CISCO-SA-C2960-3560-SBOOT-ZTQADRHQ
Vulnerability from csaf_cisco - Published: 2025-05-07 16:00 - Updated: 2025-05-07 16:00Summary
Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches Secure Boot Bypass Vulnerability
Notes
Summary: A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.
This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time.
Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279"].
Vulnerable Products: This vulnerability affects the following Cisco products if they are running a vulnerable release of Cisco IOS Software, regardless of device configuration:
Catalyst 2960X Series Switches
Catalyst 2960XR Series Switches
Catalyst 2960CX Series Switches
Catalyst 3560CX Series Switches
For information about which Cisco software releases are vulnerable, see the Fixed Software ["#fs"] section of this advisory.
Products Confirmed Not Vulnerable: Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by this vulnerability.
Cisco has confirmed that this vulnerability does not affect the following Cisco products:
IOS Software running on devices other than those listed in the Vulnerable Products ["#vp"] section of this advisory
IOS XE Software
IOS XR Software
Meraki products
NX-OS Software
Workarounds: There are no workarounds that address this vulnerability.
Fixed Software: Cisco has released free software updates ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu"] that address the vulnerability described in this advisory. Customers with service contracts that entitle them to regular software updates should obtain security fixes through their usual update channels.
Customers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:
https://www.cisco.com/c/en/us/products/end-user-license-agreement.html ["https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"]
Additionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.
The Cisco Support and Downloads page ["https://www.cisco.com/c/en/us/support/index.html"] on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool.
When considering software upgrades ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page ["https://www.cisco.com/go/psirt"], to determine exposure and a complete upgrade solution.
In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.
Customers Without Service Contracts
Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"]
Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.
Cisco IOS and IOS XE Software
To help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (“First Fixed”). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (“Combined First Fixed”).
To use the tool, go to the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"] page and follow the instructions. Alternatively, use the following form to determine whether a release is affected by any Cisco Security Advisory. To use the form, follow these steps:
Choose which advisories the tool will search—only this advisory, only advisories with a Critical or High Security Impact Rating (SIR) ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"], or all advisories.
Enter a release number—for example, 15.9(3)M2 or 17.3.3.
Click Check.
Only this advisory All Critical and High advisories All advisories
Vulnerability Policy: To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.
Exploitation and Public Announcements: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.
Source: This vulnerability was found during internal security testing by X.B. of the Cisco Advanced Security Initiatives Group (ASIG).
Legal Disclaimer: THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.
6.8 (Medium)
Affected products
Known affected
155 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
15.0(1)XO1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(1)EY
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(1)XO
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(1)EX
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)XO
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(1)EY1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(1)EY2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX4
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX5
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(3)E
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX6
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX7
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2b)E
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(3)E1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)SQD
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2a)E1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX8
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2a)EX5
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)SE8
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2a)E2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(3)E2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(3a)E
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(3)E3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(3m)E2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)SQD1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E4
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)SQD2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E5
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX10
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4m)E1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(3)E4
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(5)E
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX11
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(3m)E7
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)SQD3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E6
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(5)E1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(5b)E
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4m)E3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)SQD4
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(3m)E8
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E5a
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E5b
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4n)E2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4o)E2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E4
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E7
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX13
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)SQD5
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(5)E2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)SQD6
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4p)E1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)SQD7
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(6)E
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E5
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E8
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4m)E2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4o)E3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4q)E1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(6)E0a
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(6)E1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)EX12
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)EA7
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(6)E0c
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E6
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(6)E2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E9
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.0(2)SQD8
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(6)E1a
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E7
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(6)E1s
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)EA8
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4s)E1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
12.2(6)I1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E10
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E8
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E9a
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(6)E2a
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(6)E2b
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(6)EB
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)EA9
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E0a
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E0b
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E0s
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(6)E3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E10a
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E9
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7a)E0b
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E10
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E1a
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)EA9a
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7b)E0b
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E2a
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVR1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVS
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVR2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E10a
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E4
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVS1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVR3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E2b
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVT1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E3k
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E10b
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(8)E
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(8)E1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVT2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E5
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVU1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E6
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVU10
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(8)E2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVV1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E10c
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVU2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E10b
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVT3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVV2
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVT4
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVU11
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVW
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(4)E10d
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E7
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVW1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(2)E10c
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVX
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVV3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(8)E3
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVU20
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVX1
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVV4
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVU21
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E8
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.1(3)SVR10
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(8)E4
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E9
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(8)E5
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(8)E6
Cisco / IOS
|
— |
Vendor Fix
fix
|
|
|
15.2(7)E10
Cisco / IOS
|
— |
Vendor Fix
fix
|
References
12 references
Acknowledgments
{
"document": {
"acknowledgments": [
{
"summary": "This vulnerability was found during internal security testing by X.B. of the Cisco Advanced Security Initiatives Group (ASIG)."
