Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
641
VMScore

CVE-2020-3209

Published: 03/06/2020 Updated: 10/06/2020
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 6.8 | Impact Score: 5.9 | Exploitability Score: 0.9
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Ios Xe

Vulnerability Summary

A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical malicious user to install and boot a malicious software image or execute unsigned binaries on an affected device. The vulnerability is due to an improper check on the area of code that manages the verification of the digital signatures of system image files during the initial boot process. An attacker could exploit this vulnerability by loading unsigned software on an affected device. A successful exploit could allow the malicious user to install and boot a malicious software image or execute unsigned binaries on the targeted device.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco ios xe 3.2.0se

cisco ios xe 3.2.0sg

cisco ios xe 3.2.1se

cisco ios xe 3.2.1sg

cisco ios xe 3.2.2se

cisco ios xe 3.2.2sg

cisco ios xe 3.2.3se

cisco ios xe 3.2.3sg

cisco ios xe 3.2.4sg

cisco ios xe 3.2.5sg

cisco ios xe 3.2.6sg

cisco ios xe 3.2.7sg

cisco ios xe 3.2.8sg

cisco ios xe 3.2.9sg

cisco ios xe 3.2.10sg

cisco ios xe 3.2.11sg

cisco ios xe 3.3.0se

cisco ios xe 3.3.0sg

cisco ios xe 3.3.0sq

cisco ios xe 3.3.0xo

cisco ios xe 3.3.1se

cisco ios xe 3.3.1sg

cisco ios xe 3.3.1sq

cisco ios xe 3.3.1xo

cisco ios xe 3.3.2se

cisco ios xe 3.3.2sg

cisco ios xe 3.3.2xo

cisco ios xe 3.3.3se

cisco ios xe 3.3.4se

cisco ios xe 3.3.5se

cisco ios xe 3.4.0sg

cisco ios xe 3.4.0sq

cisco ios xe 3.4.1sg

cisco ios xe 3.4.1sq

cisco ios xe 3.4.2sg

cisco ios xe 3.4.3sg

cisco ios xe 3.4.4sg

cisco ios xe 3.4.5sg

cisco ios xe 3.4.6sg

cisco ios xe 3.4.7sg

cisco ios xe 3.4.8sg

cisco ios xe 3.5.0e

cisco ios xe 3.5.0sq

cisco ios xe 3.5.1e

cisco ios xe 3.5.1sq

cisco ios xe 3.5.2e

cisco ios xe 3.5.2sq

cisco ios xe 3.5.3e

cisco ios xe 3.5.3sq

cisco ios xe 3.5.4sq

cisco ios xe 3.5.5sq

cisco ios xe 3.5.6sq

cisco ios xe 3.5.7sq

cisco ios xe 3.5.8sq

cisco ios xe 3.6.0ae

cisco ios xe 3.6.0be

cisco ios xe 3.6.0e

cisco ios xe 3.6.1e

cisco ios xe 3.6.2ae

cisco ios xe 3.6.3e

cisco ios xe 3.6.4e

cisco ios xe 3.6.5ae

cisco ios xe 3.6.5be

cisco ios xe 3.6.5e

cisco ios xe 3.6.6e

cisco ios xe 3.6.7ae

cisco ios xe 3.6.7be

cisco ios xe 3.6.7e

cisco ios xe 3.6.8e

cisco ios xe 3.6.9ae

cisco ios xe 3.6.9e

cisco ios xe 3.6.10e

cisco ios xe 3.7.0bs

cisco ios xe 3.7.0e

cisco ios xe 3.7.0s

cisco ios xe 3.7.1as

cisco ios xe 3.7.1e

cisco ios xe 3.7.1s

cisco ios xe 3.7.2e

cisco ios xe 3.7.2s

cisco ios xe 3.7.2ts

cisco ios xe 3.7.3e

cisco ios xe 3.7.3s

cisco ios xe 3.7.4as

cisco ios xe 3.7.4e

cisco ios xe 3.7.4s

cisco ios xe 3.7.5e

cisco ios xe 3.7.5s

cisco ios xe 3.7.6s

