Vulnerability-Lookup

BDU:2025-10332 (CVE-2025-20181)

Vulnerability from fstec – Published: 2025-08-27 – Updated: 2025-08-27 – View on bdu.fstec.ru Fixed

Title

Уязвимость операционных систем Cisco IOS сетевых устройств Catalyst 2960X, 2960XR, 2960CX и 3560CX Series Switches, связанная с некорректной проверкой криптографической подписи, позволяющая нарушителю выполнить произвольный код

Summary

Уязвимость операционных систем Cisco IOS сетевых устройств Catalyst 2960X, 2960XR, 2960CX и 3560CX Series Switches связана с некорректной проверкой криптографической подписи. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код

Severity

7.2 (High) CVSS 2.0


                      
                        AV:L/AC:L/Au:N/C:C/I:C/A:C

6.8 (Medium) CVSS 3.1


                      
                        CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Spoofing

Incidents

Being clarified

Remediation

Software update

CWE

CWE-347 - Некорректная проверка криптографической подписи

Aliases

CVE-2025-20181

References

1 reference

URL
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/c…

Impacted products

1 product from 2 vendors

Vendors

Cisco Systems, Inc.

Products

Cisco IOS

Versions

15.2(4)E (Cisco IOS), 15.2(2)E5b (Cisco IOS), 15.0(1)EY (Cisco IOS), 15.0(1)EY1 (Cisco IOS), 15.0(1)EY2 (Cisco IOS), 15.0(2)SE8 (Cisco IOS), 15.0(1)EX (Cisco IOS), 15.0(2)EX10 (Cisco IOS), 15.0(2)EX11 (Cisco IOS), 15.0(2)EX13 (Cisco IOS), 15.0(2)EX12 (Cisco IOS), 15.2(2)E (Cisco IOS), 15.2(3)E (Cisco IOS), 15.2(2)E1 (Cisco IOS), 15.2(3)E1 (Cisco IOS), 15.2(2)E2 (Cisco IOS), 15.2(2)E3 (Cisco IOS), 15.2(2a)E2 (Cisco IOS), 15.2(3)E2 (Cisco IOS), 15.2(3a)E (Cisco IOS), 15.2(3)E3 (Cisco IOS), 15.2(3m)E2 (Cisco IOS), 15.2(4)E1 (Cisco IOS), 15.2(2)E4 (Cisco IOS), 15.2(2)E5 (Cisco IOS), 15.2(4)E2 (Cisco IOS), 15.2(4m)E1 (Cisco IOS), 15.2(3)E4 (Cisco IOS), 15.2(5)E (Cisco IOS), 15.2(4)E3 (Cisco IOS), 15.2(2)E6 (Cisco IOS), 15.2(5)E1 (Cisco IOS), 15.2(4m)E3 (Cisco IOS), 15.2(3m)E8 (Cisco IOS), 15.2(2)E5a (Cisco IOS), 15.2(4n)E2 (Cisco IOS), 15.2(4o)E2 (Cisco IOS), 15.2(4)E4 (Cisco IOS), 15.2(2)E7 (Cisco IOS), 15.2(5)E2 (Cisco IOS), 15.2(4p)E1 (Cisco IOS), 15.2(6)E (Cisco IOS), 15.2(4)E5 (Cisco IOS), 15.2(4m)E2 (Cisco IOS), 15.2(4o)E3 (Cisco IOS), 15.2(4q)E1 (Cisco IOS), 15.2(6)E0a (Cisco IOS), 15.2(6)E0c (Cisco IOS), 15.0(2)EX (Cisco IOS), 15.0(2)EX1 (Cisco IOS), 15.0(2)EX2 (Cisco IOS), 15.0(2)EX3 (Cisco IOS), 15.0(2)EX4 (Cisco IOS), 