CVE-2020-3477

A vulnerability in the CLI parser of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to access files from the flash: filesystem. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker could exploit this vulnerability by using a specific command at the command line. A successful exploit could allow the attacker to obtain read-only access to files that are located on the flash: filesystem that otherwise might not have been accessible.

• CWE-20
• CWE-863

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-info-disclosure-V4BmJBNFVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-info-disclosure-V4BmJBNFVendor Advisory

Published

Sep 24, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3471A vulnerability in Cisco Webex Meetings and Cisco Webex Meet…6.5
• CVE-2020-3472A vulnerability in the contacts feature of Cisco Webex Meeti…5
• CVE-2020-3473A vulnerability in task group assignment for a specific CLI …7.8
• CVE-2020-3474Multiple vulnerabilities in the web management framework of …8.1
• CVE-2020-3475Multiple vulnerabilities in the web management framework of …8.1
• CVE-2020-3476A vulnerability in the CLI implementation of a specific comm…6
• CVE-2020-3478A vulnerability in the REST API of Cisco Enterprise NFV Infr…8.1
• CVE-2020-3479A vulnerability in the implementation of Multiprotocol Borde…7.5
• CVE-2020-3480Multiple vulnerabilities in the Zone-Based Firewall feature …8.6
• CVE-2020-3481A vulnerability in the EGG archive parsing module in Clam An…7.5
• CVE-2020-3482A vulnerability in the Traversal Using Relays around NAT (TU…6.5
• CVE-2020-3483Duo has identified and fixed an issue with the Duo Network G…6.3