[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_AsZgUAqb7c6qpcV6cevEf_aW_1g0vUcUiU9AQU83gw":3,"g5a-risk:CVE-2020-3524":276},{"success":4,"data":5,"meta":274},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":27,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":134,"references":135,"referencesCount":141,"weaknesses":142,"weaknessesCount":157,"isActivelyExploited":158,"cisaInfo":27,"otxData":27,"relatedBlogPosts":159,"seoMetadata":160,"configurations":185,"relatedVendorCves":272,"notableEvents":273},"CVE-2020-3524","What is CVE-2020-3524?","A vulnerability in the Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco 4000 Series Integrated Services Routers, Cisco ASR 920 Series Aggregation Services Routers, Cisco ASR 1000 Series Aggregation Services Routers, and Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, physical attacker to break the chain of trust and load a compromised software image on an affected device. The vulnerability is due to the presence of a debugging configuration option in the affected software. An attacker could exploit this vulnerability by connecting to an affected device through the console, forcing the device into ROMMON mode, and writing a malicious pattern using that specific option on the device. A successful exploit could allow the attacker to break the chain of trust and load a compromised software image on the affected device. A compromised software image is any software image that has not been digitally signed by Cisco.","A vulnerability in the Cisco IOS XE ROM Monitor (ROMMON) Software for Cisco 4000 Series Integrated Services Routers, Cisco ASR 920 Series Aggregation Service...","2020-09-24T18:15:21.62","2023-05-22T18:57:24.75",6.8,"CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":39,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","PHYSICAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,0.9,5.9,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":38,"ImpactScore":29},"ykramarz@cisco.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":37,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:P\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",6.4,0.5,[40],{"Source":17,"Type":18,"CVSSData":41,"BaseSeverity":26,"ExploitabilityScore":47,"ImpactScore":48,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":42,"VectorString":43,"AccessVector":44,"AccessComplexity":26,"Authentication":23,"ConfidentialityImpact":45,"IntegrityImpact":45,"AvailabilityImpact":45,"BaseScore":46,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","LOCAL","COMPLETE",6.9,3.4,10,0.00285,[49,49,49,49,49,49,49],"Medium",[53,58,62,65,68,71,74,77,80,83,86,89,92,95,98,101,104,107,110,113,116,119,122,125,128,131],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"cisco","ios_xe_rom_monitor","*","cpe:2.3:o:cisco:ios_xe_rom_monitor:*:*:*:*:*:*:*:*",{"vendor":54,"product":59,"version":60,"criteria":61,"vulnerable":4},"4221_integrated_services_router","-","cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",{"vendor":54,"product":63,"version":60,"criteria":64,"vulnerable":4},"4331_integrated_services_router","cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",{"vendor":54,"product":66,"version":60,"criteria":67,"vulnerable":4},"4431_integrated_services_router","cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",{"vendor":54,"product":69,"version":60,"criteria":70,"vulnerable":4},"4461_integrated_services_router","cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",{"vendor":54,"product":72,"version":60,"criteria":73,"vulnerable":4},"asr-920-10sz-pd","cpe:2.3:h:cisco:asr-920-10sz-pd:-:*:*:*:*:*:*:*",{"vendor":54,"product":75,"version":60,"criteria":76,"vulnerable":4},"asr-920-12cz-a","cpe:2.3:h:cisco:asr-920-12cz-a:-:*:*:*:*:*:*:*",{"vendor":54,"product":78,"version":60,"criteria":79,"vulnerable":4},"asr-920-12cz-d","cpe:2.3:h:cisco:asr-920-12cz-d:-:*:*:*:*:*:*:*",{"vendor":54,"product":81,"version":60,"criteria":82,"vulnerable":4},"asr-920-12sz-a","cpe:2.3:h:cisco:asr-920-12sz-a:-:*:*:*:*:*:*:*",{"vendor":54,"product":84,"version":60,"criteria":85,"vulnerable":4},"asr-920-12sz-d","cpe:2.3:h:cisco:asr-920-12sz-d:-:*:*:*:*:*:*:*",{"vendor":54,"product":87,"version":60,"criteria":88,"vulnerable":4},"asr-920-20sz-m","cpe:2.3:h:cisco:asr-920-20sz-m:-:*:*:*:*:*:*:*",{"vendor":54,"product":90,"version":60,"criteria":91,"vulnerable":4},"asr-920-24sz-im","cpe:2.3:h:cisco:asr-920-24sz-im:-:*:*:*:*:*:*:*",{"vendor":54,"product":93,"version":60,"criteria":94,"vulnerable":4},"asr-920-24sz-m","cpe:2.3:h:cisco:asr-920-24sz-m:-:*:*:*:*:*:*:*",{"vendor":54,"product":96,"version":60,"criteria":97,"vulnerable":4},"asr-920-24tz-m","cpe:2.3:h:cisco:asr-920-24tz-m:-:*:*:*:*:*:*:*",{"vendor":54,"product":99,"version":60,"criteria":100,"vulnerable":4},"asr-920-4sz-a","cpe:2.3:h:cisco:asr-920-4sz-a:-:*:*:*:*:*:*:*",{"vendor":54,"product":102,"version":60,"criteria":103,"vulnerable":4},"asr-920-4sz-d","cpe:2.3:h:cisco:asr-920-4sz-d:-:*:*:*:*:*:*:*",{"vendor":54,"product":105,"version":60,"criteria":106,"vulnerable":4},"asr_920u-12sz-im","cpe:2.3:h:cisco:asr_920u-12sz-im:-:*:*:*:*:*:*:*",{"vendor":54,"product":108,"version":60,"criteria":109,"vulnerable":4},"asr_1000-x","cpe:2.3:h:cisco:asr_1000-x:-:*:*:*:*:*:*:*",{"vendor":54,"product":111,"version":60,"criteria":112,"vulnerable":4},"asr_1001","cpe:2.3:h:cisco:asr_1001:-:*:*:*:*:*:*:*",{"vendor":54,"product":114,"version":60,"criteria":115,"vulnerable":4},"asr_1001-x","cpe:2.3:h:cisco:asr_1001-x:-:*:*:*:*:*:*:*",{"vendor":54,"product":117,"version":60,"criteria":118,"vulnerable":4},"asr_1002","cpe:2.3:h:cisco:asr_1002:-:*:*:*:*:*:*:*",{"vendor":54,"product":120,"version":60,"criteria":121,"vulnerable":4},"asr_1002-x","cpe:2.3:h:cisco:asr_1002-x:-:*:*:*:*:*:*:*",{"vendor":54,"product":123,"version":60,"criteria":124,"vulnerable":4},"asr_1004","cpe:2.3:h:cisco:asr_1004:-:*:*:*:*:*:*:*",{"vendor":54,"product":126,"version":60,"criteria":127,"vulnerable":4},"asr_1006","cpe:2.3:h:cisco:asr_1006:-:*:*:*:*:*:*:*",{"vendor":54,"product":129,"version":60,"criteria":130,"vulnerable":4},"asr_1013","cpe:2.3:h:cisco:asr_1013:-:*:*:*:*:*:*:*",{"vendor":54,"product":132,"version":60,"criteria":133,"vulnerable":4},"cbr8","cpe:2.3:h:cisco:cbr8:-:*:*:*:*:*:*:*",26,[136],{"url":137,"source":138,"tags":139},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-rommon-secboot-7JgVLVYC","Cisco",[140],"Vendor Advisory",1,[143,151],{"id":144,"name":145,"description":146,"extendedDescription":147,"status":148,"abstraction":149,"structure":150},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","Access control involves the use of several protection mechanisms such as:\nWhen any mechanism is not applied or otherwise fails, attackers can compromise the security of the product by gaining privileges, reading sensitive information, executing commands, evading detection, etc.\nThere are two distinct behaviors that can introduce access control weaknesses:","Incomplete","Pillar","Simple",{"id":152,"name":153,"description":154,"extendedDescription":155,"status":148,"abstraction":156,"structure":150},"CWE-862","Missing Authorization","The product does not perform an authorization check when an actor attempts to access a resource or perform an action.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are not applied, users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Class",2,false,[],{"title":161,"metaDescription":162,"keywords":163,"canonicalUrl":164,"structuredData":165},"What is CVE-2020-3524? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-3524, a medium severity cyber security vulnerability from 2020. A vulnerability in the Cisco IOS XE ROM Monitor (ROMMON) S...","CVE-2020-3524, CVE-2020-3524 vulnerability, CVE-2020-3524 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, cisco security, ios_xe_rom_monitor vulnerability, 4221_integrated_services_router vulnerability, 4331_integrated_services_router vulnerability, 4431_integrated_services_router vulnerability, 4461_integrated_services_router vulnerability","\u002Fwhat-is\u002Fcve-2020-3524",{"@context":166,"@type":167,"headline":161,"description":162,"datePublished":10,"dateModified":11,"author":168,"publisher":172,"about":176,"mainEntityOfPage":180,"articleSection":183,"keywords":184},"https:\u002F\u002Fschema.org","TechArticle",{"@type":169,"name":170,"url":171},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":169,"name":170,"url":171,"logo":173},{"@type":174,"url":175},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":177,"name":6,"description":178,"additionalType":179},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":181,"@id":182},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-3524","Cybersecurity","CVE-2020-3524, CVE-2020-3524 vulnerability, CVE-2020-3524 