CVE:CVE-2020-3284
CNNVD:CNNVD-202011-343
Cisco IOS XR是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。
Cisco IOS XR 64-bit Preboot eXecution Environment 存在访问控制错误漏洞，该漏洞使攻击者可以通过Cisco IOS XR 64位的Preboot eXecution Environment绕过限制，以提升其特权
solution:Upgrade cisco a9k-rsp880-se_firmware to a higher version than 10.65,and avoid the version (,10.65); Upgrade cisco ios_xr to a higher version than 6.5.2,7.2.1,7.0.2,6.6.25,1.21,1.12,and avoid the version (,6.5.2),(,7.2.1),[7.0.0,7.0.2),(,6.6.25),(,1.21),(,1.12); Upgrade cisco a9k-rsp880-tr_firmware to a higher version than 10.65,and avoid the version (,10.65); Upgrade cisco a99-rp2-se_firmware to a higher version than 14.35,and avoid the version (,14.35); Upgrade cisco a99-rp2-tr_firmware to a higher version than 14.35,and avoid the version (,14.35); Upgrade cisco a99-rsp-se_firmware to a higher version than 16.14,and avoid the version (,16.14); Upgrade cisco a99-rsp-tr_firmware to a higher version than 16.14,and avoid the version (,16.14); Upgrade cisco a9k-rsp880-lt-se_firmware to a higher version than 17.34,and avoid the version (,17.34); Upgrade cisco a9k-rsp880-lt-tr_firmware to a higher version than 17.34,and avoid the version (,17.34); Upgrade cisco asr-9901-rp_firmware to a higher version than 22.20,and avoid the version (,22.20); Upgrade cisco a99-rp3-se_firmware to a higher version than 30.23,and avoid the version (,30.23); Upgrade cisco a99-rp3-tr_firmware to a higher version than 30.23,and avoid the version (,30.23); Upgrade cisco a9k-rsp5-se_firmware to a higher version than 31.20,and avoid the version (,31.20); Upgrade cisco a9k-rsp5-tr_firmware to a higher version than 31.20,and avoid the version (,31.20); Upgrade cisco ncs1001_firmware to a higher version than 14.60,and avoid the version (,14.60); Upgrade cisco ncs1002_firmware to a higher version than 14.60,and avoid the version (,14.60); Upgrade cisco ncs1004_firmware to a higher version than 14.60,and avoid the version (,14.60); Upgrade cisco n540-12z20g-sys-a/d_firmware to a higher version than 1.15,and avoid the version (,1.15); Upgrade cisco n540-24z8q2c-m_firmware to a higher version than 1.15,and avoid the version (,1.15); Upgrade cisco n540-28z4c-sys-a/d_firmware to a higher version than 1.15,and avoid the version (,1.15); Upgrade cisco n540-acc-sys_firmware to a higher version than 1.15,and avoid the version (,1.15); Upgrade cisco n540x-16z4g8q2c-a/d_firmware to a higher version than 1.15,and avoid the version (,1.15); Upgrade cisco n540x-12z16g-sys-a/d_firmware to a higher version than 1.15,and avoid the version (,1.15); Upgrade cisco n560-4-sys_firmware to a higher version than 0.14,and avoid the version (,0.14); Upgrade cisco n560-7-sys_firmware to a higher version than 0.14,and avoid the version (,0.14); Upgrade cisco ncs5001_firmware to a higher version than 1.13,and avoid the version (,1.13); Upgrade cisco ncs5002_firmware to a higher version than 1.13,and avoid the version (,1.13); Upgrade cisco ncs5011_firmware to a higher version than 1.14,and avoid the version (,1.14); Upgrade cisco nc55-rp_firmware to a higher version than 9.30,and avoid the version (,9.30); Upgrade cisco nc55-rp-e_firmware to a higher version than 1.21,and avoid the version (,1.21); Upgrade cisco ncs-5501_firmware to a higher version than 6.6.25,and avoid the version (,6.6.25); Upgrade cisco ncs-5501-se_firmware to a higher version than 1.21,and avoid the version (,1.21); Upgrade cisco ncs-5502_firmware to a higher version than 1.21,and avoid the version (,1.21); Upgrade cisco ncs-5502-se_firmware to a higher version than 1.21,and avoid the version (,1.21); Upgrade cisco ncs-55a2-mod-s_firmware to a higher version than 1.12,and avoid the version (,1.12); Upgrade cisco ncs-55a2-mod-hd-s_firmware to a higher version than 1.12,and avoid the version (,1.12); Upgrade cisco ncs-55a2-mod-hx-s_firmware to a higher version than 1.12,and avoid the version (,1.12); Upgrade cisco ncs-55a2-mod-se-s_firmware to a higher version than 6.6.25,and avoid the version (,6.6.25); Upgrade cisco ncs-55a2-mod-se-h-s_firmware to a higher version than 1.12,and avoid the version (,1.12); Upgrade cisco ncs-55a1-36h-se-s_firmware to a higher version than 1.12,and avoid the version (,1.12); Upgrade cisco ncs-55a1-36h-s_firmware to a higher version than 1.12,and avoid the version (,1.12); Upgrade cisco ncs-55a1-24h_firmware to a higher version than 1.12,and avoid the version (,1.12); Upgrade cisco ncs55-a1-48q6h_firmware to a higher version than 1.12,and avoid the version (,1.12); Upgrade cisco ncs-55a1-24q6h-s_firmware to a higher version than 6.6.25,and avoid the version (,6.6.25)