CVE-2020-3545— Cisco FXOS 缓冲区错误漏洞

Cisco FXOS Software Buffer Overflow Vulnerability

A vulnerability in Cisco FXOS Software could allow an authenticated, local attacker with administrative credentials to cause a buffer overflow condition. The vulnerability is due to incorrect bounds checking of values that are parsed from a specific file. An attacker could exploit this vulnerability by supplying a crafted file that, when it is processed, may cause a stack-based buffer overflow. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system with root privileges. An attacker would need to have valid administrative credentials to exploit this vulnerability.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

内存缓冲区边界内操作的限制不恰当

Cisco FXOS 缓冲区错误漏洞

Cisco FXOS Software是美国思科（Cisco）公司的一套运行在思科安全设备中的防火墙软件。 Cisco FXOS存在缓冲区错误漏洞，本地攻击者可借助特制的文件利用该漏洞造成缓冲区溢出并执行任意代码。

N/A

N/A