15.0(2)EX5 (Cisco IOS), 15.0(2)EX6 (Cisco IOS), 15.0(2)EX7 (Cisco IOS), 15.0(2)EX8 (Cisco IOS), 15.0(2a)EX5 (Cisco IOS), 15.2(2b)E (Cisco IOS), 15.2(2a)E1 (Cisco IOS), 15.2(3m)E7 (Cisco IOS), 15.2(5b)E (Cisco IOS), 15.2(4s)E1 (Cisco IOS), 15.2(7)E (Cisco IOS), 12.2(6)I1 (Cisco IOS), 15.0(1)XO1 (Cisco IOS), 15.0(1)XO (Cisco IOS), 15.0(2)XO (Cisco IOS), 15.2(2)E8 (Cisco IOS), 15.2(6)E1 (Cisco IOS), 15.2(4)E6 (Cisco IOS), 15.2(2)E9 (Cisco IOS), 15.2(6)E1a (Cisco IOS), 15.2(4)E7 (Cisco IOS), 15.2(6)E1s (Cisco IOS), 15.2(2)E10 (Cisco IOS), 15.2(2)E9a (Cisco IOS), 15.2(4)EA7 (Cisco IOS), 15.2(4)EA8 (Cisco IOS), 15.2(4)EA9 (Cisco IOS), 15.0(2)SQD (Cisco IOS), 15.0(2)SQD1 (Cisco IOS), 15.0(2)SQD2 (Cisco IOS), 15.0(2)SQD3 (Cisco IOS), 15.0(2)SQD4 (Cisco IOS), 15.0(2)SQD5 (Cisco IOS), 15.0(2)SQD6 (Cisco IOS), 15.0(2)SQD7 (Cisco IOS), 15.0(2)SQD8 (Cisco IOS), 15.2(4)E8 (Cisco IOS), 15.1(3)SVR1 (Cisco IOS), 15.1(3)SVR2 (Cisco IOS), 15.1(3)SVR3 (Cisco IOS), 15.1(3)SVS (Cisco IOS), 15.1(3)SVS1 (Cisco IOS), 15.1(3)SVT1 (Cisco IOS), 15.1(3)SVT2 (Cisco IOS), 15.1(3)SVU1 (Cisco IOS), 15.2(4)E9 (Cisco IOS), 15.2(4)E10 (Cisco IOS), 15.2(4)E10A (Cisco IOS), 15.2(4)E10B (Cisco IOS), 15.2(4)EA9A (Cisco IOS), 15.2(6)E2 (Cisco IOS), 15.2(6)E2a (Cisco IOS), 15.2(6)E2b (Cisco IOS), 15.2(6)E3 (Cisco IOS), 15.2(6)Eb (Cisco IOS), 15.2(7)E0a (Cisco IOS), 15.2(7)E0b (Cisco IOS), 15.2(7)E0s (Cisco IOS), 15.2(7)E1 (Cisco IOS), 15.2(7)E1a (Cisco IOS), 15.2(7)E2 (Cisco IOS), 15.2(7)E2a (Cisco IOS), 15.2(7)E2b (Cisco IOS), 15.2(7)E3 (Cisco IOS), 15.2(7)E3k (Cisco IOS), 15.2(7)E5 (Cisco IOS), 15.2(7a)E0b (Cisco IOS), 15.2(7b)E0b (Cisco IOS), 15.2(8)E (Cisco IOS), 15.2(8)E1 (Cisco IOS), 15.2(7)E4 (Cisco IOS), 15.2(7)E6 (Cisco IOS), 15.2(8)E2 (Cisco IOS), 15.2(7)E7 (Cisco IOS), 15.2(8)E3 (Cisco IOS), 15.2(7)E8 (Cisco IOS), 15.2(8)E4 (Cisco IOS), 15.1(3)SVX (Cisco IOS), 15.1(3)SVX1 (Cisco IOS), 15.1(3)SVW (Cisco IOS), 15.1(3)SVW1 (Cisco IOS), 15.1(3)SVV1 (Cisco IOS), 15.1(3)SVV2 (Cisco IOS), 15.1(3)SVV3 (Cisco IOS), 15.1(3)SVV4 (Cisco IOS), 15.1(3)SVU10 (Cisco IOS), 15.1(3)SVU2 (Cisco IOS), 15.1(3)SVU11 (Cisco IOS), 15.1(3)SVU20 (Cisco IOS), 15.1(3)SVU21 (Cisco IOS), 15.1(3)SVT3 (Cisco IOS), 15.1(3)SVT4 (Cisco IOS), 15.1(3)SVR10 (Cisco IOS), 15.2(2)E10a (Cisco IOS), 15.2(4)E10c (Cisco IOS), 15.2(2)E10b (Cisco IOS), 15.2(4)E10d (Cisco IOS), 15.2(2)E10c (Cisco IOS), 15.2(7)E9 (Cisco IOS), 15.2(8)E5 (Cisco IOS), 15.2(7)E10 (Cisco IOS), 15.2(8)E6 (Cisco IOS)

