CVE-2020-3477

CVE-2020-3477 is a medium-severity vulnerability affecting Cisco IOS and IOS XE Software, specifically within the CLI parser of various Cisco 2600 series routers. An authenticated, local attacker can exploit insufficient restrictions during a specific command's execution to gain read-only access to files on the flash: filesystem that would otherwise be inaccessible. The CVSS score is 5.5, indicating a low attack complexity and privilege requirement, with a high impact on confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.