CVE-2020-3503

CVE-2020-3503 is a medium-severity vulnerability in Cisco IOS XE Software, allowing an authenticated, local attacker to gain read and write access to critical system files due to insufficient file system permissions. An attacker could exploit this by accessing the device's guest shell, potentially viewing or modifying restricted information or configurations. The CVSS score is 6.0, indicating high confidentiality and integrity impacts with no availability impact. There is no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.