Product types

Operating system, Network appliance software

Platforms

Cisco Systems, Inc. Cisco IOS 15.2(4)E, Inc. Cisco IOS 15.2(2)E5b, Inc. Cisco IOS 15.0(1)EY, Inc. Cisco IOS 15.0(1)EY1, Inc. Cisco IOS 15.0(1)EY2, Inc. Cisco IOS 15.0(2)SE8, Inc. Cisco IOS 15.0(1)EX, Inc. Cisco IOS 15.0(2)EX10, Inc. Cisco IOS 15.0(2)EX11, Inc. Cisco IOS 15.0(2)EX13, Inc. Cisco IOS 15.0(2)EX12, Inc. Cisco IOS 15.2(2)E, Inc. Cisco IOS 15.2(3)E, Inc. Cisco IOS 15.2(2)E1, Inc. Cisco IOS 15.2(3)E1, Inc. Cisco IOS 15.2(2)E2, Inc. Cisco IOS 15.2(2)E3, Inc. Cisco IOS 15.2(2a)E2, Inc. Cisco IOS 15.2(3)E2, Inc. Cisco IOS 15.2(3a)E, Inc. Cisco IOS 15.2(3)E3, Inc. Cisco IOS 15.2(3m)E2, Inc. Cisco IOS 15.2(4)E1, Inc. Cisco IOS 15.2(2)E4, Inc. Cisco IOS 15.2(2)E5, Inc. Cisco IOS 15.2(4)E2, Inc. Cisco IOS 15.2(4m)E1, Inc. Cisco IOS 15.2(3)E4, Inc. Cisco IOS 15.2(5)E, Inc. Cisco IOS 15.2(4)E3, Inc. Cisco IOS 15.2(2)E6, Inc. Cisco IOS 15.2(5)E1, Inc. Cisco IOS 15.2(4m)E3, Inc. Cisco IOS 15.2(3m)E8, Inc. Cisco IOS 15.2(2)E5a, Inc. Cisco IOS 15.2(4n)E2, Inc. Cisco IOS 15.2(4o)E2, Inc. Cisco IOS 15.2(4)E4, Inc. Cisco IOS 15.2(2)E7, Inc. Cisco IOS 15.2(5)E2, Inc. Cisco IOS 15.2(4p)E1, Inc. Cisco IOS 15.2(6)E, Inc. Cisco IOS 15.2(4)E5, Inc. Cisco IOS 15.2(4m)E2, Inc. Cisco IOS 15.2(4o)E3, Inc. Cisco IOS 15.2(4q)E1, Inc. Cisco IOS 15.2(6)E0a, Inc. Cisco IOS 15.2(6)E0c, Inc. Cisco IOS 15.0(2)EX, Inc. Cisco IOS 15.0(2)EX1, Inc. Cisco IOS 15.0(2)EX2, Inc. Cisco IOS 15.0(2)EX3, Inc. Cisco IOS 15.0(2)EX4, Inc. Cisco IOS 15.0(2)EX5, Inc. Cisco IOS 15.0(2)EX6, Inc. Cisco IOS 15.0(2)EX7, Inc. Cisco IOS 15.0(2)EX8, Inc. Cisco IOS 15.0(2a)EX5, Inc. Cisco IOS 15.2(2b)E, Inc. Cisco IOS 15.2(2a)E1, Inc. Cisco IOS 15.2(3m)E7, Inc. Cisco IOS 15.2(5b)E, Inc. Cisco IOS 15.2(4s)E1, Inc. Cisco IOS 15.2(7)E, Inc. Cisco IOS 12.2(6)I1, Inc. Cisco IOS 15.0(1)XO1, Inc. Cisco IOS 15.0(1)XO, Inc. Cisco IOS 15.0(2)XO, Inc. Cisco IOS 15.2(2)E8, Inc. Cisco IOS 15.2(6)E1, Inc. Cisco IOS 15.2(4)E6, Inc. Cisco IOS 15.2(2)E9, Inc. Cisco IOS 15.2(6)E1a, Inc. Cisco IOS 15.2(4)E7, Inc. Cisco IOS 15.2(6)E1s, Inc. Cisco IOS 15.2(2)E10, Inc. Cisco IOS 15.2(2)E9a, Inc. Cisco IOS 15.2(4)EA7, Inc. Cisco IOS 15.2(4)EA8, Inc. Cisco IOS 15.2(4)EA9, Inc. Cisco IOS 15.0(2)SQD, Inc. Cisco IOS 15.0(2)SQD1, Inc. Cisco IOS 15.0(2)SQD2, Inc. Cisco IOS 15.0(2)SQD3, Inc. Cisco IOS 15.0(2)SQD4, Inc. Cisco IOS 15.0(2)SQD5, Inc. Cisco IOS 15.0(2)SQD6, Inc. Cisco IOS 15.0(2)SQD7, Inc. Cisco IOS 15.0(2)SQD8, Inc. Cisco IOS 15.2(4)E8, Inc. Cisco IOS 15.1(3)SVR1, Inc. Cisco IOS 15.1(3)SVR2, Inc. Cisco IOS 15.1(3)SVR3, Inc. Cisco IOS 15.1(3)SVS, Inc. Cisco IOS 15.1(3)SVS1, Inc. Cisco IOS 15.1(3)SVT1, Inc. Cisco IOS 15.1(3)SVT2, Inc. Cisco IOS 15.1(3)SVU1, Inc. Cisco IOS 15.2(4)E9, Inc. Cisco IOS 15.2(4)E10, Inc. Cisco IOS 15.2(4)E10A, Inc. Cisco IOS 15.2(4)E10B, Inc. Cisco IOS 15.2(4)EA9A, Inc. Cisco IOS 15.2(6)E2, Inc. Cisco IOS 15.2(6)E2a, Inc. Cisco IOS 15.2(6)E2b, Inc. Cisco IOS 15.2(6)E3, Inc. Cisco IOS 15.2(6)Eb, Inc. Cisco IOS 15.2(7)E0a, Inc. Cisco IOS 15.2(7)E0b, Inc. Cisco IOS 15.2(7)E0s, Inc. Cisco IOS 15.2(7)E1, Inc. Cisco IOS 15.2(7)E1a, Inc. Cisco IOS 15.2(7)E2, Inc. Cisco IOS 15.2(7)E2a, Inc. Cisco IOS 15.2(7)E2b, Inc. Cisco IOS 15.2(7)E3, Inc. Cisco IOS 15.2(7)E3k, Inc. Cisco IOS 15.2(7)E5, Inc. Cisco IOS 15.2(7a)E0b, Inc. Cisco IOS 15.2(7b)E0b, Inc. Cisco IOS 15.2(8)E, Inc. Cisco IOS 15.2(8)E1, Inc. Cisco IOS 15.2(7)E4, Inc. Cisco IOS 15.2(7)E6, Inc. Cisco IOS 15.2(8)E2, Inc. Cisco IOS 15.2(7)E7, Inc. Cisco IOS 15.2(8)E3, Inc. Cisco IOS 15.2(7)E8, Inc. Cisco IOS 15.2(8)E4, Inc. Cisco IOS 15.1(3)SVX, Inc. Cisco IOS 15.1(3)SVX1, Inc. Cisco IOS 15.1(3)SVW, Inc. Cisco IOS 15.1(3)SVW1, Inc. Cisco IOS 15.1(3)SVV1, Inc. Cisco IOS 15.1(3)SVV2, Inc. Cisco IOS 15.1(3)SVV3, Inc. Cisco IOS 15.1(3)SVV4, Inc. Cisco IOS 15.1(3)SVU10, Inc. Cisco IOS 15.1(3)SVU2, Inc. Cisco IOS 15.1(3)SVU11, Inc. Cisco IOS 15.1(3)SVU20, Inc. Cisco IOS 15.1(3)SVU21, Inc. Cisco IOS 15.1(3)SVT3, Inc. Cisco IOS 15.1(3)SVT4, Inc. Cisco IOS 15.1(3)SVR10, Inc. Cisco IOS 15.2(2)E10a, Inc. Cisco IOS 15.2(4)E10c, Inc. Cisco IOS 15.2(2)E10b, Inc. Cisco IOS 15.2(4)E10d, Inc. Cisco IOS 15.2(2)E10c, Inc. Cisco IOS 15.2(7)E9, Inc. Cisco IOS 15.2(8)E5, Inc. Cisco IOS 15.2(7)E10, Inc. Cisco IOS 15.2(8)E6