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"notes": [
{
"category": "summary",
"text": "A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\r\n\r\nThis vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time.\r\n\r\nBecause this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\n\r\n\r\nThis advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [\"https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279\"].",
"title": "Summary"
},
{
"category": "general",
"text": "This vulnerability affects the following Cisco products if they are running a vulnerable release of Cisco IOS Software, regardless of device configuration:\r\n\r\nCatalyst 2960X Series Switches\r\nCatalyst 2960XR Series Switches\r\nCatalyst 2960CX Series Switches\r\nCatalyst 3560CX Series Switches\r\n\r\nFor information about which Cisco software releases are vulnerable, see the Fixed Software [\"#fs\"] section of this advisory.",
"title": "Vulnerable Products"
},
{
"category": "general",
"text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that this vulnerability does not affect the following Cisco products:\r\n\r\nIOS Software running on devices other than those listed in the Vulnerable Products [\"#vp\"] section of this advisory\r\nIOS XE Software\r\nIOS XR Software\r\nMeraki products\r\nNX-OS Software",
"title": "Products Confirmed Not Vulnerable"
},
{
"category": "general",
"text": "There are no workarounds that address this vulnerability.",
"title": "Workarounds"
},
{
"category": "general",
"text": "Cisco has released free software updates [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu\"] that address the vulnerability described in this advisory. Customers with service contracts that entitle them to regular software updates should obtain security fixes through their usual update channels.\r\n\r\nCustomers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:\r\nhttps://www.cisco.com/c/en/us/products/end-user-license-agreement.html [\"https://www.cisco.com/c/en/us/products/end-user-license-agreement.html\"]\r\n\r\nAdditionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.\r\n\r\nThe Cisco Support and Downloads page [\"https://www.cisco.com/c/en/us/support/index.html\"] on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool.\r\n\r\nWhen considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page [\"https://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.\r\n Customers Without Service Contracts\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]\r\n\r\nCustomers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n Cisco IOS and IOS XE Software\r\nTo help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (\u201cFirst Fixed\u201d). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (\u201cCombined First Fixed\u201d).\r\n\r\nTo use the tool, go to the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"] page and follow the instructions. Alternatively, use the following form to determine whether a release is affected by any Cisco Security Advisory. To use the form, follow these steps:\r\n\r\nChoose which advisories the tool will search\u2014only this advisory, only advisories with a Critical or High Security Impact Rating (SIR) [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr\"], or all advisories.\r\nEnter a release number\u2014for example, 15.9(3)M2 or 17.3.3.\r\nClick Check.\r\n\r\n Only this advisory All Critical and High advisories All advisories",
"title": "Fixed Software"
},
{
"category": "general",
"text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
"title": "Vulnerability Policy"
},
{
"category": "general",
"text": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
"title": "Exploitation and Public Announcements"
},
{
"category": "general",
"text": "This vulnerability was found during internal security testing by X.B. of the Cisco Advanced Security Initiatives Group (ASIG).",
"title": "Source"
},
{
"category": "legal_disclaimer",
"text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
"title": "Legal Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "psirt@cisco.com",
"issuing_authority": "Cisco PSIRT",
"name": "Cisco",
"namespace": "https://wwww.cisco.com"
},
"references": [
{
"category": "self",
"summary": "Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches Secure Boot Bypass Vulnerability",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
},
{
"category": "external",
"summary": "Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication",
"url": "https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279"
},
{
"category": "external",
"summary": "Cisco Security Vulnerability Policy",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
},
{
"category": "external",
"summary": "free software updates",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu"
},
{
"category": "external",
"summary": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html",
"url": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"
},
{
"category": "external",
"summary": "Cisco Support and Downloads page",
"url": "https://www.cisco.com/c/en/us/support/index.html"
},
{
"category": "external",
"summary": "considering software upgrades",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"
},
{
"category": "external",
"summary": "Cisco Security Advisories page",
"url": "https://www.cisco.com/go/psirt"
},
{
"category": "external",
"summary": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html",
"url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
},
{
"category": "external",
"summary": "Cisco Software Checker",
"url": "https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"
},
{
"category": "external",
"summary": "Security Impact Rating (SIR)",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"
},
{
"category": "external",
"summary": "Security Vulnerability Policy",
"url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"
}
],
"title": "Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches Secure Boot Bypass Vulnerability",
"tracking": {
"current_release_date": "2025-05-07T16:00:00+00:00",
"generator": {
"date": "2025-05-07T16:00:53+00:00",
"engine": {
"name": "TVCE"
}
},
"id": "cisco-sa-c2960-3560-sboot-ZtqADrHq",
"initial_release_date": "2025-05-07T16:00:00+00:00",
"revision_history": [
{
"date": "2025-05-07T15:53:27+00:00",
"number": "1.0.0",
"summary": "Initial public release."
