Vulnerability-Lookup

BDU:2025-10332

Vulnerability from fstec - Published: 07.05.2025

Title

Уязвимость операционных систем Cisco IOS сетевых устройств Catalyst 2960X, 2960XR, 2960CX и 3560CX Series Switches, связанная с некорректной проверкой криптографической подписи, позволяющая нарушителю выполнить произвольный код

Description

Уязвимость операционных систем Cisco IOS сетевых устройств Catalyst 2960X, 2960XR, 2960CX и 3560CX Series Switches связана с некорректной проверкой криптографической подписи. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код

Severity ?


                    
                      AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vendor

Cisco Systems Inc.

Software Name

Cisco IOS

Software Version

15.2(4)E (Cisco IOS), 15.2(2)E5b (Cisco IOS), 15.0(1)EY (Cisco IOS), 15.0(1)EY1 (Cisco IOS), 15.0(1)EY2 (Cisco IOS), 15.0(2)SE8 (Cisco IOS), 15.0(1)EX (Cisco IOS), 15.0(2)EX10 (Cisco IOS), 15.0(2)EX11 (Cisco IOS), 15.0(2)EX13 (Cisco IOS), 15.0(2)EX12 (Cisco IOS), 15.2(2)E (Cisco IOS), 15.2(3)E (Cisco IOS), 15.2(2)E1 (Cisco IOS), 15.2(3)E1 (Cisco IOS), 15.2(2)E2 (Cisco IOS), 15.2(2)E3 (Cisco IOS), 15.2(2a)E2 (Cisco IOS), 15.2(3)E2 (Cisco IOS), 15.2(3a)E (Cisco IOS), 15.2(3)E3 (Cisco IOS), 15.2(3m)E2 (Cisco IOS), 15.2(4)E1 (Cisco IOS), 15.2(2)E4 (Cisco IOS), 15.2(2)E5 (Cisco IOS), 15.2(4)E2 (Cisco IOS), 15.2(4m)E1 (Cisco IOS), 15.2(3)E4 (Cisco IOS), 15.2(5)E (Cisco IOS), 15.2(4)E3 (Cisco IOS), 15.2(2)E6 (Cisco IOS), 15.2(5)E1 (Cisco IOS), 15.2(4m)E3 (Cisco IOS), 15.2(3m)E8 (Cisco IOS), 15.2(2)E5a (Cisco IOS), 15.2(4n)E2 (Cisco IOS), 15.2(4o)E2 (Cisco IOS), 15.2(4)E4 (Cisco IOS), 15.2(2)E7 (Cisco IOS), 15.2(5)E2 (Cisco IOS), 15.2(4p)E1 (Cisco IOS), 15.2(6)E (Cisco IOS), 15.2(4)E5 (Cisco IOS), 15.2(4m)E2 (Cisco IOS), 15.2(4o)E3 (Cisco IOS), 15.2(4q)E1 (Cisco IOS), 15.2(6)E0a (Cisco IOS), 15.2(6)E0c (Cisco IOS), 15.0(2)EX (Cisco IOS), 15.0(2)EX1 (Cisco IOS), 15.0(2)EX2 (Cisco IOS), 15.0(2)EX3 (Cisco IOS), 15.0(2)EX4 (Cisco IOS), 15.0(2)EX5 (Cisco IOS), 15.0(2)EX6 (Cisco IOS), 15.0(2)EX7 (Cisco IOS), 15.0(2)EX8 (Cisco IOS), 15.0(2a)EX5 (Cisco IOS), 15.2(2b)E (Cisco IOS), 15.2(2a)E1 (Cisco IOS), 15.2(3m)E7 (Cisco IOS), 15.2(5b)E (Cisco IOS), 15.2(4s)E1 (Cisco