Mitigations

Использование рекомендаций: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems, Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "15.2(4)E (Cisco IOS), 15.2(2)E5b (Cisco IOS), 15.0(1)EY (Cisco IOS), 15.0(1)EY1 (Cisco IOS), 15.0(1)EY2 (Cisco IOS), 15.0(2)SE8 (Cisco IOS), 15.0(1)EX (Cisco IOS), 15.0(2)EX10 (Cisco IOS), 15.0(2)EX11 (Cisco IOS), 15.0(2)EX13 (Cisco IOS), 15.0(2)EX12 (Cisco IOS), 15.2(2)E (Cisco IOS), 15.2(3)E (Cisco IOS), 15.2(2)E1 (Cisco IOS), 15.2(3)E1 (Cisco IOS), 15.2(2)E2 (Cisco IOS), 15.2(2)E3 (Cisco IOS), 15.2(2a)E2 (Cisco IOS), 15.2(3)E2 (Cisco IOS), 15.2(3a)E (Cisco IOS), 15.2(3)E3 (Cisco IOS), 15.2(3m)E2 (Cisco IOS), 15.2(4)E1 (Cisco IOS), 15.2(2)E4 (Cisco IOS), 15.2(2)E5 (Cisco IOS), 15.2(4)E2 (Cisco IOS), 15.2(4m)E1 (Cisco IOS), 15.2(3)E4 (Cisco IOS), 15.2(5)E (Cisco IOS), 15.2(4)E3 (Cisco IOS), 15.2(2)E6 (Cisco IOS), 15.2(5)E1 (Cisco IOS), 15.2(4m)E3 (Cisco IOS), 15.2(3m)E8 (Cisco IOS), 15.2(2)E5a (Cisco IOS), 15.2(4n)E2 (Cisco IOS), 15.2(4o)E2 (Cisco IOS), 15.2(4)E4 (Cisco IOS), 15.2(2)E7 (Cisco IOS), 15.2(5)E2 (Cisco IOS), 15.2(4p)E1 (Cisco IOS), 15.2(6)E (Cisco IOS), 15.2(4)E5 (Cisco IOS), 15.2(4m)E2 (Cisco IOS), 15.2(4o)E3 (Cisco IOS), 15.2(4q)E1 (Cisco IOS), 15.2(6)E0a (Cisco IOS), 15.2(6)E0c (Cisco IOS), 15.0(2)EX (Cisco IOS), 15.0(2)EX1 (Cisco IOS), 15.0(2)EX2 (Cisco IOS), 15.0(2)EX3 (Cisco IOS), 15.0(2)EX4 (Cisco IOS), 15.0(2)EX5 (Cisco IOS), 15.0(2)EX6 (Cisco IOS), 15.0(2)EX7 (Cisco IOS), 15.0(2)EX8 (Cisco IOS), 15.0(2a)EX5 (Cisco IOS), 15.2(2b)E (Cisco IOS), 15.2(2a)E1 (Cisco IOS), 15.2(3m)E7 (Cisco IOS), 15.2(5b)E (Cisco IOS), 15.2(4s)E1 (Cisco IOS), 15.2(7)E (Cisco IOS), 12.2(6)I1 (Cisco IOS), 15.0(1)XO1 (Cisco IOS), 15.0(1)XO (Cisco IOS), 15.0(2)XO (Cisco IOS), 15.2(2)E8 (Cisco IOS), 15.2(6)E1 (Cisco IOS), 15.2(4)E6 (Cisco IOS), 15.2(2)E9 (Cisco IOS), 15.2(6)E1a (Cisco IOS), 15.2(4)E7 (Cisco IOS), 15.2(6)E1s (Cisco IOS), 15.2(2)E10 (Cisco IOS), 15.2(2)E9a (Cisco IOS), 15.2(4)EA7 (Cisco IOS), 15.2(4)EA8 (Cisco IOS), 15.2(4)EA9 (Cisco IOS), 15.0(2)SQD (Cisco IOS), 15.0(2)SQD1 (Cisco IOS), 15.0(2)SQD2 (Cisco IOS), 15.0(2)SQD3 (Cisco IOS), 15.0(2)SQD4 (Cisco IOS), 15.0(2)SQD5 (Cisco IOS), 15.0(2)SQD6 (Cisco IOS), 15.0(2)SQD7 (Cisco IOS), 15.0(2)SQD8 (Cisco IOS), 15.2(4)E8 (Cisco IOS), 15.1(3)SVR1 (Cisco IOS), 15.1(3)SVR2 (Cisco IOS), 15.1(3)SVR3 (Cisco IOS), 15.1(3)SVS (Cisco IOS), 15.1(3)SVS1 (Cisco IOS), 15.1(3)SVT1 (Cisco IOS), 15.1(3)SVT2 (Cisco IOS), 15.1(3)SVU1 (Cisco IOS), 15.2(4)E9 (Cisco IOS), 15.2(4)E10 (Cisco IOS), 15.2(4)E10A (Cisco IOS), 15.2(4)E10B (Cisco IOS), 15.2(4)EA9A (Cisco IOS), 15.2(6)E2 (Cisco IOS), 15.2(6)E2a (Cisco IOS), 15.2(6)E2b (Cisco IOS), 15.2(6)E3 (Cisco IOS), 15.2(6)Eb (Cisco IOS), 15.2(7)E0a (Cisco IOS), 15.2(7)E0b (Cisco IOS), 15.2(7)E0s (Cisco IOS), 15.2(7)E1 (Cisco IOS), 15.2(7)E1a (Cisco IOS), 15.2(7)E2 (Cisco IOS), 15.2(7)E2a (Cisco IOS), 15.2(7)E2b (Cisco IOS), 15.2(7)E3 (Cisco IOS), 15.2(7)E3k (Cisco IOS), 15.2(7)E5 (Cisco IOS), 15.2(7a)E0b (Cisco IOS), 15.2(7b)E0b (Cisco IOS), 15.2(8)E (Cisco IOS), 15.2(8)E1 (Cisco IOS), 15.2(7)E4 (Cisco IOS), 15.2(7)E6 (Cisco IOS), 15.2(8)E2 (Cisco IOS), 15.2(7)E7 (Cisco IOS), 15.2(8)E3 (Cisco IOS), 15.2(7)E8 (Cisco IOS), 15.2(8)E4 (Cisco IOS), 15.1(3)SVX (Cisco IOS), 15.1(3)SVX1 (Cisco IOS), 15.1(3)SVW (Cisco IOS), 15.1(3)SVW1 (Cisco IOS), 15.1(3)SVV1 (Cisco IOS), 15.1(3)SVV2 (Cisco IOS), 15.1(3)SVV3 (Cisco IOS), 15.1(3)SVV4 (Cisco IOS), 15.1(3)SVU10 (Cisco IOS), 15.1(3)SVU2 (Cisco IOS), 15.1(3)SVU11 (Cisco IOS), 15.1(3)SVU20 (Cisco IOS), 15.1(3)SVU21 (Cisco IOS), 15.1(3)SVT3 (Cisco IOS), 15.1(3)SVT4 (Cisco IOS), 15.1(3)SVR10 (Cisco IOS), 15.2(2)E10a (Cisco IOS), 15.2(4)E10c (Cisco IOS), 15.2(2)E10b (Cisco IOS), 15.2(4)E10d (Cisco IOS), 15.2(2)E10c (Cisco IOS), 15.2(7)E9 (Cisco IOS), 15.2(8)E5 (Cisco IOS), 15.2(7)E10 (Cisco IOS), 15.2(8)E6 (Cisco IOS)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "07.05.