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "service_pack",
"name": "15.0(1)XO1",
"product": {
"name": "15.0(1)XO1",
"product_id": "CSAFPID-103955"
}
},
{
"category": "service_pack",
"name": "15.0(1)XO",
"product": {
"name": "15.0(1)XO",
"product_id": "CSAFPID-106072"
}
},
{
"category": "service_pack",
"name": "15.0(2)XO",
"product": {
"name": "15.0(2)XO",
"product_id": "CSAFPID-111005"
}
}
],
"category": "product_version",
"name": "15.0XO"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.0(1)EY",
"product": {
"name": "15.0(1)EY",
"product_id": "CSAFPID-104376"
}
},
{
"category": "service_pack",
"name": "15.0(1)EY1",
"product": {
"name": "15.0(1)EY1",
"product_id": "CSAFPID-115969"
}
},
{
"category": "service_pack",
"name": "15.0(1)EY2",
"product": {
"name": "15.0(1)EY2",
"product_id": "CSAFPID-187269"
}
}
],
"category": "product_version",
"name": "15.0EY"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.0(2)SE8",
"product": {
"name": "15.0(2)SE8",
"product_id": "CSAFPID-209028"
}
}
],
"category": "product_version",
"name": "15.0SE"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.0(1)EX",
"product": {
"name": "15.0(1)EX",
"product_id": "CSAFPID-109442"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX",
"product": {
"name": "15.0(2)EX",
"product_id": "CSAFPID-189064"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX1",
"product": {
"name": "15.0(2)EX1",
"product_id": "CSAFPID-189115"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX2",
"product": {
"name": "15.0(2)EX2",
"product_id": "CSAFPID-192910"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX3",
"product": {
"name": "15.0(2)EX3",
"product_id": "CSAFPID-194540"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX4",
"product": {
"name": "15.0(2)EX4",
"product_id": "CSAFPID-194913"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX5",
"product": {
"name": "15.0(2)EX5",
"product_id": "CSAFPID-195943"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX6",
"product": {
"name": "15.0(2)EX6",
"product_id": "CSAFPID-200496"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX7",
"product": {
"name": "15.0(2)EX7",
"product_id": "CSAFPID-201366"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX8",
"product": {
"name": "15.0(2)EX8",
"product_id": "CSAFPID-204831"
}
},
{
"category": "service_pack",
"name": "15.0(2a)EX5",
"product": {
"name": "15.0(2a)EX5",
"product_id": "CSAFPID-205064"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX10",
"product": {
"name": "15.0(2)EX10",
"product_id": "CSAFPID-211570"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX11",
"product": {
"name": "15.0(2)EX11",
"product_id": "CSAFPID-214797"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX13",
"product": {
"name": "15.0(2)EX13",
"product_id": "CSAFPID-225160"
}
},
{
"category": "service_pack",
"name": "15.0(2)EX12",
"product": {
"name": "15.0(2)EX12",
"product_id": "CSAFPID-230965"
}
}
],
"category": "product_version",
"name": "15.0EX"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.2(2)E",
"product": {
"name": "15.2(2)E",
"product_id": "CSAFPID-187057"
}
},
{
"category": "service_pack",
"name": "15.2(3)E",
"product": {
"name": "15.2(3)E",
"product_id": "CSAFPID-197483"
}
},
{
"category": "service_pack",
"name": "15.2(2)E1",
"product": {
"name": "15.2(2)E1",
"product_id": "CSAFPID-201074"
}
},
{
"category": "service_pack",
"name": "15.2(2b)E",
"product": {
"name": "15.2(2b)E",
"product_id": "CSAFPID-204102"
}
},
{
"category": "service_pack",
"name": "15.2(4)E",
"product": {
"name": "15.2(4)E",
"product_id": "CSAFPID-204108"
}
},
{
"category": "service_pack",
"name": "15.2(3)E1",
"product": {
"name": "15.2(3)E1",
"product_id": "CSAFPID-204186"
}
},
{
"category": "service_pack",
"name": "15.2(2)E2",
"product": {
"name": "15.2(2)E2",
"product_id": "CSAFPID-204228"
}
},
{
"category": "service_pack",
"name": "15.2(2a)E1",
"product": {
"name": "15.2(2a)E1",
"product_id": "CSAFPID-204818"
}
},
{