IOS), 15.2(7)E (Cisco IOS), 12.2(6)I1 (Cisco IOS), 15.0(1)XO1 (Cisco IOS), 15.0(1)XO (Cisco IOS), 15.0(2)XO (Cisco IOS), 15.2(2)E8 (Cisco IOS), 15.2(6)E1 (Cisco IOS), 15.2(4)E6 (Cisco IOS), 15.2(2)E9 (Cisco IOS), 15.2(6)E1a (Cisco IOS), 15.2(4)E7 (Cisco IOS), 15.2(6)E1s (Cisco IOS), 15.2(2)E10 (Cisco IOS), 15.2(2)E9a (Cisco IOS), 15.2(4)EA7 (Cisco IOS), 15.2(4)EA8 (Cisco IOS), 15.2(4)EA9 (Cisco IOS), 15.0(2)SQD (Cisco IOS), 15.0(2)SQD1 (Cisco IOS), 15.0(2)SQD2 (Cisco IOS), 15.0(2)SQD3 (Cisco IOS), 15.0(2)SQD4 (Cisco IOS), 15.0(2)SQD5 (Cisco IOS), 15.0(2)SQD6 (Cisco IOS), 15.0(2)SQD7 (Cisco IOS), 15.0(2)SQD8 (Cisco IOS), 15.2(4)E8 (Cisco IOS), 15.1(3)SVR1 (Cisco IOS), 15.1(3)SVR2 (Cisco IOS), 15.1(3)SVR3 (Cisco IOS), 15.1(3)SVS (Cisco IOS), 15.1(3)SVS1 (Cisco IOS), 15.1(3)SVT1 (Cisco IOS), 15.1(3)SVT2 (Cisco IOS), 15.1(3)SVU1 (Cisco IOS), 15.2(4)E9 (Cisco IOS), 15.2(4)E10 (Cisco IOS), 15.2(4)E10A (Cisco IOS), 15.2(4)E10B (Cisco IOS), 15.2(4)EA9A (Cisco IOS), 15.2(6)E2 (Cisco IOS), 15.2(6)E2a (Cisco IOS), 15.2(6)E2b (Cisco IOS), 15.2(6)E3 (Cisco IOS), 15.2(6)Eb (Cisco IOS), 15.2(7)E0a (Cisco IOS), 15.2(7)E0b (Cisco IOS), 15.2(7)E0s (Cisco IOS), 15.2(7)E1 (Cisco IOS), 15.2(7)E1a (Cisco IOS), 15.2(7)E2 (Cisco IOS), 15.2(7)E2a (Cisco IOS), 15.2(7)E2b (Cisco IOS), 15.2(7)E3 (Cisco IOS), 15.2(7)E3k (Cisco IOS), 15.2(7)E5 (Cisco IOS), 15.2(7a)E0b (Cisco IOS), 15.2(7b)E0b (Cisco IOS), 15.2(8)E (Cisco IOS), 15.2(8)E1 (Cisco IOS), 15.2(7)E4 (Cisco IOS), 15.2(7)E6 (Cisco IOS), 15.2(8)E2 (Cisco IOS), 15.2(7)E7 (Cisco IOS), 15.2(8)E3 (Cisco IOS), 15.2(7)E8 (Cisco IOS), 15.2(8)E4 (Cisco IOS), 15.1(3)SVX (Cisco IOS), 15.1(3)SVX1 (Cisco IOS), 15.1(3)SVW (Cisco IOS), 15.1(3)SVW1 (Cisco IOS), 15.1(3)SVV1 (Cisco IOS), 15.1(3)SVV2 (Cisco IOS), 15.1(3)SVV3 (Cisco IOS), 15.1(3)SVV4 (Cisco IOS), 15.1(3)SVU10 (Cisco IOS), 15.1(3)SVU2 (Cisco IOS), 15.1(3)SVU11 (Cisco IOS), 15.1(3)SVU20 (Cisco IOS), 15.1(3)SVU21 (Cisco IOS), 15.1(3)SVT3 (Cisco IOS), 15.1(3)SVT4 (Cisco IOS), 15.1(3)SVR10 (Cisco IOS), 15.2(2)E10a (Cisco IOS), 15.2(4)E10c (Cisco IOS), 15.2(2)E10b (Cisco IOS), 15.2(4)E10d (Cisco IOS), 15.2(2)E10c (Cisco IOS), 15.2(7)E9 (Cisco IOS), 15.2(8)E5 (Cisco IOS), 15.2(7)E10 (Cisco IOS), 15.2(8)E6 (Cisco IOS)