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "27.08.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "27.08.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-10332",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-20181",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco IOS",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Cisco Systems, Inc. Cisco IOS 15.2(4)E , Cisco Systems, Inc. Cisco IOS 15.2(2)E5b , Cisco Systems, Inc. Cisco IOS 15.0(1)EY , Cisco Systems, Inc. Cisco IOS 15.0(1)EY1 , Cisco Systems, Inc. Cisco IOS 15.0(1)EY2 , Cisco Systems, Inc. Cisco IOS 15.0(2)SE8 , Cisco Systems, Inc. Cisco IOS 15.0(1)EX , Cisco Systems, Inc. Cisco IOS 15.0(2)EX10 , Cisco Systems, Inc. Cisco IOS 15.0(2)EX11 , Cisco Systems, Inc. Cisco IOS 15.0(2)EX13 , Cisco Systems, Inc. Cisco IOS 15.0(2)EX12 , Cisco Systems, Inc. Cisco IOS 15.2(2)E , Cisco Systems, Inc. Cisco IOS 15.2(3)E , Cisco Systems, Inc. Cisco IOS 15.2(2)E1 , Cisco Systems, Inc. Cisco IOS 15.2(3)E1 , Cisco Systems, Inc. Cisco IOS 15.2(2)E2 , Cisco Systems, Inc. Cisco IOS 15.2(2)E3 , Cisco Systems, Inc. Cisco IOS 15.2(2a)E2 , Cisco Systems, Inc. Cisco IOS 15.2(3)E2 , Cisco Systems, Inc. Cisco IOS 15.2(3a)E , Cisco Systems, Inc. Cisco IOS 15.2(3)E3 , Cisco Systems, Inc. Cisco IOS 15.2(3m)E2 , Cisco Systems, Inc. Cisco IOS 15.2(4)E1 , Cisco Systems, Inc. Cisco IOS 15.2(2)E4 , Cisco Systems, Inc. Cisco IOS 15.2(2)E5 , Cisco Systems, Inc. Cisco IOS 15.2(4)E2 , Cisco Systems, Inc. Cisco IOS 15.2(4m)E1 , Cisco Systems, Inc. Cisco IOS 15.2(3)E4 , Cisco Systems, Inc. Cisco IOS 15.2(5)E , Cisco Systems, Inc. Cisco IOS 15.2(4)E3 , Cisco Systems, Inc. Cisco IOS 15.2(2)E6 , Cisco Systems, Inc. Cisco IOS 15.2(5)E1 , Cisco Systems, Inc. Cisco IOS 15.2(4m)E3 , Cisco Systems, Inc. Cisco IOS 15.2(3m)E8 , Cisco Systems, Inc. Cisco IOS 15.2(2)E5a , Cisco Systems, Inc. Cisco IOS 15.2(4n)E2 , Cisco Systems, Inc. Cisco IOS 15.2(4o)E2 , Cisco Systems, Inc. Cisco IOS 15.2(4)E4 , Cisco Systems, Inc. Cisco IOS 15.2(2)E7 , Cisco Systems, Inc. Cisco IOS 15.2(5)E2 , Cisco Systems, Inc. Cisco IOS 15.2(4p)E1 , Cisco Systems, Inc. Cisco IOS 15.2(6)E , Cisco Systems, Inc. Cisco IOS 15.2(4)E5 , Cisco Systems, Inc. Cisco IOS 15.2(4m)E2 , Cisco Systems, Inc. Cisco IOS 15.2(4o)E3 , Cisco Systems, Inc. Cisco IOS 15.2(4q)E1 , Cisco Systems, Inc. Cisco IOS 15.2(6)E0a , Cisco Systems, Inc. Cisco IOS 15.2(6)E0c , Cisco Systems, Inc. Cisco IOS 15.0(2)EX , Cisco Systems, Inc. Cisco IOS 15.0(2)EX1 , Cisco Systems, Inc. Cisco IOS 15.0(2)EX2 , Cisco Systems, Inc. Cisco IOS 15.0(2)EX3 , Cisco Systems, Inc. Cisco IOS 15.0(2)EX4 , Cisco Systems, Inc. Cisco IOS 15.0(2)EX5 , Cisco Systems, Inc. Cisco IOS 15.0(2)EX6 , Cisco Systems, Inc. Cisco IOS 15.0(2)EX7 , Cisco Systems, Inc. Cisco IOS 15.0(2)EX8 , Cisco Systems, Inc. Cisco IOS 15.0(2a)EX5 , Cisco Systems, Inc. Cisco IOS 15.2(2b)E , Cisco Systems, Inc. Cisco IOS 15.2(2a)E1 , Cisco Systems, Inc. Cisco IOS 15.2(3m)E7 , Cisco Systems, Inc. Cisco IOS 15.2(5b)E , Cisco Systems, Inc. Cisco IOS 15.2(4s)E1 , Cisco Systems, Inc. Cisco IOS 15.2(7)E , Cisco Systems, Inc. Cisco IOS 12.2(6)I1 , Cisco Systems, Inc. Cisco IOS 15.0(1)XO1 , Cisco Systems, Inc. Cisco IOS 15.0(1)XO , Cisco Systems, Inc. Cisco IOS 15.0(2)XO , Cisco Systems, Inc. Cisco IOS 15.2(2)E8 , Cisco Systems, Inc. Cisco IOS 15.2(6)E1 , Cisco Systems, Inc. Cisco IOS 15.2(4)E6 , Cisco Systems, Inc. Cisco IOS 15.2(2)E9 , Cisco Systems, Inc. Cisco IOS 15.2(6)E1a , Cisco Systems, Inc. Cisco IOS 15.2(4)E7 , Cisco Systems, Inc. Cisco IOS 15.2(6)E1s , Cisco Systems, Inc. Cisco IOS 15.2(2)E10 , Cisco Systems, Inc. Cisco IOS 15.2(2)E9a , Cisco Systems, Inc. Cisco IOS 15.2(4)EA7 , Cisco Systems, Inc. Cisco IOS 15.2(4)EA8 , Cisco Systems, Inc. Cisco IOS 15.2(4)EA9 , Cisco Systems, Inc. Cisco IOS 15.0(2)SQD , Cisco Systems, Inc. Cisco IOS 15.0(2)SQD1 , Cisco