.3:o:cisco:ios_xr:6.4.1
  • Cisco » Ios Xr » Version: 6.4.1_base
    cpe:2.3:o:cisco:ios_xr:6.4.1_base
  • Cisco » Ios Xr » Version: 6.4.2
    cpe:2.3:o:cisco:ios_xr:6.4.2
  • Cisco » Ios Xr » Version: 6.4.3
    cpe:2.3:o:cisco:ios_xr:6.4.3
  • Cisco » Ios Xr » Version: 6.5.0
    cpe:2.3:o:cisco:ios_xr:6.5.0
  • Cisco » Ios Xr » Version: 6.5.1
    cpe:2.3:o:cisco:ios_xr:6.5.1
  • Cisco » Ios Xr » Version: 6.5.15
    cpe:2.3:o:cisco:ios_xr:6.5.15
  • Cisco » Ios Xr » Version: 6.5.2
    cpe:2.3:o:cisco:ios_xr:6.5.2
  • Cisco » Ios Xr » Version: 6.5.25
    cpe:2.3:o:cisco:ios_xr:6.5.25
  • Cisco » Ios Xr » Version: 6.5.26
    cpe:2.3:o:cisco:ios_xr:6.5.26
  • Cisco » Ios Xr » Version: 6.5.28
    cpe:2.3:o:cisco:ios_xr:6.5.28
  • Cisco » Ios Xr » Version: 6.5.29
    cpe:2.3:o:cisco:ios_xr:6.5.29
  • Cisco » Ios Xr » Version: 6.5.3
    cpe:2.3:o:cisco:ios_xr:6.5.3
  • Cisco » Ios Xr » Version: 6.5.31
    cpe:2.3:o:cisco:ios_xr:6.5.31
  • Cisco » Ios Xr » Version: 6.5.32
    cpe:2.3:o:cisco:ios_xr:6.5.32
  • Cisco » Ios Xr » Version: 6.5.33
    cpe:2.3:o:cisco:ios_xr:6.5.33
  • Cisco » Ios Xr » Version: 6.5.90
    cpe:2.3:o:cisco:ios_xr:6.5.90
  • Cisco » Ios Xr » Version: 6.5.92
    cpe:2.3:o:cisco:ios_xr:6.5.92
  • Cisco » Ios Xr » Version: 6.5.93
    cpe:2.3:o:cisco:ios_xr:6.5.93
  • Cisco » Ios Xr » Version: 6.6.0
    cpe:2.3:o:cisco:ios_xr:6.6.0
  • Cisco » Ios Xr » Version: 6.6.1
    cpe:2.3:o:cisco:ios_xr:6.6.1
  • Cisco » Ios Xr » Version: 6.6.11
    cpe:2.3:o:cisco:ios_xr:6.6.11
  • Cisco » Ios Xr » Version: 6.6.12
    cpe:2.3:o:cisco:ios_xr:6.6.12
  • Cisco » Ios Xr » Version: 6.6.2
    cpe:2.3:o:cisco:ios_xr:6.6.2
  • Cisco » Ios Xr » Version: 6.6.25
    cpe:2.3:o:cisco:ios_xr:6.6.25
  • Cisco » Ios Xr » Version: 6.6.3
    cpe:2.3:o:cisco:ios_xr:6.6.3
  • Cisco » Ios Xr » Version: 6.6.4
    cpe:2.3:o:cisco:ios_xr:6.6.4
  • Cisco » Ios Xr » Version: 6.7.1
    cpe:2.3:o:cisco:ios_xr:6.7.1
  • Cisco » Ios Xr » Version: 6.7.2
    cpe:2.3:o:cisco:ios_xr:6.7.2
  • Cisco » Ios Xr » Version: 6.7.3
    cpe:2.3:o:cisco:ios_xr:6.7.3
  • Cisco » Ios Xr » Version: 6.7.35
    cpe:2.3:o:cisco:ios_xr:6.7.35
  • Cisco » Ios Xr » Version: 6.7.4
    cpe:2.3:o:cisco:ios_xr:6.7.4
  • Cisco » Ios Xr » Version: 6.8.1
    cpe:2.3:o:cisco:ios_xr:6.8.1
  • Cisco » Ios Xr » Version: 6.8.2
    cpe:2.3:o:cisco:ios_xr:6.8.2
  • Cisco » Ios Xr » Version: 6.9.1
    cpe:2.3:o:cisco:ios_xr:6.9.1
  • Cisco » Ios Xr » Version: 6.9.2
    cpe:2.3:o:cisco:ios_xr:6.9.2
  • Cisco » Ios Xr » Version: 7.0.0
    cpe:2.3:o:cisco:ios_xr:7.0.0
  • Cisco » Ios Xr » Version: 7.0.1
    cpe:2.3:o:cisco:ios_xr:7.0.1
  • Cisco » Ios Xr » Version: 7.0.11
    cpe:2.3:o:cisco:ios_xr:7.0.11
  • Cisco » Ios Xr » Version: 7.0.2
    cpe:2.3:o:cisco:ios_xr:7.0.2
  • Cisco » Ios Xr » Version: 7.1.0
    cpe:2.3:o:cisco:ios_xr:7.1.0
  • Cisco » Ios Xr » Version: 7.1.1
    cpe:2.3:o:cisco:ios_xr:7.1.1
  • Cisco » Ios Xr » Version: 7.1.15
    cpe:2.3:o:cisco:ios_xr:7.1.15
  • Cisco » Ios Xr » Version: 7.1.2
    cpe:2.3:o:cisco:ios_xr:7.1.2
  • Cisco » Ios Xr » Version: 7.1.25
    cpe:2.3:o:cisco:ios_xr:7.1.25
  • Cisco » Ios Xr » Version: 7.1.3
    cpe:2.3:o:cisco:ios_xr:7.1.3
  • Cisco » Ios Xr » Version: 7.2.0
    cpe:2.3:o:cisco:ios_xr:7.2.0


Contact Us

Shodan ® - All rights reserved