Possible Mitigations

Использование рекомендаций: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq

Reference

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq

CWE

CWE-347

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "15.2(4)E (Cisco IOS), 15.2(2)E5b (Cisco IOS), 15.0(1)EY (Cisco IOS), 15.0(1)EY1 (Cisco IOS), 15.0(1)EY2 (Cisco IOS), 15.0(2)SE8 (Cisco IOS), 15.0(1)EX (Cisco IOS), 15.0(2)EX10 (Cisco IOS), 15.0(2)EX11 (Cisco IOS), 15.0(2)EX13 (Cisco IOS), 15.0(2)EX12 (Cisco IOS), 15.2(2)E (Cisco IOS), 15.2(3)E (Cisco IOS), 15.2(2)E1 (Cisco IOS), 15.2(3)E1 (Cisco IOS), 15.2(2)E2 (Cisco IOS), 15.2(2)E3 (Cisco IOS), 15.2(2a)E2 (Cisco IOS), 15.2(3)E2 (Cisco IOS), 15.2(3a)E (Cisco IOS), 15.2(3)E3 (Cisco IOS), 15.2(3m)E2 (Cisco IOS), 15.2(4)E1 (Cisco IOS), 15.2(2)E4 (Cisco IOS), 15.2(2)E5 (Cisco IOS), 15.2(4)E2 (Cisco IOS), 15.2(4m)E1 (Cisco IOS), 15.2(3)E4 (Cisco IOS), 15.2(5)E (Cisco IOS), 15.2(4)E3 (Cisco IOS), 15.2(2)E6 (Cisco IOS), 15.2(5)E1 (Cisco IOS), 15.2(4m)E3 (Cisco IOS), 15.2(3m)E8 (Cisco IOS), 15.2(2)E5a (Cisco IOS), 15.2(4n)E2 (Cisco IOS), 15.2(4o)E2 (Cisco IOS), 15.2(4)E4 (Cisco IOS), 15.2(2)E7 (Cisco IOS), 15.2(5)E2 (Cisco IOS), 15.2(4p)E1 (Cisco IOS), 15.2(6)E (Cisco IOS), 15.2(4)E5 (Cisco IOS), 15.2(4m)E2 (Cisco IOS), 15.2(4o)E3 (Cisco IOS), 15.2(4q)E1 (Cisco IOS), 15.2(6)E0a (Cisco IOS), 15.2(6)E0c (Cisco IOS), 15.0(2)EX (Cisco IOS), 15.0(2)EX1 (Cisco IOS), 15.0(2)EX2 (Cisco IOS), 15.0(2)EX3 (Cisco IOS), 15.0(2)EX4 (Cisco IOS), 15.0(2)EX5 (Cisco IOS), 15.0(2)EX6 (Cisco IOS), 15.0(2)EX7 (Cisco IOS), 15.0(2)EX8 (Cisco IOS), 15.0(2a)EX5 (Cisco IOS), 15.2(2b)E (Cisco IOS), 15.2(2a)E1 (Cisco IOS), 15.2(3m)E7 (Cisco IOS), 15.2(5b)E (Cisco IOS), 15.2(4s)E1 (Cisco IOS), 15.2(7)E (Cisco IOS), 12.2(6)I1 (Cisco IOS), 15.0(1)XO1 (Cisco IOS), 15.0(1)XO (Cisco IOS), 15.0(2)XO (Cisco IOS), 15.2(2)E8 (Cisco IOS), 15.2(6)E1 (Cisco IOS), 15.2(4)E6 (Cisco IOS), 15.2(2)E9 (Cisco IOS), 15.2(6)E1a (Cisco IOS), 15.2(4)E7 (Cisco IOS), 15.2(6)E1s (Cisco IOS), 15.2(2)E10 (Cisco IOS), 15.2(2)E9a (Cisco IOS), 15.2(4)EA7 (Cisco IOS), 15.2(4)EA8 (Cisco IOS), 15.2(4)EA9 (Cisco IOS), 15.0(2)SQD (Cisco IOS), 15.0(2)SQD1 (Cisco IOS), 15.0(2)SQD2 (Cisco IOS), 15.0(2)SQD3 (Cisco IOS), 15.0(2)SQD4 (Cisco IOS), 15.0(2)SQD5 (Cisco IOS), 15.0(2)SQD6 (Cisco IOS), 15.0(2)SQD7 (Cisco IOS), 15.0(2)SQD8 (Cisco IOS), 15.2(4)E8 (Cisco IOS), 15.1(3)SVR1 (Cisco IOS), 15.1(3)SVR2 (Cisco IOS), 15.1(3)SVR3 (Cisco IOS), 15.1(3)SVS (Cisco IOS), 15.1(3)SVS1 (Cisco IOS), 15.1(3)SVT1 (Cisco IOS), 15.1(3)SVT2 (Cisco IOS), 15.1(3)SVU1 (Cisco IOS), 15.2(4)E9 (Cisco IOS), 15.2(4)E10 (Cisco IOS), 15.2(4)E10A (Cisco IOS), 15.2(4)E10B (Cisco IOS), 15.2(4)EA9A (Cisco IOS), 15.2(6)E2 (Cisco IOS), 15.2(6)E2a (Cisco IOS), 15.2(6)E2b (Cisco IOS), 15.2(6)E3 (Cisco IOS), 15.2(6)Eb (Cisco IOS), 15.2(7)E0a (Cisco IOS), 15.2(7)E0b (Cisco IOS), 15.2(7)E0s (Cisco IOS), 15.2(7)E1 (Cisco IOS), 15.2(7)E1a (Cisco IOS), 15.2(7)E2 (Cisco IOS), 15.2(7)E2a (Cisco IOS), 15.2(7)E2b (Cisco IOS), 15.2(7)E3 (Cisco IOS), 15.2(7)E3k (Cisco IOS), 15.2(7)E5 (Cisco IOS), 15.2(7a)E0b (Cisco IOS), 15.2(7b)E0b (Cisco IOS), 15.2(8)E (Cisco IOS), 15.2(8)E1 (Cisco IOS), 15.2(7)E4 (Cisco IOS), 15.2(7)E6 (Cisco IOS), 15.2(8)E2 (Cisco IOS), 15.2(7)E7 (Cisco IOS), 15.2(8)E3 (Cisco IOS), 15.2(7)E8 (Cisco IOS), 15.2(8)E4 (Cisco IOS), 15.1(3)SVX (Cisco IOS), 15.1(3)SVX1 (Cisco IOS), 15.1(3)SVW (Cisco IOS), 15.1(3)SVW1 (Cisco IOS), 15.1(3)SVV1 (Cisco IOS), 15.1(3)SVV2 (Cisco IOS), 15.1(3)SVV3 (Cisco IOS), 15.1(3)SVV4 (Cisco IOS), 15.1(3)SVU10 (Cisco IOS), 15.1(3)SVU2 (Cisco IOS), 15.1(3)SVU11 (Cisco IOS), 15.1(3)SVU20 (Cisco IOS), 15.1(3)SVU21 (Cisco IOS), 15.1(3)SVT3 (Cisco IOS), 15.1(3)SVT4 (Cisco IOS), 15.1(3)SVR10 (Cisco IOS), 15.2(2)E10a (Cisco IOS), 15.2(4)E10c (Cisco IOS), 15.2(2)E10b (Cisco IOS), 15.2(4)E10d (Cisco IOS), 15.2(2)E10c (Cisco IOS), 15.2(7)E9 (Cisco IOS), 15.2(8)E5 (Cisco IOS), 15.2(7)E10 (Cisco IOS), 15.2(8)E6 (Cisco IOS)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "07.05.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "27.08.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "27.08.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-10332",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-20181",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco IOS",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Cisco Systems Inc. Cisco IOS 15.2(4)E , Cisco Systems Inc. Cisco IOS 15.2(2)E5b , Cisco Systems Inc. Cisco IOS 15.0(1)EY , Cisco Systems Inc. Cisco IOS 15.0(1)EY1 , Cisco Systems Inc. Cisco IOS 15.0(1)EY2 , Cisco Systems Inc. Cisco IOS 15.0(2)SE8 , Cisco Systems Inc. Cisco IOS 15.0(1)EX , Cisco Systems Inc. Cisco IOS 15.0(2)EX10 , Cisco Systems Inc. Cisco IOS 15.0(2)EX11 , Cisco Systems Inc. Cisco IOS 15.0(2)EX13 , Cisco Systems Inc. Cisco IOS 15.0(2)EX12 , Cisco Systems Inc. Cisco IOS 15.2(2)E , Cisco Systems Inc. Cisco IOS 15.2(3)E , Cisco Systems Inc. Cisco IOS 15.2(2)E1 , Cisco Systems Inc. Cisco IOS 15.2(3)E1 , Cisco Systems Inc. Cisco IOS 15.2(2)E2 , Cisco Systems Inc. Cisco IOS 15.2(2)E3 , Cisco Systems Inc. Cisco IOS 15.2(2a)E2 , Cisco Systems Inc. Cisco IOS 15.2(3)E2 , Cisco Systems Inc. Cisco IOS 15.2(3a)E , Cisco Systems Inc. Cisco IOS 15.2(3)E3 , Cisco Systems Inc. Cisco IOS 15.2(3m)E2 , Cisco Systems Inc. Cisco IOS 15.2(4)E1 , Cisco Systems Inc. Cisco IOS 15.2(2)E4 , Cisco Systems Inc. Cisco IOS 15.2(2)E5 , Cisco Systems Inc. Cisco IOS 15.2(4)E2 , Cisco Systems Inc. Cisco IOS 15.2(4m)E1 , Cisco Systems Inc. Cisco IOS 15.2(3)E4 , Cisco Systems Inc. Cisco IOS 15.2(5)E , Cisco Systems Inc. Cisco IOS 15.2(4)E3 , Cisco Systems Inc. Cisco IOS 