"category": "service_pack",
"name": "15.2(2)E3",
"product": {
"name": "15.2(2)E3",
"product_id": "CSAFPID-205672"
}
},
{
"category": "service_pack",
"name": "15.2(2a)E2",
"product": {
"name": "15.2(2a)E2",
"product_id": "CSAFPID-209045"
}
},
{
"category": "service_pack",
"name": "15.2(3)E2",
"product": {
"name": "15.2(3)E2",
"product_id": "CSAFPID-209046"
}
},
{
"category": "service_pack",
"name": "15.2(3a)E",
"product": {
"name": "15.2(3a)E",
"product_id": "CSAFPID-209047"
}
},
{
"category": "service_pack",
"name": "15.2(3)E3",
"product": {
"name": "15.2(3)E3",
"product_id": "CSAFPID-209358"
}
},
{
"category": "service_pack",
"name": "15.2(3m)E2",
"product": {
"name": "15.2(3m)E2",
"product_id": "CSAFPID-209359"
}
},
{
"category": "service_pack",
"name": "15.2(4)E1",
"product": {
"name": "15.2(4)E1",
"product_id": "CSAFPID-209887"
}
},
{
"category": "service_pack",
"name": "15.2(2)E4",
"product": {
"name": "15.2(2)E4",
"product_id": "CSAFPID-210766"
}
},
{
"category": "service_pack",
"name": "15.2(2)E5",
"product": {
"name": "15.2(2)E5",
"product_id": "CSAFPID-211296"
}
},
{
"category": "service_pack",
"name": "15.2(4)E2",
"product": {
"name": "15.2(4)E2",
"product_id": "CSAFPID-213610"
}
},
{
"category": "service_pack",
"name": "15.2(4m)E1",
"product": {
"name": "15.2(4m)E1",
"product_id": "CSAFPID-214072"
}
},
{
"category": "service_pack",
"name": "15.2(3)E4",
"product": {
"name": "15.2(3)E4",
"product_id": "CSAFPID-214078"
}
},
{
"category": "service_pack",
"name": "15.2(5)E",
"product": {
"name": "15.2(5)E",
"product_id": "CSAFPID-214556"
}
},
{
"category": "service_pack",
"name": "15.2(3m)E7",
"product": {
"name": "15.2(3m)E7",
"product_id": "CSAFPID-216295"
}
},
{
"category": "service_pack",
"name": "15.2(4)E3",
"product": {
"name": "15.2(4)E3",
"product_id": "CSAFPID-217805"
}
},
{
"category": "service_pack",
"name": "15.2(2)E6",
"product": {
"name": "15.2(2)E6",
"product_id": "CSAFPID-218891"
}
},
{
"category": "service_pack",
"name": "15.2(5)E1",
"product": {
"name": "15.2(5)E1",
"product_id": "CSAFPID-220441"
}
},
{
"category": "service_pack",
"name": "15.2(5b)E",
"product": {
"name": "15.2(5b)E",
"product_id": "CSAFPID-220457"
}
},
{
"category": "service_pack",
"name": "15.2(4m)E3",
"product": {
"name": "15.2(4m)E3",
"product_id": "CSAFPID-220664"
}
},
{
"category": "service_pack",
"name": "15.2(3m)E8",
"product": {
"name": "15.2(3m)E8",
"product_id": "CSAFPID-220689"
}
},
{
"category": "service_pack",
"name": "15.2(2)E5a",
"product": {
"name": "15.2(2)E5a",
"product_id": "CSAFPID-221033"
}
},
{
"category": "service_pack",
"name": "15.2(2)E5b",
"product": {
"name": "15.2(2)E5b",
"product_id": "CSAFPID-222436"
}
},
{
"category": "service_pack",
"name": "15.2(4n)E2",
"product": {
"name": "15.2(4n)E2",
"product_id": "CSAFPID-222500"
}
},
{
"category": "service_pack",
"name": "15.2(4o)E2",
"product": {
"name": "15.2(4o)E2",
"product_id": "CSAFPID-222924"
}
},
{
"category": "service_pack",
"name": "15.2(4)E4",
"product": {
"name": "15.2(4)E4",
"product_id": "CSAFPID-224553"
}
},
{
"category": "service_pack",
"name": "15.2(2)E7",
"product": {
"name": "15.2(2)E7",
"product_id": "CSAFPID-224868"
}
},
{
"category": "service_pack",
"name": "15.2(5)E2",
"product": {
"name": "15.2(5)E2",
"product_id": "CSAFPID-225740"
}
},
{
"category": "service_pack",
"name": "15.2(4p)E1",
"product": {
"name": "15.2(4p)E1",
"product_id": "CSAFPID-226077"
}
},
{
"category": "service_pack",
"name": "15.2(6)E",
"product": {
"name": "15.2(6)E",
"product_id": "CSAFPID-227598"
}
},
{
"category": "service_pack",
"name": "15.2(4)E5",
"product": {
"name": "15.2(4)E5",
"product_id": "CSAFPID-227959"
}
},
{
"category": "service_pack",
"name": "15.2(2)E8",
"product": {
"name": "15.2(2)E8",
"product_id": "CSAFPID-230587"
}
},
{
"category": "service_pack",
"name": "15.2(4m)E2",
"product": {
"name": "15.2(4m)E2",
"product_id": "CSAFPID-230588"
}
},
{
"category": "service_pack",
"name": "15.2(4o)E3",
"product": {