cisco ios xe 3.7.7s

cisco ios xe 3.7.8s

cisco ios xe 3.8.0e

cisco ios xe 3.8.0s

cisco ios xe 3.8.1e

cisco ios xe 3.8.1s

cisco ios xe 3.8.2e

cisco ios xe 3.8.2s

cisco ios xe 3.8.3e

cisco ios xe 3.8.4e

cisco ios xe 3.8.5ae

cisco ios xe 3.8.5e

cisco ios xe 3.8.6e

cisco ios xe 3.8.7e

cisco ios xe 3.8.8e

cisco ios xe 3.8.9e

cisco ios xe 3.9.0as

cisco ios xe 3.9.0e

cisco ios xe 3.9.0s

cisco ios xe 3.9.1as

cisco ios xe 3.9.1e

cisco ios xe 3.9.1s

cisco ios xe 3.9.2be

cisco ios xe 3.9.2e

cisco ios xe 3.9.2s

cisco ios xe 3.10.0ce

cisco ios xe 3.10.0e

cisco ios xe 3.10.0s

cisco ios xe 3.10.1ae

cisco ios xe 3.10.1e

cisco ios xe 3.10.1s

cisco ios xe 3.10.1se

cisco ios xe 3.10.2as

cisco ios xe 3.10.2e

cisco ios xe 3.10.2s

cisco ios xe 3.10.2ts

cisco ios xe 3.10.3e

cisco ios xe 3.10.3s

cisco ios xe 3.10.4s

cisco ios xe 3.10.5s

cisco ios xe 3.10.6s

cisco ios xe 3.10.7s

cisco ios xe 3.10.8as

cisco ios xe 3.10.8s

cisco ios xe 3.10.9s

cisco ios xe 3.10.10s

cisco ios xe 3.11.0e

cisco ios xe 3.11.0s

cisco ios xe 3.11.1e

cisco ios xe 3.11.1s

cisco ios xe 3.11.2s

cisco ios xe 3.11.3e

cisco ios xe 3.11.3s

cisco ios xe 3.11.4s

cisco ios xe 3.12.0as

cisco ios xe 3.12.0s

cisco ios xe 3.12.1s

cisco ios xe 3.12.2s

cisco ios xe 3.12.3s

cisco ios xe 3.12.4s

cisco ios xe 3.13.0as

cisco ios xe 3.13.0s

cisco ios xe 3.13.1s

cisco ios xe 3.13.2as

cisco ios xe 3.13.2s

cisco ios xe 3.13.3s

cisco ios xe 3.13.4s

cisco ios xe 3.13.5as

cisco ios xe 3.13.5s

cisco ios xe 3.13.6as

cisco ios xe 3.13.6bs

cisco ios xe 3.13.6s

cisco ios xe 3.13.7as

cisco ios xe 3.13.7s

cisco ios xe 3.13.8s

cisco ios xe 3.13.9s

cisco ios xe 3.13.10s

cisco ios xe 3.14.0s

cisco ios xe 3.14.1s

cisco ios xe 3.14.2s

cisco ios xe 3.14.3s

cisco ios xe 3.14.4s

cisco ios xe 3.15.0s

cisco ios xe 3.15.1cs

cisco ios xe 3.15.1s

cisco ios xe 3.15.2s

cisco ios xe 3.15.3s

cisco ios xe 3.15.4s

cisco ios xe 3.16.0as

cisco ios xe 3.16.0bs

cisco ios xe 3.16.0cs

cisco ios xe 3.16.0s

cisco ios xe 3.16.1as

cisco ios xe 3.16.1s

cisco ios xe 3.16.2as

cisco ios xe 3.16.2bs

cisco ios xe 3.16.2s

cisco ios xe 3.16.3as

cisco ios xe 3.16.3s

cisco ios xe 3.16.4as

cisco ios xe 3.16.4bs

cisco ios xe 3.16.4cs

cisco ios xe 3.16.4ds

cisco ios xe 3.16.4es

cisco ios xe 3.16.4gs

cisco ios xe 3.16.4s

cisco ios xe 3.16.5as

cisco ios xe 3.16.5bs

cisco ios xe 3.16.5s

cisco ios xe 3.16.6bs

cisco ios xe 3.16.6s

cisco ios xe 3.16.7as

cisco ios xe 3.16.7bs

cisco ios xe 3.16.7s

cisco ios xe 3.16.8s

cisco ios xe 3.16.9s

cisco ios xe 3.16.10s

cisco ios xe 3.17.0s

cisco ios xe 3.17.1as

cisco ios xe 3.17.1s

cisco ios xe 3.17.2s

cisco ios xe 3.17.3s

cisco ios xe 3.17.4s

cisco ios xe 3.18.0as

cisco ios xe 3.18.0s

cisco ios xe 3.18.0sp

cisco ios xe 3.18.1asp

cisco ios xe 3.18.1bsp

cisco ios xe 3.18.1csp

cisco ios xe 3.18.1gsp

cisco ios xe 3.18.1hsp

