CVE-2020-3229

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Web Management Software (affected versions not specified)

Description A vulnerability in the Role Based Access Control (RBAC) functionality could allow a Read-Only authenticated, remote attacker to execute commands or configuration changes as an Admin user. The issue is due to incorrect handling of RBAC for the administration GUI. An attacker could exploit this by sending a modified HTTP request to the affected device, potentially allowing a Read-Only user to execute CLI commands or configuration changes as if they were an Admin user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.