"name": "15.2(4o)E3",
"product_id": "CSAFPID-230589"
}
},
{
"category": "service_pack",
"name": "15.2(4q)E1",
"product": {
"name": "15.2(4q)E1",
"product_id": "CSAFPID-230590"
}
},
{
"category": "service_pack",
"name": "15.2(6)E0a",
"product": {
"name": "15.2(6)E0a",
"product_id": "CSAFPID-230591"
}
},
{
"category": "service_pack",
"name": "15.2(6)E1",
"product": {
"name": "15.2(6)E1",
"product_id": "CSAFPID-230592"
}
},
{
"category": "service_pack",
"name": "15.2(6)E0c",
"product": {
"name": "15.2(6)E0c",
"product_id": "CSAFPID-231245"
}
},
{
"category": "service_pack",
"name": "15.2(4)E6",
"product": {
"name": "15.2(4)E6",
"product_id": "CSAFPID-231471"
}
},
{
"category": "service_pack",
"name": "15.2(6)E2",
"product": {
"name": "15.2(6)E2",
"product_id": "CSAFPID-232007"
}
},
{
"category": "service_pack",
"name": "15.2(2)E9",
"product": {
"name": "15.2(2)E9",
"product_id": "CSAFPID-232765"
}
},
{
"category": "service_pack",
"name": "15.2(6)E1a",
"product": {
"name": "15.2(6)E1a",
"product_id": "CSAFPID-238999"
}
},
{
"category": "service_pack",
"name": "15.2(4)E7",
"product": {
"name": "15.2(4)E7",
"product_id": "CSAFPID-239053"
}
},
{
"category": "service_pack",
"name": "15.2(6)E1s",
"product": {
"name": "15.2(6)E1s",
"product_id": "CSAFPID-240186"
}
},
{
"category": "service_pack",
"name": "15.2(4s)E1",
"product": {
"name": "15.2(4s)E1",
"product_id": "CSAFPID-241916"
}
},
{
"category": "service_pack",
"name": "15.2(7)E",
"product": {
"name": "15.2(7)E",
"product_id": "CSAFPID-242313"
}
},
{
"category": "service_pack",
"name": "15.2(2)E10",
"product": {
"name": "15.2(2)E10",
"product_id": "CSAFPID-244911"
}
},
{
"category": "service_pack",
"name": "15.2(4)E8",
"product": {
"name": "15.2(4)E8",
"product_id": "CSAFPID-246497"
}
},
{
"category": "service_pack",
"name": "15.2(2)E9a",
"product": {
"name": "15.2(2)E9a",
"product_id": "CSAFPID-247572"
}
},
{
"category": "service_pack",
"name": "15.2(6)E2a",
"product": {
"name": "15.2(6)E2a",
"product_id": "CSAFPID-247630"
}
},
{
"category": "service_pack",
"name": "15.2(6)E2b",
"product": {
"name": "15.2(6)E2b",
"product_id": "CSAFPID-250278"
}
},
{
"category": "service_pack",
"name": "15.2(7)E1",
"product": {
"name": "15.2(7)E1",
"product_id": "CSAFPID-254193"
}
},
{
"category": "service_pack",
"name": "15.2(7)E0a",
"product": {
"name": "15.2(7)E0a",
"product_id": "CSAFPID-259867"
}
},
{
"category": "service_pack",
"name": "15.2(7)E0b",
"product": {
"name": "15.2(7)E0b",
"product_id": "CSAFPID-260993"
}
},
{
"category": "service_pack",
"name": "15.2(7)E0s",
"product": {
"name": "15.2(7)E0s",
"product_id": "CSAFPID-262300"
}
},
{
"category": "service_pack",
"name": "15.2(6)E3",
"product": {
"name": "15.2(6)E3",
"product_id": "CSAFPID-262684"
}
},
{
"category": "service_pack",
"name": "15.2(2)E10a",
"product": {
"name": "15.2(2)E10a",
"product_id": "CSAFPID-263981"
}
},
{
"category": "service_pack",
"name": "15.2(4)E9",
"product": {
"name": "15.2(4)E9",
"product_id": "CSAFPID-264643"
}
},
{
"category": "service_pack",
"name": "15.2(7)E2",
"product": {
"name": "15.2(7)E2",
"product_id": "CSAFPID-270096"
}
},
{
"category": "service_pack",
"name": "15.2(7a)E0b",
"product": {
"name": "15.2(7a)E0b",
"product_id": "CSAFPID-271140"
}
},
{
"category": "service_pack",
"name": "15.2(4)E10",
"product": {
"name": "15.2(4)E10",
"product_id": "CSAFPID-271286"
}
},
{
"category": "service_pack",
"name": "15.2(7)E3",
"product": {
"name": "15.2(7)E3",
"product_id": "CSAFPID-271631"
}
},
{
"category": "service_pack",
"name": "15.2(7)E1a",
"product": {
"name": "15.2(7)E1a",
"product_id": "CSAFPID-273573"
}
},
{
"category": "service_pack",
"name": "15.2(7b)E0b",
"product": {
"name": "15.2(7b)E0b",
"product_id": "CSAFPID-276903"
}
},
{
"category": "service_pack",
"name": "15.2(7)E2a",
"product": {
"name": "15.2(7)E2a",
"product_id": "CSAFPID-277205"
}
},
{
"category": "service_pack",
"name": "15.2(4)E10a",
"product": {
"name": "15.2(4)E10a",
"product_id": "CSAFPID-278029"
