Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.
Metrics
No CVSS v4.0
Attack Vector Network
Attack Complexity Low
Privileges Required Low
Scope Unchanged
Confidentiality Impact Low
Integrity Impact None
Availability Impact None
User Interaction None
No CVSS v3.0
Access Vector Network
Access Complexity Low
Authentication Single
Confidentiality Impact Partial
Integrity Impact None
Availability Impact Partial
AV:N/AC:L/Au:S/C:P/I:N/A:P
This CVE is not in the KEV list.
Exploitation none
Automatable no
Technical Impact partial
Affected Vendors & Products
Vendors | Products |
---|---|
Cisco |
|
Configuration 1 [-]
AND |
|
No data.
References
History
Wed, 13 Nov 2024 18:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2020-09-24T17:52:58.367771Z
Updated: 2024-11-13T17:57:42.435Z
Reserved: 2019-12-12T00:00:00
Link: CVE-2020-3475
Vulnrichment
Updated: 2024-08-04T07:37:54.875Z
NVD
Status : Modified
Published: 2020-09-24T18:15:19.713
Modified: 2024-11-21T05:31:08.717
Link: CVE-2020-3475
Redhat
No data.