Improper Verification of Cryptographic Signature in Cisco IOS XE - CVE-2020-3209

Vulnerability identifier: #VU68872

CSH Severity: Low

CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-3209

CWE-ID: CWE-347

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to compromise the target system.

The vulnerability exists due to due to an improper check on the area of code that manages the verification of the digital signatures of system image files during the initial boot process. An attacker with physical access can install and boot a malicious software image or execute unsigned binaries on the target device.

Cisco IOS XE
Stratix 5800

Install updates from vendor's website.

Cisco IOS XE - addressed in versions Amsterdam 17.1.1, Everest-16.6.7, Fuji-16.9.4, Gibraltar 16.11.1, Gibraltar 16.11.1a, Gibraltar 16.11.1b, Gibraltar 16.11.1c, Gibraltar 16.11.1s, Gibraltar 16.12.1b, Gibraltar 16.12.1c, Gibraltar 16.12.1d, Gibraltar 16.12.1e, Gibraltar 16.12.1s, 15.2(04)E10, 16.3(8.50), 16.3.9, 16.3.10, 16.3.11, 16.6(6.21), 16.6.7, 16.6.7a, 16.6.8, 16.6.9, 16.6.10, 16.9.3a, 16.9(3.54), 16.9.4, 16.9.5, 16.9.6, 16.9.7, 16.9.8, 16.9.8a, 16.10.1g, 16.10(1.191), 16.10.3, 16.11(0.143), 16.11.1, 16.11.1c, 16.11.1s, 16.11.1a, 16.11.1b, 16.11(1.34), 16.11.2, 16.12(0.25), 16.12(0.134), 16.12.1, 16.12.1c, 16.12.1d, 16.12.1e, 16.12.1s, 16.12.1t, 16.12.1w, 16.12.1x, 16.12.1y, 16.12.1z, 16.12.1z1, 16.12.1z2, 16.12.1a, 16.12.1b, 16.12.2, 16.12.2s, 16.12.2t, 16.12.2a, 16.12.3, 16.12.3s, 16.12.3a, 16.12.4, 16.12.4a, 16.12.5, 16.12.5a, 16.12.5 b, 16.12.6, 16.12.6a, 16.12.7, 16.12.8, 17.1(0.27), 17.1.1, 17.1.1s, 17.1.1t, 17.1.1a, 17.1.2, 17.1.3, 17.2.1, 17.2.1v, 17.2.1a, 17.2.1r, 17.2.2, 17.2.3, 17.3.1, 17.3.1w, 17.3.1x, 17.3.1z, 17.3.1a, 17.3.2, 17.3.2a, 17.3.3, 17.3.4, 17.3.4c, 17.3.4a, 17.3.4 b, 17.3.5, 17.3.5a, 17.3.5b, 17.3.6, 17.4.1, 17.4.1a, 17.4.1b, 17.4.2, 17.5.1, 17.5.1a, 17.6.1, 17.6.1w, 17.6.1x, 17.6.1y, 17.6.1z, 17.6.1a, 17.6.2, 17.6.3, 17.6.3a, 17.6.4, 17.7.1, 17.7.1a, 17.7.2, 17.8.1, 17.8.1a, 17.9.1, 17.9.1a
Stratix 5800 - update to 16.12.01

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-digsig-bypass-FYQ3bmVq

• Improper Verification of Cryptographic Signature in Cisco IOS XE
• Multiple vulnerabilities in Rockwell Automation Stratix 5800 switches containing Cisco IOS