}
},
{
"category": "service_pack",
"name": "15.2(7)E4",
"product": {
"name": "15.2(7)E4",
"product_id": "CSAFPID-278803"
}
},
{
"category": "service_pack",
"name": "15.2(7)E2b",
"product": {
"name": "15.2(7)E2b",
"product_id": "CSAFPID-279380"
}
},
{
"category": "service_pack",
"name": "15.2(7)E3k",
"product": {
"name": "15.2(7)E3k",
"product_id": "CSAFPID-280771"
}
},
{
"category": "service_pack",
"name": "15.2(4)E10b",
"product": {
"name": "15.2(4)E10b",
"product_id": "CSAFPID-280779"
}
},
{
"category": "service_pack",
"name": "15.2(8)E",
"product": {
"name": "15.2(8)E",
"product_id": "CSAFPID-280857"
}
},
{
"category": "service_pack",
"name": "15.2(8)E1",
"product": {
"name": "15.2(8)E1",
"product_id": "CSAFPID-281581"
}
},
{
"category": "service_pack",
"name": "15.2(7)E5",
"product": {
"name": "15.2(7)E5",
"product_id": "CSAFPID-282112"
}
},
{
"category": "service_pack",
"name": "15.2(7)E6",
"product": {
"name": "15.2(7)E6",
"product_id": "CSAFPID-284159"
}
},
{
"category": "service_pack",
"name": "15.2(8)E2",
"product": {
"name": "15.2(8)E2",
"product_id": "CSAFPID-284334"
}
},
{
"category": "service_pack",
"name": "15.2(4)E10c",
"product": {
"name": "15.2(4)E10c",
"product_id": "CSAFPID-284349"
}
},
{
"category": "service_pack",
"name": "15.2(2)E10b",
"product": {
"name": "15.2(2)E10b",
"product_id": "CSAFPID-284567"
}
},
{
"category": "service_pack",
"name": "15.2(4)E10d",
"product": {
"name": "15.2(4)E10d",
"product_id": "CSAFPID-286452"
}
},
{
"category": "service_pack",
"name": "15.2(7)E7",
"product": {
"name": "15.2(7)E7",
"product_id": "CSAFPID-286558"
}
},
{
"category": "service_pack",
"name": "15.2(2)E10c",
"product": {
"name": "15.2(2)E10c",
"product_id": "CSAFPID-286860"
}
},
{
"category": "service_pack",
"name": "15.2(8)E3",
"product": {
"name": "15.2(8)E3",
"product_id": "CSAFPID-287123"
}
},
{
"category": "service_pack",
"name": "15.2(7)E8",
"product": {
"name": "15.2(7)E8",
"product_id": "CSAFPID-290581"
}
},
{
"category": "service_pack",
"name": "15.2(8)E4",
"product": {
"name": "15.2(8)E4",
"product_id": "CSAFPID-290619"
}
},
{
"category": "service_pack",
"name": "15.2(7)E9",
"product": {
"name": "15.2(7)E9",
"product_id": "CSAFPID-295162"
}
},
{
"category": "service_pack",
"name": "15.2(8)E5",
"product": {
"name": "15.2(8)E5",
"product_id": "CSAFPID-295426"
}
},
{
"category": "service_pack",
"name": "15.2(8)E6",
"product": {
"name": "15.2(8)E6",
"product_id": "CSAFPID-300274"
}
},
{
"category": "service_pack",
"name": "15.2(7)E10",
"product": {
"name": "15.2(7)E10",
"product_id": "CSAFPID-300846"
}
}
],
"category": "product_version",
"name": "15.2E"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.2(6)EB",
"product": {
"name": "15.2(6)EB",
"product_id": "CSAFPID-251487"
}
}
],
"category": "product_version",
"name": "15.2EB"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.2(4)EA7",
"product": {
"name": "15.2(4)EA7",
"product_id": "CSAFPID-230992"
}
},
{
"category": "service_pack",
"name": "15.2(4)EA8",
"product": {
"name": "15.2(4)EA8",
"product_id": "CSAFPID-241614"
}
},
{
"category": "service_pack",
"name": "15.2(4)EA9",
"product": {
"name": "15.2(4)EA9",
"product_id": "CSAFPID-257830"
}
},
{
"category": "service_pack",
"name": "15.2(4)EA9a",
"product": {
"name": "15.2(4)EA9a",
"product_id": "CSAFPID-274038"
}
}
],
"category": "product_version",
"name": "15.2EA"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.0(2)SQD",
"product": {
"name": "15.0(2)SQD",
"product_id": "CSAFPID-204324"
}
},
{
"category": "service_pack",
"name": "15.0(2)SQD1",
"product": {
"name": "15.0(2)SQD1",
"product_id": "CSAFPID-209628"
}
},
{
"category": "service_pack",
"name": "15.0(2)SQD2",
"product": {
"name": "15.0(2)SQD2",
"product_id": "CSAFPID-211290"
}
},
{
"category": "service_pack",
"name": "15.0(2)SQD3",
"product": {
"name": "15.0(2)SQD3",
"product_id": "CSAFPID-217078"
}
},
{
"category": "service_pack",
"name": "15.0(2)SQD4",
"product": {
