CVE-2020-3234— Cisco 809 Industrial ISRs、829 Industrial ISRs和Cisco CGR1000 IOS Software 信任管理问题漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2020-3234の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco IOS Software for Cisco Industrial Routers Virtual Device Server Static Credentials Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability in the virtual console authentication of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an authenticated but low-privileged, local attacker to log in to the Virtual Device Server (VDS) of an affected device by using a set of default credentials. The vulnerability is due to the presence of weak, hard-coded credentials. An attacker could exploit this vulnerability by authenticating to the targeted device and then connecting to VDS through the device’s virtual console by using the static credentials. A successful exploit could allow the attacker to access the Linux shell of VDS as the root user.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
使用硬编码的凭证
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Cisco 809 Industrial ISRs、829 Industrial ISRs和Cisco CGR1000 IOS Software 信任管理问题漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco 1000 Series Connected Grid Routers（CGR1000）是美国思科（Cisco）公司的一款1000系列互联网格路由器。 Cisco 809 Industrial ISRs、829 Industrial ISRs和Cisco CGR1000中的IOS Software的虚拟控制台身份验证存在信任管理问题漏洞，该漏洞源于程序使用了保密性较弱的硬编码凭证。本地攻击者可通过进行身份验证并借助静态凭证通过虚拟控制台连接到VDS利用该漏洞以root用户身份访问Linux sh
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco IOS 12.2(60)EZ16 | n/a | - |
II. CVE-2020-3234の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2020-3234のインテリジェンス情報
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-iot-vds-cred-uPMp9zbYvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2020-3234
Same Patch Batch · Cisco · 2020-06-03 · 50 CVEs total
| CVE-2020-3353 | 5.9 MEDIUM | Cisco Identity Services Engine Denial of Service Vulnerability |
| CVE-2020-3319 | 3.3 LOW | Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerabilit |
| CVE-2020-3322 | 3.3 LOW | Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerabilit |
| CVE-2020-3321 | 3.3 LOW | Cisco Webex Network Recording Player and Cisco Webex Player Denial of Service Vulnerabilit |
| CVE-2020-3333 | Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerabi | |
| CVE-2020-3257 | Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabil | |
| CVE-2020-3267 | Cisco Unified Contact Center Express Improper API Authorization Vulnerability | |
| CVE-2020-3258 | Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities | |
| CVE-2020-3281 | Cisco Digital Network Architecture Center Information Disclosure Vulnerability | |
| CVE-2020-3200 | Cisco IOS and IOS XE Software Secure Shell Denial of Service Vulnerability | |
| CVE-2020-3199 | Cisco IOx Application Environment for IOS Software for Cisco Industrial Routers Vulnerabil | |
| CVE-2020-3198 | Cisco IOS Software for Cisco Industrial Routers Arbitrary Code Execution Vulnerabilities | |
| CVE-2020-3228 | Cisco IOS, IOS XE, and NX-OS Software Security Group Tag Exchange Protocol Denial of Servi | |
| CVE-2020-3231 | Cisco IOS Software for Catalyst 2960-L Series Switches and Catalyst CDB-8P Switches 802.1X | |
| CVE-2020-3230 | Cisco IOS and IOS XE Software Internet Key Exchange Version 2 Denial of Service Vulnerabil | |
| CVE-2020-3229 | Cisco IOS XE Software Web UI Privilege Escalation Vulnerability | |
| CVE-2020-3227 | Cisco IOx for IOS XE Software Privilege Escalation Vulnerability | |
| CVE-2020-3226 | Cisco IOS and IOS XE Software Session Initiation Protocol Denial of Service Vulnerability | |
| CVE-2020-3224 | Cisco IOS XE Software Web UI Command Injection Vulnerability | |
| CVE-2020-3232 | Cisco ASR 920 Series Aggregation Services Router Model 12SZ-IM SNMP Denial of Service Vuln |
Showing 20 of 50 CVEs. View all on vendor page →
IV. 関連脆弱性
同じ製品: Cisco IOS 12.2(60)EZ16
- CVE-2020-3258
Cisco IOS Software for Cisco Industrial Routers Arbitrary Co - CVE-2020-3257
Cisco IOx Application Environment for IOS Software for Cisco - CVE-2020-3199
Cisco IOx Application Environment for IOS Software for Cisco - CVE-2020-3198
Cisco IOS Software for Cisco Industrial Routers Arbitrary Co - CVE-2020-3210
Cisco IOS Software for Cisco Industrial Routers Virtual Devi
同じベンダー: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
同じ弱点: CWE-798
- CVE-2026-7414
Hardcoded credentials in Yarbo robot firmware - CVE-2026-8032
PicoTronica e-Clinic Healthcare System ECHS echs.js hard-cod - CVE-2026-32834
Easy PayPal Events & Tickets 1.3 Authentication Bypass via Q - CVE-2026-42376
D-Link DIR-456U A1 Hardcoded Telnet Backdoor Credentials - CVE-2026-42375
D-Link DIR-600L A1 Hardcoded Telnet Backdoor Credentials
V. CVE-2020-3234へのコメント
まだコメントはありません