Cisco IOS XR -bit Preboot eXecution Environment访问控制错误漏洞
CVE编号
CVE-2020-3284利用情况
暂无补丁情况
N/A披露时间
2020-11-07漏洞描述
Cisco IOS XR是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。 Cisco IOS XR 64-bit Preboot eXecution Environment 存在安全漏洞，该漏洞使攻击者可以通过Cisco IOS XR 64位的Preboot eXecution Environment绕过限制，以提升其特权解决建议
目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-pxe-unsign-code-exec-qAa78fD2
参考链接 |
|
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s... |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | cisco | a99-rp2-se_firmware | * | Up to (excluding) 14.35 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | a99-rp2-tr_firmware | * | Up to (excluding) 14.35 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | a99-rp3-se_firmware | * | Up to (excluding) 30.23 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | a99-rp3-tr_firmware | * | Up to (excluding) 30.23 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | a99-rsp-se_firmware | * | Up to (excluding) 16.14 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | a99-rsp-tr_firmware | * | Up to (excluding) 16.14 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | a9k-rsp5-se_firmware | * | Up to (excluding) 31.20 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | a9k-rsp5-tr_firmware | * | Up to (excluding) 31.20 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | a9k-rsp880-lt-se_firmware | * | Up to (excluding) 17.34 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | a9k-rsp880-lt-tr_firmware | * | Up to (excluding) 17.34 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | a9k-rsp880-se_firmware | * | Up to (excluding) 10.65 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | a9k-rsp880-tr_firmware | * | Up to (excluding) 10.65 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | asr-9901-rp_firmware | * | Up to (excluding) 22.20 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ios_xr | * | Up to (excluding) 1.12 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ios_xr | * | Up to (excluding) 1.21 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ios_xr | * | Up to (excluding) 6.5.2 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ios_xr | * | Up to (excluding) 6.6.25 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ios_xr | * | Up to (excluding) 7.2.1 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ios_xr | * | From (including) 7.0.0 | Up to (excluding) 7.0.2 | ||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | n540-12z20g-sys-a/d_firmware | * | Up to (excluding) 1.15 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | n540-24z8q2c-m_firmware | * | Up to (excluding) 1.15 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | n540-28z4c-sys-a/d_firmware | * | Up to (excluding) 1.15 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | n540-acc-sys_firmware | * | Up to (excluding) 1.15 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | n540x-12z16g-sys-a/d_firmware | * | Up to (excluding) 1.15 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | n540x-16z4g8q2c-a/d_firmware | * | Up to (excluding) 1.15 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | n560-4-sys_firmware | * | Up to (excluding) 0.14 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | n560-7-sys_firmware | * | Up to (excluding) 0.14 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | nc55-rp-e_firmware | * | Up to (excluding) 1.21 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | nc55-rp_firmware | * | Up to (excluding) 9.30 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-5501-se_firmware | * | Up to (excluding) 1.21 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-5501_firmware | * | Up to (excluding) 6.6.25 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-5502-se_firmware | * | Up to (excluding) 1.21 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-5502_firmware | * | Up to (excluding) 1.21 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-55a1-24h_firmware | * | Up to (excluding) 1.12 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-55a1-24q6h-s_firmware | * | Up to (excluding) 6.6.25 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-55a1-36h-se-s_firmware | * | Up to (excluding) 1.12 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-55a1-36h-s_firmware | * | Up to (excluding) 1.12 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-55a2-mod-hd-s_firmware | * | Up to (excluding) 1.12 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-55a2-mod-hx-s_firmware | * | Up to (excluding) 1.12 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-55a2-mod-se-h-s_firmware | * | Up to (excluding) 1.12 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-55a2-mod-se-s_firmware | * | Up to (excluding) 6.6.25 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs-55a2-mod-s_firmware | * | Up to (excluding) 1.12 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs1001_firmware | * | Up to (excluding) 14.60 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs1002_firmware | * | Up to (excluding) 14.60 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs1004_firmware | * | Up to (excluding) 14.60 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs5001_firmware | * | Up to (excluding) 1.13 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs5002_firmware | * | Up to (excluding) 1.13 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs5011_firmware | * | Up to (excluding) 1.14 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | ncs55-a1-48q6h_firmware | * | Up to (excluding) 1.12 | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | a99-rp2-se | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | a99-rp2-tr | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | a99-rp3-se | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | a99-rp3-tr | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | a99-rsp-se | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | a99-rsp-tr | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | a9k-rsp5-se | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | a9k-rsp5-tr | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | a9k-rsp880-lt-se | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | a9k-rsp880-lt-tr | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | a9k-rsp880-se | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | a9k-rsp880-tr | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | asr-9901-rp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | n540-12z20g-sys-a/d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | n540-24z8q2c-m | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | n540-28z4c-sys-a/d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | n540-acc-sys | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | n540x-12z16g-sys-a/d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | n540x-16z4g8q2c-a/d | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | n560-4-sys | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | n560-7-sys | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nc55-rp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nc55-rp-e | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-5501 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-5501-se | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-5502 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-5502-se | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-55a1-24h | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-55a1-24q6h-s | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-55a1-36h-s | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-55a1-36h-se-s | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-55a2-mod-hd-s | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-55a2-mod-hx-s | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-55a2-mod-s | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-55a2-mod-se-h-s | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs-55a2-mod-se-s | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs1001 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs1002 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs1004 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs5001 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs5002 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs5011 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | ncs55-a1-48q6h | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 高
| CWE-ID | 漏洞类型 |
| NVD-CWE-noinfo |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论