15.2(2)E6 , Cisco Systems Inc. Cisco IOS 15.2(5)E1 , Cisco Systems Inc. Cisco IOS 15.2(4m)E3 , Cisco Systems Inc. Cisco IOS 15.2(3m)E8 , Cisco Systems Inc. Cisco IOS 15.2(2)E5a , Cisco Systems Inc. Cisco IOS 15.2(4n)E2 , Cisco Systems Inc. Cisco IOS 15.2(4o)E2 , Cisco Systems Inc. Cisco IOS 15.2(4)E4 , Cisco Systems Inc. Cisco IOS 15.2(2)E7 , Cisco Systems Inc. Cisco IOS 15.2(5)E2 , Cisco Systems Inc. Cisco IOS 15.2(4p)E1 , Cisco Systems Inc. Cisco IOS 15.2(6)E , Cisco Systems Inc. Cisco IOS 15.2(4)E5 , Cisco Systems Inc. Cisco IOS 15.2(4m)E2 , Cisco Systems Inc. Cisco IOS 15.2(4o)E3 , Cisco Systems Inc. Cisco IOS 15.2(4q)E1 , Cisco Systems Inc. Cisco IOS 15.2(6)E0a , Cisco Systems Inc. Cisco IOS 15.2(6)E0c , Cisco Systems Inc. Cisco IOS 15.0(2)EX , Cisco Systems Inc. Cisco IOS 15.0(2)EX1 , Cisco Systems Inc. Cisco IOS 15.0(2)EX2 , Cisco Systems Inc. Cisco IOS 15.0(2)EX3 , Cisco Systems Inc. Cisco IOS 15.0(2)EX4 , Cisco Systems Inc. Cisco IOS 15.0(2)EX5 , Cisco Systems Inc. Cisco IOS 15.0(2)EX6 , Cisco Systems Inc. Cisco IOS 15.0(2)EX7 , Cisco Systems Inc. Cisco IOS 15.0(2)EX8 , Cisco Systems Inc. Cisco IOS 15.0(2a)EX5 , Cisco Systems Inc. Cisco IOS 15.2(2b)E , Cisco Systems Inc. Cisco IOS 15.2(2a)E1 , Cisco Systems Inc. Cisco IOS 15.2(3m)E7 , Cisco Systems Inc. Cisco IOS 15.2(5b)E , Cisco Systems Inc. Cisco IOS 15.2(4s)E1 , Cisco Systems Inc. Cisco IOS 15.2(7)E , Cisco Systems Inc. Cisco IOS 12.2(6)I1 , Cisco Systems Inc. Cisco IOS 15.0(1)XO1 , Cisco Systems Inc. Cisco IOS 15.0(1)XO , Cisco Systems Inc. Cisco IOS 15.0(2)XO , Cisco Systems Inc. Cisco IOS 15.2(2)E8 , Cisco Systems Inc. Cisco IOS 15.2(6)E1 , Cisco Systems Inc. Cisco IOS 15.2(4)E6 , Cisco Systems Inc. Cisco IOS 15.2(2)E9 , Cisco Systems Inc. Cisco IOS 15.2(6)E1a , Cisco Systems Inc. Cisco IOS 15.2(4)E7 , Cisco Systems Inc. Cisco IOS 15.2(6)E1s , Cisco Systems Inc. Cisco IOS 15.2(2)E10 , Cisco Systems Inc. Cisco IOS 15.2(2)E9a , Cisco Systems Inc. Cisco IOS 15.2(4)EA7 , Cisco Systems Inc. Cisco IOS 15.2(4)EA8 , Cisco Systems Inc. Cisco IOS 15.2(4)EA9 , Cisco Systems Inc. Cisco IOS 15.0(2)SQD , Cisco Systems Inc. Cisco IOS 15.0(2)SQD1 , Cisco Systems Inc. Cisco IOS 15.0(2)SQD2 , Cisco Systems Inc. Cisco IOS 15.0(2)SQD3 , Cisco Systems Inc. Cisco IOS 15.0(2)SQD4 , Cisco Systems Inc. Cisco IOS 15.0(2)SQD5 , Cisco Systems Inc. Cisco IOS 15.0(2)SQD6 , Cisco Systems Inc. Cisco IOS 15.0(2)SQD7 , Cisco Systems Inc. Cisco IOS 15.0(2)SQD8 , Cisco Systems Inc. Cisco IOS 15.2(4)E8 , Cisco Systems Inc. Cisco IOS 15.1(3)SVR1 , Cisco Systems Inc. Cisco IOS 15.1(3)SVR2 , Cisco Systems Inc. Cisco IOS 15.1(3)SVR3 , Cisco Systems Inc. Cisco IOS 15.1(3)SVS , Cisco Systems Inc. Cisco IOS 15.1(3)SVS1 , Cisco Systems Inc. Cisco IOS 15.1(3)SVT1 , Cisco Systems Inc. Cisco IOS 15.1(3)SVT2 , Cisco Systems Inc. Cisco IOS 15.1(3)SVU1 , Cisco Systems Inc. Cisco IOS 15.2(4)E9 , Cisco Systems Inc. Cisco IOS 15.2(4)E10 , Cisco Systems Inc. Cisco IOS 15.2(4)E10A , Cisco Systems Inc. Cisco IOS 15.2(4)E10B , Cisco Systems Inc. Cisco IOS 15.2(4)EA9A , Cisco Systems Inc. Cisco IOS 15.2(6)E2 , Cisco Systems Inc. Cisco IOS 15.2(6)E2a , Cisco Systems Inc. Cisco IOS 15.2(6)E2b , Cisco Systems Inc. Cisco IOS 15.2(6)E3 , Cisco Systems Inc. Cisco IOS 15.2(6)Eb , Cisco Systems Inc. Cisco IOS 15.2(7)E0a , Cisco Systems Inc. Cisco IOS 15.2(7)E0b , Cisco Systems Inc. Cisco IOS 15.2(7)E0s , Cisco Systems Inc. Cisco IOS 15.2(7)E1 , Cisco Systems Inc. Cisco IOS 15.2(7)E1a , Cisco Systems Inc. Cisco IOS 15.2(7)E2 , Cisco Systems Inc. Cisco IOS 15.2(7)E2a , Cisco Systems Inc. Cisco IOS 15.2(7)E2b , Cisco Systems Inc. Cisco IOS 15.2(7)E3 , Cisco Systems Inc. Cisco IOS 15.2(7)E3k , Cisco Systems Inc. Cisco IOS 15.2(7)E5 , Cisco Systems Inc. Cisco IOS 15.2(7a)E0b , Cisco Systems Inc. Cisco IOS 15.2(7b)E0b , Cisco Systems Inc. Cisco IOS 15.2(8)E , Cisco Systems Inc. Cisco IOS 15.2(8)E1 , Cisco Systems Inc. Cisco IOS 15.2(7)E4 , Cisco Systems Inc. Cisco IOS 15.2(7)E6 , Cisco Systems Inc. Cisco IOS 15.2(8)E2 , Cisco Systems Inc. Cisco IOS 15.2(7)E7 , Cisco Systems Inc. Cisco IOS 15.2(8)E3 , Cisco Systems Inc. Cisco IOS 15.2(7)E8 , Cisco Systems Inc. Cisco IOS 15.2(8)E4 , Cisco Systems Inc. Cisco IOS 15.1(3)SVX , Cisco Systems Inc. Cisco IOS 15.1(3)SVX1 , Cisco Systems Inc. Cisco IOS 15.1(3)SVW , Cisco Systems Inc. Cisco IOS 15.1(3)SVW1 , Cisco Systems Inc. Cisco IOS 15.1(3)SVV1 , Cisco Systems Inc. Cisco IOS 15.1(3)SVV2 , Cisco Systems Inc. Cisco IOS 15.1(3)SVV3 , Cisco Systems Inc. Cisco IOS 15.1(3)SVV4 , Cisco Systems Inc. Cisco IOS 15.1(3)SVU10 , Cisco Systems Inc. Cisco IOS 15.1(3)SVU2 , Cisco Systems Inc. Cisco IOS 15.1(3)SVU11 , Cisco Systems Inc. Cisco IOS 15.1(3)SVU20 , Cisco Systems Inc. Cisco IOS 15.1(3)SVU21 , Cisco Systems Inc. Cisco IOS 15.1(3)SVT3 , Cisco Systems Inc. Cisco IOS 15.1(3)SVT4 , Cisco Systems Inc. Cisco IOS 15.1(3)SVR10 , Cisco Systems Inc. Cisco IOS 15.2(2)E10a , Cisco Systems Inc. Cisco IOS 15.2(4)E10c , Cisco Systems Inc. Cisco IOS 15.2(2)E10b , Cisco Systems Inc. Cisco IOS 15.2(4)E10d , Cisco Systems Inc. Cisco IOS 15.2(2)E10c , Cisco Systems Inc. Cisco IOS 15.2(7)E9 , Cisco Systems Inc. Cisco IOS 15.2(8)E5 , Cisco Systems Inc. Cisco IOS 15.2(7)E10 , Cisco Systems Inc. Cisco IOS 15.2(8)E6 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Catalyst 2960X, 2960XR, 2960CX \u0438 3560CX Series Switches, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 (CWE-347)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Catalyst 2960X, 2960XR, 2960CX \u0438 3560CX Series Switches \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-347",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)"
}