"name": "15.0(2)SQD4",
"product_id": "CSAFPID-220670"
}
},
{
"category": "service_pack",
"name": "15.0(2)SQD5",
"product": {
"name": "15.0(2)SQD5",
"product_id": "CSAFPID-225358"
}
},
{
"category": "service_pack",
"name": "15.0(2)SQD6",
"product": {
"name": "15.0(2)SQD6",
"product_id": "CSAFPID-226038"
}
},
{
"category": "service_pack",
"name": "15.0(2)SQD7",
"product": {
"name": "15.0(2)SQD7",
"product_id": "CSAFPID-227364"
}
},
{
"category": "service_pack",
"name": "15.0(2)SQD8",
"product": {
"name": "15.0(2)SQD8",
"product_id": "CSAFPID-232850"
}
}
],
"category": "product_version",
"name": "15.0SQD"
},
{
"branches": [
{
"category": "service_pack",
"name": "12.2(6)I1",
"product": {
"name": "12.2(6)I1",
"product_id": "CSAFPID-243144"
}
}
],
"category": "product_version",
"name": "12.2I"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVR1",
"product": {
"name": "15.1(3)SVR1",
"product_id": "CSAFPID-277230"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVR2",
"product": {
"name": "15.1(3)SVR2",
"product_id": "CSAFPID-277253"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVR3",
"product": {
"name": "15.1(3)SVR3",
"product_id": "CSAFPID-279337"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVR10",
"product": {
"name": "15.1(3)SVR10",
"product_id": "CSAFPID-290618"
}
}
],
"category": "product_version",
"name": "15.1SVR"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVS",
"product": {
"name": "15.1(3)SVS",
"product_id": "CSAFPID-277232"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVS1",
"product": {
"name": "15.1(3)SVS1",
"product_id": "CSAFPID-279335"
}
}
],
"category": "product_version",
"name": "15.1SVS"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVT1",
"product": {
"name": "15.1(3)SVT1",
"product_id": "CSAFPID-280759"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVT2",
"product": {
"name": "15.1(3)SVT2",
"product_id": "CSAFPID-282026"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVT3",
"product": {
"name": "15.1(3)SVT3",
"product_id": "CSAFPID-284785"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVT4",
"product": {
"name": "15.1(3)SVT4",
"product_id": "CSAFPID-286399"
}
}
],
"category": "product_version",
"name": "15.1SVT"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVU1",
"product": {
"name": "15.1(3)SVU1",
"product_id": "CSAFPID-283833"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVU10",
"product": {
"name": "15.1(3)SVU10",
"product_id": "CSAFPID-284291"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVU2",
"product": {
"name": "15.1(3)SVU2",
"product_id": "CSAFPID-284566"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVU11",
"product": {
"name": "15.1(3)SVU11",
"product_id": "CSAFPID-286400"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVU20",
"product": {
"name": "15.1(3)SVU20",
"product_id": "CSAFPID-289270"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVU21",
"product": {
"name": "15.1(3)SVU21",
"product_id": "CSAFPID-290557"
}
}
],
"category": "product_version",
"name": "15.1SVU"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVV1",
"product": {
"name": "15.1(3)SVV1",
"product_id": "CSAFPID-284341"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVV2",
"product": {
"name": "15.1(3)SVV2",
"product_id": "CSAFPID-286029"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVV3",
"product": {
"name": "15.1(3)SVV3",
"product_id": "CSAFPID-286940"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVV4",
"product": {
"name": "15.1(3)SVV4",
"product_id": "CSAFPID-289371"
}
}
],
"category": "product_version",
"name": "15.1SVV"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVW",
"product": {
"name": "15.1(3)SVW",
"product_id": "CSAFPID-286451"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVW1",
"product": {
"name": "15.1(3)SVW1",
"product_id": "CSAFPID-286844"
}
}
],
"category": "product_version",
"name": "15.1SVW"
},
{
"branches": [
{
"category": "service_pack",
"name": "15.1(3)SVX",
