Cisco Ios Xe Software 3.7.0S
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:cisco_ios_xe_software_3.7.0s:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Cisco Ios Xe Software 3.7.0S (2492cbdf-7362-5b17-baab-efd22a010622) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-3423 |
vulnerable | 2026-06-08 05:25:55.242847 |
Cisco IOS XE Software Arbitrary Code Execution Vulnerability
MEDIUM (5.1)
A vulnerability in the implementation of the Lua interpreter that is integrated in Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code with root privileges on the underlying Linux operating system (OS) of an affected device. The vulnerability is due to insufficient restrictions on Lua function calls within the context of user-supplied Lua scripts. An attacker with valid administrative credentials could exploit this vulnerability by submitting a malicious Lua script. When this file is processed, an exploitable buffer overflow condition could occur. A successful exploit could allow the attacker to execute arbitrary code with root privileges on the underlying Linux OS of the affected device.
Published: 2020-09-24T18:01:23.330Z
Updated: 2024-11-13T17:56:35.377Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.