CVE-2025-20181 (GCVE-0-2025-20181)

Vulnerability from cvelistv5 – Published: 2025-05-07 17:35 – Updated: 2025-05-07 19:45

Summary

A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time. Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

Severity ?

6.8 (Medium)


                        
                          CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

cisco

References

URL

Tags

https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

	Vendor	Product	Version
	Cisco	IOS	Affected: 15.0(1)XO1 Affected: 15.0(1)XO Affected: 15.0(2)XO Affected: 15.0(1)EY Affected: 15.0(1)EY1 Affected: 15.0(1)EY2 Affected: 15.0(2)SE8 Affected: 15.0(1)EX Affected: 15.0(2)EX Affected: 15.0(2)EX1 Affected: 15.0(2)EX2 Affected: 15.0(2)EX3 Affected: 15.0(2)EX4 Affected: 15.0(2)EX5 Affected: 15.0(2)EX8 Affected: 15.0(2a)EX5 Affected: 15.0(2)EX10 Affected: 15.0(2)EX11 Affected: 15.0(2)EX13 Affected: 15.0(2)EX12 Affected: 15.2(2)E Affected: 15.2(3)E Affected: 15.2(2)E1 Affected: 15.2(4)E Affected: 15.2(3)E1 Affected: 15.2(2)E2 Affected: 15.2(2a)E1 Affected: 15.2(2)E3 Affected: 15.2(2a)E2 Affected: 15.2(3)E2 Affected: 15.2(3a)E Affected: 15.2(3)E3 Affected: 15.2(4)E1 Affected: 15.2(2)E4 Affected: 15.2(2)E5 Affected: 15.2(4)E2 Affected: 15.2(3)E4 Affected: 15.2(5)E Affected: 15.2(4)E3 Affected: 15.2(2)E6 Affected: 15.2(5)E1 Affected: 15.2(5b)E Affected: 15.2(2)E5a Affected: 15.2(2)E5b Affected: 15.2(4)E4 Affected: 15.2(2)E7 Affected: 15.2(5)E2 Affected: 15.2(6)E Affected: 15.2(4)E5 Affected: 15.2(2)E8 Affected: 15.2(6)E0a Affected: 15.2(6)E1 Affected: 15.2(6)E0c Affected: 15.2(4)E6 Affected: 15.2(6)E2 Affected: 15.2(2)E9 Affected: 15.2(4)E7 Affected: 15.2(7)E Affected: 15.2(2)E10 Affected: 15.2(4)E8 Affected: 15.2(6)E2a Affected: 15.2(6)E2b Affected: 15.2(7)E1 Affected: 15.2(7)E0a Affected: 15.2(7)E0b Affected: 15.2(7)E0s Affected: 15.2(6)E3 Affected: 15.2(4)E9 Affected: 15.2(7)E2 Affected: 15.2(7a)E0b Affected: 15.2(4)E10 Affected: 15.2(7)E3 Affected: 15.2(7)E1a Affected: 15.2(7b)E0b Affected: 15.2(7)E2a Affected: 15.2(4)E10a Affected: 15.2(7)E4 Affected: 15.2(7)E3k Affected: 15.2(8)E Affected: 15.2(8)E1 Affected: 15.2(7)E5 Affected: 15.2(7)E6 Affected: 15.2(8)E2 Affected: 15.2(4)E10d Affected: 15.2(7)E7 Affected: 15.2(8)E3 Affected: 15.2(7)E8 Affected: 15.2(8)E4 Affected: 15.2(7)E9 Affected: 15.2(8)E5 Affected: 15.2(8)E6 Affected: 15.2(7)E10 Affected: 15.2(6)EB Affected: 15.2(4)EA7 Affected: 15.2(4)EA8 Affected: 15.2(4)EA9 Affected: 15.2(4)EA9a Affected: 15.0(2)SQD Affected: 15.0(2)SQD1 Affected: 15.0(2)SQD2 Affected: 15.0(2)SQD3 Affected: 15.0(2)SQD4 Affected: 15.0(2)SQD5 Affected: 15.0(2)SQD6 Affected: 15.0(2)SQD7 Affected: 15.0(2)SQD8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-20181",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-07T18:56:17.739877Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-07T19:45:02.742Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "IOS",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "15.0(1)XO1"
            },
            {
              "status": "affected",
              "version": "15.0(1)XO"
            },
            {
              "status": "affected",
              "version": "15.0(2)XO"
            },
            {
              "status": "affected",
              "version": "15.0(1)EY"
            },
            {
              "status": "affected",
              "version": "15.0(1)EY1"
            },
            {
              "status": "affected",
              "version": "15.0(1)EY2"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE8"
            },
            {
              "status": "affected",
              "version": "15.0(1)EX"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX1"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX2"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX3"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX4"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX5"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX8"
            },
            {
              "status": "affected",
              "version": "15.0(2a)EX5"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX10"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX11"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX13"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX12"
            },
            {
              "status": "affected",
              "version": "15.2(2)E"
            },
            {
              "status": "affected",
              "version": "15.2(3)E"
            },
            {
              "status": "affected",
              "version": "15.2(2)E1"
            },
            {
              "status": "affected",
              "version": "15.2(4)E"
            },
            {
              "status": "affected",
              "version": "15.2(3)E1"
            },
            {
              "status": "affected",
              "version": "15.2(2)E2"
            },
            {
              "status": "affected",
              "version": "15.2(2a)E1"
            },
            {
              "status": "affected",
              "version": "15.2(2)E3"
            },
            {
              "status": "affected",
              "version": "15.2(2a)E2"
            },
            {
              "status": "affected",
              "version": "15.2(3)E2"
            },
            {
              "status": "affected",
              "version": "15.2(3a)E"
            },
            {
              "status": "affected",
              "version": "15.2(3)E3"
            },
            {
              "status": "affected",
              "version": "15.2(4)E1"
            },
            {
              "status": "affected",
              "version": "15.2(2)E4"
            },
            {
              "status": "affected",
              "version": "15.2(2)E5"
            },
            {
              "status": "affected",
              "version": "15.2(4)E2"
            },
            {
              "status": "affected",
              "version": "15.2(3)E4"
            },
            {
              "status": "affected",
              "version": "15.2(5)E"
            },
            {
              "status": "affected",
              "version": "15.2(4)E3"
            },
            {
              "status": "affected",
              "version": "15.2(2)E6"
            },
            {
              "status": "affected",
              "version": "15.2(5)E1"
            },
            {
              "status": "affected",
              "version": "15.2(5b)E"
            },
            {
              "status": "affected",