Systems, Inc. Cisco IOS 15.0(2)SQD2 , Cisco Systems, Inc. Cisco IOS 15.0(2)SQD3 , Cisco Systems, Inc. Cisco IOS 15.0(2)SQD4 , Cisco Systems, Inc. Cisco IOS 15.0(2)SQD5 , Cisco Systems, Inc. Cisco IOS 15.0(2)SQD6 , Cisco Systems, Inc. Cisco IOS 15.0(2)SQD7 , Cisco Systems, Inc. Cisco IOS 15.0(2)SQD8 , Cisco Systems, Inc. Cisco IOS 15.2(4)E8 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVR1 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVR2 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVR3 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVS , Cisco Systems, Inc. Cisco IOS 15.1(3)SVS1 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVT1 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVT2 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVU1 , Cisco Systems, Inc. Cisco IOS 15.2(4)E9 , Cisco Systems, Inc. Cisco IOS 15.2(4)E10 , Cisco Systems, Inc. Cisco IOS 15.2(4)E10A , Cisco Systems, Inc. Cisco IOS 15.2(4)E10B , Cisco Systems, Inc. Cisco IOS 15.2(4)EA9A , Cisco Systems, Inc. Cisco IOS 15.2(6)E2 , Cisco Systems, Inc. Cisco IOS 15.2(6)E2a , Cisco Systems, Inc. Cisco IOS 15.2(6)E2b , Cisco Systems, Inc. Cisco IOS 15.2(6)E3 , Cisco Systems, Inc. Cisco IOS 15.2(6)Eb , Cisco Systems, Inc. Cisco IOS 15.2(7)E0a , Cisco Systems, Inc. Cisco IOS 15.2(7)E0b , Cisco Systems, Inc. Cisco IOS 15.2(7)E0s , Cisco Systems, Inc. Cisco IOS 15.2(7)E1 , Cisco Systems, Inc. Cisco IOS 15.2(7)E1a , Cisco Systems, Inc. Cisco IOS 15.2(7)E2 , Cisco Systems, Inc. Cisco IOS 15.2(7)E2a , Cisco Systems, Inc. Cisco IOS 15.2(7)E2b , Cisco Systems, Inc. Cisco IOS 15.2(7)E3 , Cisco Systems, Inc. Cisco IOS 15.2(7)E3k , Cisco Systems, Inc. Cisco IOS 15.2(7)E5 , Cisco Systems, Inc. Cisco IOS 15.2(7a)E0b , Cisco Systems, Inc. Cisco IOS 15.2(7b)E0b , Cisco Systems, Inc. Cisco IOS 15.2(8)E , Cisco Systems, Inc. Cisco IOS 15.2(8)E1 , Cisco Systems, Inc. Cisco IOS 15.2(7)E4 , Cisco Systems, Inc. Cisco IOS 15.2(7)E6 , Cisco Systems, Inc. Cisco IOS 15.2(8)E2 , Cisco Systems, Inc. Cisco IOS 15.2(7)E7 , Cisco Systems, Inc. Cisco IOS 15.2(8)E3 , Cisco Systems, Inc. Cisco IOS 15.2(7)E8 , Cisco Systems, Inc. Cisco IOS 15.2(8)E4 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVX , Cisco Systems, Inc. Cisco IOS 15.1(3)SVX1 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVW , Cisco Systems, Inc. Cisco IOS 15.1(3)SVW1 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVV1 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVV2 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVV3 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVV4 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVU10 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVU2 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVU11 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVU20 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVU21 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVT3 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVT4 , Cisco Systems, Inc. Cisco IOS 15.1(3)SVR10 , Cisco Systems, Inc. Cisco IOS 15.2(2)E10a , Cisco Systems, Inc. Cisco IOS 15.2(4)E10c , Cisco Systems, Inc. Cisco IOS 15.2(2)E10b , Cisco Systems, Inc. Cisco IOS 15.2(4)E10d , Cisco Systems, Inc. Cisco IOS 15.2(2)E10c , Cisco Systems, Inc. Cisco IOS 15.2(7)E9 , Cisco Systems, Inc. Cisco IOS 15.2(8)E5 , Cisco Systems, Inc. Cisco IOS 15.2(7)E10 , Cisco Systems, Inc. Cisco IOS 15.2(8)E6 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Catalyst 2960X, 2960XR, 2960CX \u0438 3560CX Series Switches, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 (CWE-347)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Catalyst 2960X, 2960XR, 2960CX \u0438 3560CX Series Switches \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u043f\u0440\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-347",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)"
}

