CVE-2020-3214: Cisco IOS XE

Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a user with root-level privileges. The vulnerability is due to insufficient validation of user-supplied content. This vulnerability could allow an attacker to load malicious software onto an affected device.

Affected products

• Cisco IOS XE: version 16.11.1 only; version 16.11.1a only; version 16.11.1b only; version 16.11.1c only; version 16.11.1s only; version 16.11.2 only; …

Published 2020-06-03. Last modified 2026-06-17.