CVE-2020-3530 is a vulnerability in Cisco IOS XR Software that allows an authenticated, local attacker to execute a command requiring administrative privileges, even with only read permissions. This is due to incorrect task group assignment mapping in the source code. The vulnerability has a CVSS score of 8.4 (HIGH), indicating a local attack vector with low complexity, potentially leading to high impact on integrity and availability, including device restarts. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has received minimal community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 7.1.2CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.