              "version": "15.2(2)E5a"
            },
            {
              "status": "affected",
              "version": "15.2(2)E5b"
            },
            {
              "status": "affected",
              "version": "15.2(4)E4"
            },
            {
              "status": "affected",
              "version": "15.2(2)E7"
            },
            {
              "status": "affected",
              "version": "15.2(5)E2"
            },
            {
              "status": "affected",
              "version": "15.2(6)E"
            },
            {
              "status": "affected",
              "version": "15.2(4)E5"
            },
            {
              "status": "affected",
              "version": "15.2(2)E8"
            },
            {
              "status": "affected",
              "version": "15.2(6)E0a"
            },
            {
              "status": "affected",
              "version": "15.2(6)E1"
            },
            {
              "status": "affected",
              "version": "15.2(6)E0c"
            },
            {
              "status": "affected",
              "version": "15.2(4)E6"
            },
            {
              "status": "affected",
              "version": "15.2(6)E2"
            },
            {
              "status": "affected",
              "version": "15.2(2)E9"
            },
            {
              "status": "affected",
              "version": "15.2(4)E7"
            },
            {
              "status": "affected",
              "version": "15.2(7)E"
            },
            {
              "status": "affected",
              "version": "15.2(2)E10"
            },
            {
              "status": "affected",
              "version": "15.2(4)E8"
            },
            {
              "status": "affected",
              "version": "15.2(6)E2a"
            },
            {
              "status": "affected",
              "version": "15.2(6)E2b"
            },
            {
              "status": "affected",
              "version": "15.2(7)E1"
            },
            {
              "status": "affected",
              "version": "15.2(7)E0a"
            },
            {
              "status": "affected",
              "version": "15.2(7)E0b"
            },
            {
              "status": "affected",
              "version": "15.2(7)E0s"
            },
            {
              "status": "affected",
              "version": "15.2(6)E3"
            },
            {
              "status": "affected",
              "version": "15.2(4)E9"
            },
            {
              "status": "affected",
              "version": "15.2(7)E2"
            },
            {
              "status": "affected",
              "version": "15.2(7a)E0b"
            },
            {
              "status": "affected",
              "version": "15.2(4)E10"
            },
            {
              "status": "affected",
              "version": "15.2(7)E3"
            },
            {
              "status": "affected",
              "version": "15.2(7)E1a"
            },
            {
              "status": "affected",
              "version": "15.2(7b)E0b"
            },
            {
              "status": "affected",
              "version": "15.2(7)E2a"
            },
            {
              "status": "affected",
              "version": "15.2(4)E10a"
            },
            {
              "status": "affected",
              "version": "15.2(7)E4"
            },
            {
              "status": "affected",
              "version": "15.2(7)E3k"
            },
            {
              "status": "affected",
              "version": "15.2(8)E"
            },
            {
              "status": "affected",
              "version": "15.2(8)E1"
            },
            {
              "status": "affected",
              "version": "15.2(7)E5"
            },
            {
              "status": "affected",
              "version": "15.2(7)E6"
            },
            {
              "status": "affected",
              "version": "15.2(8)E2"
            },
            {
              "status": "affected",
              "version": "15.2(4)E10d"
            },
            {
              "status": "affected",
              "version": "15.2(7)E7"
            },
            {
              "status": "affected",
              "version": "15.2(8)E3"
            },
            {
              "status": "affected",
              "version": "15.2(7)E8"
            },
            {
              "status": "affected",
              "version": "15.2(8)E4"
            },
            {
              "status": "affected",
              "version": "15.2(7)E9"
            },
            {
              "status": "affected",
              "version": "15.2(8)E5"
            },
            {
              "status": "affected",
              "version": "15.2(8)E6"
            },
            {
              "status": "affected",
              "version": "15.2(7)E10"
            },
            {
              "status": "affected",
              "version": "15.2(6)EB"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA7"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA8"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA9"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA9a"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD1"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD2"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD3"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD4"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD5"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD6"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD7"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\r\n\r This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time.\r\n\r Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "cvssV3_0"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T17:35:31.850Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-c2960-3560-sboot-ZtqADrHq",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
        }
      ],
      "source": {
        "advisory": "cisco-sa-c2960-3560-sboot-ZtqADrHq",
        "defects": [
          "CSCvd75918"
        ],
        "discovery": "INTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2025-20181",
    "datePublished": "2025-05-07T17:35:31.850Z",
    "dateReserved": "2024-10-10T19:15:13.225Z",
    "dateUpdated": "2025-05-07T19:45:02.742Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

BDU:2025-10332

CVE-2025-20181 (GCVE-0-2025-20181)

Tags

Sightings

Nomenclature