cisco ios xe 3.18.1isp

cisco ios xe 3.18.1s

cisco ios xe 3.18.1sp

cisco ios xe 3.18.2asp

cisco ios xe 3.18.2s

cisco ios xe 3.18.2sp

cisco ios xe 3.18.3asp

cisco ios xe 3.18.3bsp

cisco ios xe 3.18.3s

cisco ios xe 3.18.3sp

cisco ios xe 3.18.4s

cisco ios xe 3.18.4sp

cisco ios xe 3.18.5sp

cisco ios xe 3.18.6sp

cisco ios xe 3.18.7sp

cisco ios xe 3.18.8sp

cisco ios xe 16.1.1

cisco ios xe 16.1.2

cisco ios xe 16.1.3

cisco ios xe 16.2.1

cisco ios xe 16.2.2

cisco ios xe 16.3.1

cisco ios xe 16.3.1a

cisco ios xe 16.3.2

cisco ios xe 16.3.3

cisco ios xe 16.3.4

cisco ios xe 16.3.5

cisco ios xe 16.3.5b

cisco ios xe 16.3.6

cisco ios xe 16.3.7

cisco ios xe 16.3.8

cisco ios xe 16.4.1

cisco ios xe 16.4.2

cisco ios xe 16.4.3

cisco ios xe 16.5.1

cisco ios xe 16.5.1a

cisco ios xe 16.5.1b

cisco ios xe 16.5.2

cisco ios xe 16.5.3

cisco ios xe 16.6.1

cisco ios xe 16.6.2

cisco ios xe 16.6.3

cisco ios xe 16.6.4

cisco ios xe 16.6.4a

cisco ios xe 16.6.4s

cisco ios xe 16.6.5

cisco ios xe 16.6.5a

cisco ios xe 16.6.5b

cisco ios xe 16.6.6

cisco ios xe 16.6.7

cisco ios xe 16.6.7a

cisco ios xe 16.7.1

cisco ios xe 16.7.1a

cisco ios xe 16.7.1b

cisco ios xe 16.7.2

cisco ios xe 16.7.3

cisco ios xe 16.7.4

cisco ios xe 16.8.1

cisco ios xe 16.8.1a

cisco ios xe 16.8.1b

cisco ios xe 16.8.1c

cisco ios xe 16.8.1d

cisco ios xe 16.8.1e

cisco ios xe 16.8.1s

cisco ios xe 16.8.2

cisco ios xe 16.8.3

cisco ios xe 16.9.1

cisco ios xe 16.9.1a

cisco ios xe 16.9.1b

cisco ios xe 16.9.1c

cisco ios xe 16.9.1d

cisco ios xe 16.9.1s

cisco ios xe 16.9.2

cisco ios xe 16.9.2a

cisco ios xe 16.9.2s

cisco ios xe 16.9.3

cisco ios xe 16.9.3h

cisco ios xe 16.9.3s

cisco ios xe 16.9.4

cisco ios xe 16.9.4c

cisco ios xe 16.10.1

cisco ios xe 16.10.1a

cisco ios xe 16.10.1b

cisco ios xe 16.10.1c

cisco ios xe 16.10.1d

cisco ios xe 16.10.1e

cisco ios xe 16.10.1f

cisco ios xe 16.10.1g

cisco ios xe 16.10.1s

cisco ios xe 16.10.2

cisco ios xe 16.11.1

cisco ios xe 16.11.1a

cisco ios xe 16.11.1b

cisco ios xe 16.12.1y

Vendor Advisories

Cisco: Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability
A vulnerability in software image verification in Cisco IOS XE Software could allow an unauthenticated, physical attacker to install and boot a malicious software image or execute unsigned binaries on an affected device The vulnerability is due to an improper check on the area of code that manages the verification of the digital signatures of sys ...

ICS Advisories

Rockwell Automation Stratix Devices Containing Cisco IOS

References

CWE-347https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-digsig-bypass-FYQ3bmVqhttps://nvd.nist.govhttps://www.cisa.gov/uscert/ics/advisories/icsa-22-300-03https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-digsig-bypass-FYQ3bmVq
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook