CVE-2020-3475: Cisco IOS

High severity, CVSS 8.1. EPSS: 1.4% chance of exploitation in the next 30 days.

Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to gain unauthorized read access to sensitive data or cause the web management software to hang or crash, resulting in a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco IOS: affected versions not specified

Published 2020-09-24. Last modified 2026-06-17.