A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device. The vulnerability is due to improper input sanitization. An attacker could exploit this vulnerability by uploading a crafted file to the web UI of an affected device. A successful exploit could allow the attacker to inject and execute arbitrary commands with root privileges on the device.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2020-06-03T17:41:04.105542Z
Updated: 2024-09-17T00:26:03.041Z
Reserved: 2019-12-12T00:00:00
Link: CVE-2020-3212
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-06-03T18:15:19.277
Modified: 2020-06-10T15:39:58.653
Link: CVE-2020-3212
Redhat
No data.