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[186,205,238,261],{"Operator":187,"Negate":27,"Nodes":188},"AND",[189,195],{"Operator":190,"Negate":27,"CPEMatch":191},"OR",[192],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":193,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":194,"VersionEndIncluding":27},"C8F3B87A-F5B7-4D43-81A8-D67C53EBBDFA","16.2\\(1r\\)",{"Operator":190,"Negate":27,"CPEMatch":196},[197,199,201,203],{"Vulnerable":27,"Criteria":61,"MatchCriteriaID":198,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"6C8AED7C-DDA3-4C29-BB95-6518C02C551A",{"Vulnerable":27,"Criteria":64,"MatchCriteriaID":200,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5419CB9F-241F-4431-914F-2659BE27BEA5",{"Vulnerable":27,"Criteria":67,"MatchCriteriaID":202,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5720462A-BE6B-4E84-A1A1-01E80BBA86AD",{"Vulnerable":27,"Criteria":70,"MatchCriteriaID":204,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E8B60888-6E2B-494E-AC65-83337661EE7D",{"Operator":187,"Negate":27,"Nodes":206},[207,212],{"Operator":190,"Negate":27,"CPEMatch":208},[209],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":210,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":211,"VersionEndIncluding":27},"181B1A1A-572C-424F-A1DD-96363BAB235C","15.6\\(18r\\)",{"Operator":190,"Negate":27,"CPEMatch":213},[214,216,218,220,222,224,226,228,230,232,234,236],{"Vulnerable":27,"Criteria":73,"MatchCriteriaID":215,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7FCA2DB2-AE09-4A99-90C9-60AE0CD9A035",{"Vulnerable":27,"Criteria":76,"MatchCriteriaID":217,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"11B83BED-5A49-4CF0-9827-AA291D01F60E",{"Vulnerable":27,"Criteria":79,"MatchCriteriaID":219,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2C1E8937-51D9-43E6-876E-5D39AD3D32C4",{"Vulnerable":27,"Criteria":82,"MatchCriteriaID":221,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2CA7AE63-99B9-4F28-8670-639A9B31E494",{"Vulnerable":27,"Criteria":85,"MatchCriteriaID":223,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E858B4AB-49B1-4F1C-8722-6E6911194924",{"Vulnerable":27,"Criteria":88,"MatchCriteriaID":225,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"60DFE60A-34C5-42C3-B539-57AAA9D4F684",{"Vulnerable":27,"Criteria":91,"MatchCriteriaID":227,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"A1B25F27-6527-46F8-9C1A-4B4F79F3E6C4",{"Vulnerable":27,"Criteria":94,"MatchCriteriaID":229,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"9FE70CCD-6062-45D8-8566-7C9E237E030F",{"Vulnerable":27,"Criteria":97,"MatchCriteriaID":231,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"375F9E12-A61B-4FD3-AE07-D4E686EB112A",{"Vulnerable":27,"Criteria":100,"MatchCriteriaID":233,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"D724F932-4548-429D-8CAA-E82C3435A194",{"Vulnerable":27,"Criteria":103,"MatchCriteriaID":235,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"0BCC94C3-9EEF-4600-BE82-8AEDEB0F1446",{"Vulnerable":27,"Criteria":106,"MatchCriteriaID":237,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BA179D79-07E7-4721-85BB-0C740B516B1F",{"Operator":187,"Negate":27,"Nodes":239},[240,243],{"Operator":190,"Negate":27,"CPEMatch":241},[242],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":193,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":194,"VersionEndIncluding":27},{"Operator":190,"Negate":27,"CPEMatch":244},[245,247,249,251,253,255,257,259],{"Vulnerable":27,"Criteria":109,"MatchCriteriaID":246,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FE2182E7-C813-4966-A36C-E648A9344299",{"Vulnerable":27,"Criteria":112,"MatchCriteriaID":248,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"ED7C321E-F083-4AB6-96A0-D6358980441E",{"Vulnerable":27,"Criteria":115,"MatchCriteriaID":250,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"09C913FF-63D5-43FB-8B39-598EF436BA5A",{"Vulnerable":27,"Criteria":118,"MatchCriteriaID":252,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E4376E56-A21C-4642-A85D-439C8E21CD7F",{"Vulnerable":27,"Criteria":121,"MatchCriteriaID":254,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"444F688F-79D0-4F22-B530-7BD520080B8F",{"Vulnerable":27,"Criteria":124,"MatchCriteriaID":256,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"55DD2272-10C2-43B9-9F13-6DC41DBE179B",{"Vulnerable":27,"Criteria":127,"MatchCriteriaID":258,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7428E0A8-1641-47FB-9CA9-34311DEF660D",{"Vulnerable":27,"Criteria":130,"MatchCriteriaID":260,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"854D9594-FE84-4E7B-BA21-A3287F2DC302",{"Operator":187,"Negate":27,"Nodes":262},[263,268],{"Operator":190,"Negate":27,"CPEMatch":264},[265],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":266,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":267,"VersionEndIncluding":27},"3896A4D0-A1B5-446A-B48C-22FEE9103F6F","16.4\\(1r\\)s",{"Operator":190,"Negate":27,"CPEMatch":269},[270],{"Vulnerable":27,"Criteria":133,"MatchCriteriaID":271,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2C9D165E-900B-4B96-9AFA-BD267F0C6D8E",[],[],{"lastModified":11,"cacheTime":275,"version":42},1792423007865,{"score":277,"band":278,"action":279,"scoredAt":280},21,"Low","Monitor","2026-10-16T06:49:29.049425+00:00"]