CVE-2025-20181 (GCVE-0-2025-20181)

Vulnerability from cvelistv5 – Published: 2025-05-07 17:35 – Updated: 2025-05-07 19:45

Summary

A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time. Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

Severity

6.8 (Medium)


                        
                          CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-05-07 18:56 UTC

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

cisco mitre root Scorecard

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

1 product

Vendor	Product	Version
Cisco	IOS	Affected: 15.0(1)XO1 Affected: 15.0(1)XO Affected: 15.0(2)XO Affected: 15.0(1)EY Affected: 15.0(1)EY1 Affected: 15.0(1)EY2 Affected: 15.0(2)SE8 Affected: 15.0(1)EX Affected: 15.0(2)EX Affected: 15.0(2)EX1 Affected: 15.0(2)EX2 Affected: 15.0(2)EX3 Affected: 15.0(2)EX4 Affected: 15.0(2)EX5 Affected: 15.0(2)EX8 Affected: 15.0(2a)EX5 Affected: 15.0(2)EX10 Affected: 15.0(2)EX11 Affected: 15.0(2)EX13 Affected: 15.0(2)EX12 Affected: 15.2(2)E Affected: 15.2(3)E Affected: 15.2(2)E1 Affected: 15.2(4)E Affected: 15.2(3)E1 Affected: 15.2(2)E2 Affected: 15.2(2a)E1 Affected: 15.2(2)E3 Affected: 15.2(2a)E2 Affected: 15.2(3)E2 Affected: 15.2(3a)E Affected: 15.2(3)E3 Affected: 15.2(4)E1 Affected: 15.2(2)E4 Affected: 15.2(2)E5 Affected: 15.2(4)E2 Affected: 15.2(3)E4 Affected: 15.2(5)E Affected: 15.2(4)E3 Affected: 15.2(2)E6 Affected: 15.2(5)E1 Affected: 15.2(5b)E Affected: 15.2(2)E5a Affected: 15.2(2)E5b Affected: 15.2(4)E4 Affected: 15.2(2)E7 Affected: 15.2(5)E2 Affected: 15.2(6)E Affected: 15.2(4)E5 Affected: 15.2(2)E8 Affected: 15.2(6)E0a Affected: 15.2(6)E1 Affected: 15.2(6)E0c Affected: 15.2(4)E6 Affected: 15.2(6)E2 Affected: 15.2(2)E9 Affected: 15.2(4)E7 Affected: 15.2(7)E Affected: 15.2(2)E10 Affected: 15.2(4)E8 Affected: 15.2(6)E2a Affected: 15.2(6)E2b Affected: 15.2(7)E1 Affected: 15.2(7)E0a Affected: 15.2(7)E0b Affected: 15.2(7)E0s Affected: 15.2(6)E3 Affected: 15.2(4)E9 Affected: 15.2(7)E2 Affected: 15.2(7a)E0b Affected: 15.2(4)E10 Affected: 15.2(7)E3 Affected: 15.2(7)E1a Affected: 15.2(7b)E0b Affected: 15.2(7)E2a Affected: 15.2(4)E10a Affected: 15.2(7)E4 Affected: 15.2(7)E3k Affected: 15.2(8)E Affected: 15.2(8)E1 Affected: 15.2(7)E5 Affected: 15.2(7)E6 Affected: 15.2(8)E2 Affected: 15.2(4)E10d Affected: 15.2(7)E7 Affected: 15.2(8)E3 Affected: 15.2(7)E8 Affected: 15.2(8)E4 Affected: 15.2(7)E9 Affected: 15.2(8)E5 Affected: 15.2(8)E6 Affected: 15.2(7)E10 Affected: 15.2(6)EB Affected: 15.2(4)EA7 Affected: 15.2(4)EA8 Affected: 15.2(4)EA9 Affected: 15.2(4)EA9a Affected: 15.0(2)SQD Affected: 15.0(2)SQD1 Affected: 15.0(2)SQD2 Affected: 15.0(2)SQD3 Affected: 15.0(2)SQD4 Affected: 15.0(2)SQD5 Affected: 15.0(2)SQD6 Affected: 15.0(2)SQD7 Affected: 15.0(2)SQD8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-20181",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-07T18:56:17.739877Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-07T19:45:02.742Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "IOS",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "15.0(1)XO1"
            },
            {
              "status": "affected",
              "version": "15.0(1)XO"
            },
            {
              "status": "affected",
              "version": "15.0(2)XO"
            },
            {
              "status": "affected",
              "version": "15.0(1)EY"
            },
            {
              "status": "affected",
              "version": "15.0(1)EY1"
            },
            {
              "status": "affected",
              "version": "15.0(1)EY2"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE8"
            },
            {
              "status": "affected",
              "version": "15.0(1)EX"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX1"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX2"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX3"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX4"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX5"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX8"
            },
            {
              "status": "affected",
              "version": "15.0(2a)EX5"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX10"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX11"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX13"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX12"
            },
            {
              "status": "affected",
              "version": "15.2(2)E"
            },
            {
              "status": "affected",
              "version": "15.2(3)E"
            },
            {
              "status": "affected",
              "version": "15.2(2)E1"
            },
            {
              "status": "affected",
              "version": "15.2(4)E"
            },
            {
              "status": "affected",
              "version": "15.2(3)E1"
            },
            {
              "status": "affected",
              "version": "15.2(2)E2"
            },
            {
              "status": "affected",
              "version": "15.2(2a)E1"
            },
            {
              "status": "affected",
              "version": "15.2(2)E3"
            },
            {
              "status": "affected",
              "version": "15.2(2a)E2"
            },
            {
              "status": "affected",
              "version": "15.2(3)E2"
            },
            {
              "status": "affected",
              "version": "15.2(3a)E"
            },
            {
              "status": "affected",
              "version": "15.2(3)E3"
            },
            {
              "status": "affected",
              "version": "15.2(4)E1"
            },
            {
              "status": "affected",
              "version": "15.2(2)E4"
            },
            {
              "status": "affected",
              "version": "15.2(2)E5"
            },
            {
              "status": "affected",
              "version": "15.2(4)E2"
            },
            {
              "status": "affected",
              "version": "15.2(3)E4"
            },
            {
              "status": "affected",
              "version": "15.2(5)E"
            },
            {
              "status": "affected",
              "version": "15.2(4)E3"
            },
            {
              "status": "affected",
              "version": "15.2(2)E6"
            },
            {
              "status": "affected",
              "version": "15.2(5)E1"
            },
            {
              "status": "affected",
              "version": "15.2(5b)E"
            },
            {
              "status": "affected",
