CVE-2020-3204 — CVE & Security Advisory Radar

🎯 CVE-2020-3204 MEDIUM 6.7 🔥 EPSS 38% 🇪🇺 EUVD

📄 .md Alle CVEs anzeigen ✕

CVE-2020-3204 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC credentials to execute arbitrary code on the underlying operating system (OS) with root privileges. The vulnerability is due to insufficient input validation of data passed to the Tcl interpreter. An attacker could exploit this vulnerability by loading malicious Tcl code on an affected

A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC credentials to execute arbitrary code on the underlying operating system (OS) with root privileges. The vulnerability is due to insufficient input validation of data passed to the Tcl interpreter. An attacker could exploit this vulnerability by loading malicious Tcl code on an affected device. A successful exploit could allow the attacker to cause memory corruption or execute the code with root privileges on the underlying OS of the affected device.

Klassifikation & Betroffenheit:

Cisco Cisco IOS 12.2(53)SE1 n/acisco ios 12.2\(6\)i1cisco ios 12.2\(33\)srecisco ios 12.2\(33\)sre0acisco ios 12.2\(33\)sre1cisco ios 12.2\(33\)sre2cisco ios 12.2\(33\)sre3cisco ios 12.2\(33\)sre4

Improper Restriction of Operations within the Bounds of a Memory Buffer 🎯 High

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

🛡️ Empfohlene Mitigation: Use a language that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid. For example, many languages that perform their own memory management, such as Java and Perl, are not subject to buffer overflows. Other languages, such as Ada and C#, typically provide overflow prot…

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-10 · Buffer Overflow via Environment Variable… (High) CAPEC-14 · Client-side Injection-induced Buffer Ove… (High) CAPEC-24 · Filter Failure through Buffer Overflow (High) CAPEC-42 · MIME Conversion (High) CAPEC-44 · Overflow Binary Resource File (Very High) CAPEC-45 · Buffer Overflow via Symbolic Links (High) CAPEC-100 · Overflow Buffers (Very High) CAPEC-123 · Buffer Manipulation (Very High)

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-20045 8.2 CVE-2024-20458 8.2 CVE-2024-20337 8.2 CVE-2024-20255 8.2 CVE-2023-20063 8.2

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

🔗 tools.cisco.com/security/center/content/CiscoSecurityAdvi…

Ausnutzungs-Zeitleiste:

Reserviert 2020

Veröffentlicht 06/2020

Heute 16.09.

CVSS-Vektor-Analyse: 6.7

AV · Angriffsvektor Lokal

AC · Komplexität Gering

PR · Privilegien Hoch

UI · Interaktion Keine

S · Scope Unverändert

C · Vertraulichkeit Hoch

I · Integrität Hoch

A · Verfügbarkeit Hoch

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Veröffentlicht:03.06.2020

Aktualisiert:17.06.2026 03:17

Assigner (CNA):cisco

EUVD-ID:EUVD-2020-24475

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-119: Memory Corruption ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Management-Interface vom Internet trennen und ACLs auf vertrauenswürdige IPs beschränken.

Tier	2026-08-29	2026-09-16
≥90 %	4	0
≥50 %	4	0
≥10 %	3	0
<10 %	304	300

6.7 MEDIUM

🇪🇺 EUVD

EPSS

38%

CVE-2020-3204 💻 Lokal 🔐 Admin-Rechte nötig

Cisco

CVE-2020-3204 | A vulnerability in the Tool Command Language (Tcl) interpreter of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker with privileged EXEC credentials to execute arbitrary code on the underlying operating system (OS) with root privileges. The vulnerability is due to insufficient input validation of data passed to the Tcl interpreter. An attacker could exploit this vulnerability by loading malicious Tcl code on an affected

CWE-119: Memory Corruption ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Management-Interface vom Internet trennen und ACLs auf vertrauenswürdige IPs beschränken.

03.06.2020

🛡️ Details ➔

Zero-Day & Vulnerability Intelligence Hub