              "version": "15.2(2)E5a"
            },
            {
              "status": "affected",
              "version": "15.2(2)E5b"
            },
            {
              "status": "affected",
              "version": "15.2(4)E4"
            },
            {
              "status": "affected",
              "version": "15.2(2)E7"
            },
            {
              "status": "affected",
              "version": "15.2(5)E2"
            },
            {
              "status": "affected",
              "version": "15.2(6)E"
            },
            {
              "status": "affected",
              "version": "15.2(4)E5"
            },
            {
              "status": "affected",
              "version": "15.2(2)E8"
            },
            {
              "status": "affected",
              "version": "15.2(6)E0a"
            },
            {
              "status": "affected",
              "version": "15.2(6)E1"
            },
            {
              "status": "affected",
              "version": "15.2(6)E0c"
            },
            {
              "status": "affected",
              "version": "15.2(4)E6"
            },
            {
              "status": "affected",
              "version": "15.2(6)E2"
            },
            {
              "status": "affected",
              "version": "15.2(2)E9"
            },
            {
              "status": "affected",
              "version": "15.2(4)E7"
            },
            {
              "status": "affected",
              "version": "15.2(7)E"
            },
            {
              "status": "affected",
              "version": "15.2(2)E10"
            },
            {
              "status": "affected",
              "version": "15.2(4)E8"
            },
            {
              "status": "affected",
              "version": "15.2(6)E2a"
            },
            {
              "status": "affected",
              "version": "15.2(6)E2b"
            },
            {
              "status": "affected",
              "version": "15.2(7)E1"
            },
            {
              "status": "affected",
              "version": "15.2(7)E0a"
            },
            {
              "status": "affected",
              "version": "15.2(7)E0b"
            },
            {
              "status": "affected",
              "version": "15.2(7)E0s"
            },
            {
              "status": "affected",
              "version": "15.2(6)E3"
            },
            {
              "status": "affected",
              "version": "15.2(4)E9"
            },
            {
              "status": "affected",
              "version": "15.2(7)E2"
            },
            {
              "status": "affected",
              "version": "15.2(7a)E0b"
            },
            {
              "status": "affected",
              "version": "15.2(4)E10"
            },
            {
              "status": "affected",
              "version": "15.2(7)E3"
            },
            {
              "status": "affected",
              "version": "15.2(7)E1a"
            },
            {
              "status": "affected",
              "version": "15.2(7b)E0b"
            },
            {
              "status": "affected",
              "version": "15.2(7)E2a"
            },
            {
              "status": "affected",
              "version": "15.2(4)E10a"
            },
            {
              "status": "affected",
              "version": "15.2(7)E4"
            },
            {
              "status": "affected",
              "version": "15.2(7)E3k"
            },
            {
              "status": "affected",
              "version": "15.2(8)E"
            },
            {
              "status": "affected",
              "version": "15.2(8)E1"
            },
            {
              "status": "affected",
              "version": "15.2(7)E5"
            },
            {
              "status": "affected",
              "version": "15.2(7)E6"
            },
            {
              "status": "affected",
              "version": "15.2(8)E2"
            },
            {
              "status": "affected",
              "version": "15.2(4)E10d"
            },
            {
              "status": "affected",
              "version": "15.2(7)E7"
            },
            {
              "status": "affected",
              "version": "15.2(8)E3"
            },
            {
              "status": "affected",
              "version": "15.2(7)E8"
            },
            {
              "status": "affected",
              "version": "15.2(8)E4"
            },
            {
              "status": "affected",
              "version": "15.2(7)E9"
            },
            {
              "status": "affected",
              "version": "15.2(8)E5"
            },
            {
              "status": "affected",
              "version": "15.2(8)E6"
            },
            {
              "status": "affected",
              "version": "15.2(7)E10"
            },
            {
              "status": "affected",
              "version": "15.2(6)EB"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA7"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA8"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA9"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA9a"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD1"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD2"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD3"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD4"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD5"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD6"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD7"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\r\n\r This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time.\r\n\r Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "cvssV3_0"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T17:35:31.850Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-c2960-3560-sboot-ZtqADrHq",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
        }
      ],
      "source": {
        "advisory": "cisco-sa-c2960-3560-sboot-ZtqADrHq",
        "defects": [
          "CSCvd75918"
        ],
        "discovery": "INTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2025-20181",
    "datePublished": "2025-05-07T17:35:31.850Z",
    "dateReserved": "2024-10-10T19:15:13.225Z",
    "dateUpdated": "2025-05-07T19:45:02.742Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

BDU:2025-10332 (CVE-2025-20181)

CVE-2025-20181 (GCVE-0-2025-20181)

Tags

Sightings

Nomenclature

Related by attack behaviour