"product": {
"name": "15.1(3)SVX",
"product_id": "CSAFPID-286927"
}
},
{
"category": "service_pack",
"name": "15.1(3)SVX1",
"product": {
"name": "15.1(3)SVX1",
"product_id": "CSAFPID-289301"
}
}
],
"category": "product_version",
"name": "15.1SVX"
}
],
"category": "product_family",
"name": "IOS"
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-20181",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCvd75918"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-103955",
"CSAFPID-104376",
"CSAFPID-106072",
"CSAFPID-109442",
"CSAFPID-111005",
"CSAFPID-115969",
"CSAFPID-187057",
"CSAFPID-187269",
"CSAFPID-189064",
"CSAFPID-189115",
"CSAFPID-192910",
"CSAFPID-194540",
"CSAFPID-194913",
"CSAFPID-195943",
"CSAFPID-197483",
"CSAFPID-200496",
"CSAFPID-201074",
"CSAFPID-201366",
"CSAFPID-204102",
"CSAFPID-204108",
"CSAFPID-204186",
"CSAFPID-204228",
"CSAFPID-204324",
"CSAFPID-204818",
"CSAFPID-204831",
"CSAFPID-205064",
"CSAFPID-205672",
"CSAFPID-209028",
"CSAFPID-209045",
"CSAFPID-209046",
"CSAFPID-209047",
"CSAFPID-209358",
"CSAFPID-209359",
"CSAFPID-209628",
"CSAFPID-209887",
"CSAFPID-210766",
"CSAFPID-211290",
"CSAFPID-211296",
"CSAFPID-211570",
"CSAFPID-213610",
"CSAFPID-214072",
"CSAFPID-214078",
"CSAFPID-214556",
"CSAFPID-214797",
"CSAFPID-216295",
"CSAFPID-217078",
"CSAFPID-217805",
"CSAFPID-218891",
"CSAFPID-220441",
"CSAFPID-220457",
"CSAFPID-220664",
"CSAFPID-220670",
"CSAFPID-220689",
"CSAFPID-221033",
"CSAFPID-222436",
"CSAFPID-222500",
"CSAFPID-222924",
"CSAFPID-224553",
"CSAFPID-224868",
"CSAFPID-225160",
"CSAFPID-225358",
"CSAFPID-225740",
"CSAFPID-226038",
"CSAFPID-226077",
"CSAFPID-227364",
"CSAFPID-227598",
"CSAFPID-227959",
"CSAFPID-230587",
"CSAFPID-230588",
"CSAFPID-230589",
"CSAFPID-230590",
"CSAFPID-230591",
"CSAFPID-230592",
"CSAFPID-230965",
"CSAFPID-230992",
"CSAFPID-231245",
"CSAFPID-231471",
"CSAFPID-232007",
"CSAFPID-232765",
"CSAFPID-232850",
"CSAFPID-238999",
"CSAFPID-239053",
"CSAFPID-240186",
"CSAFPID-241614",
"CSAFPID-241916",
"CSAFPID-242313",
"CSAFPID-243144",
"CSAFPID-244911",
"CSAFPID-246497",
"CSAFPID-247572",
"CSAFPID-247630",
"CSAFPID-250278",
"CSAFPID-251487",
"CSAFPID-254193",
"CSAFPID-257830",
"CSAFPID-259867",
"CSAFPID-260993",
"CSAFPID-262300",
"CSAFPID-262684",
"CSAFPID-263981",
"CSAFPID-264643",
"CSAFPID-270096",
"CSAFPID-271140",
"CSAFPID-271286",
"CSAFPID-271631",
"CSAFPID-273573",
"CSAFPID-274038",
"CSAFPID-276903",
"CSAFPID-277205",
"CSAFPID-277230",
"CSAFPID-277232",
"CSAFPID-277253",
"CSAFPID-278029",
"CSAFPID-278803",
"CSAFPID-279335",
"CSAFPID-279337",
"CSAFPID-279380",
"CSAFPID-280759",
"CSAFPID-280771",
"CSAFPID-280779",
"CSAFPID-280857",
"CSAFPID-281581",
"CSAFPID-282026",
"CSAFPID-282112",
"CSAFPID-283833",
"CSAFPID-284159",
"CSAFPID-284291",
"CSAFPID-284334",
"CSAFPID-284341",
"CSAFPID-284349",
"CSAFPID-284566",
"CSAFPID-284567",
"CSAFPID-284785",
"CSAFPID-286029",
"CSAFPID-286399",
"CSAFPID-286400",
"CSAFPID-286451",
"CSAFPID-286452",
"CSAFPID-286558",
"CSAFPID-286844",
"CSAFPID-286860",
"CSAFPID-286927",
"CSAFPID-286940",
"CSAFPID-287123",
"CSAFPID-289270",
"CSAFPID-289301",
"CSAFPID-289371",
"CSAFPID-290557",
"CSAFPID-290581",
"CSAFPID-290618",
"CSAFPID-290619",
"CSAFPID-295162",
"CSAFPID-295426",
"CSAFPID-300274",
"CSAFPID-300846"
]
},
"release_date": "2025-05-07T16:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-103955",
"CSAFPID-104376",
"CSAFPID-106072",
"CSAFPID-109442",
"CSAFPID-111005",
"CSAFPID-115969",
"CSAFPID-187057",
"CSAFPID-187269",
"CSAFPID-189064",
"CSAFPID-189115",
"CSAFPID-192910",
"CSAFPID-194540",
"CSAFPID-194913",
"CSAFPID-195943",
"CSAFPID-197483",
"CSAFPID-200496",
"CSAFPID-201074",
"CSAFPID-201366",
"CSAFPID-204102",
"CSAFPID-204108",
"CSAFPID-204186",
"CSAFPID-204228",
"CSAFPID-204324",
"CSAFPID-204818",
"CSAFPID-204831",
"CSAFPID-205064",
"CSAFPID-205672",
"CSAFPID-209028",
"CSAFPID-209045",
"CSAFPID-209046",
"CSAFPID-209047",
"CSAFPID-209358",
"CSAFPID-209359",
"CSAFPID-209628",
"CSAFPID-209887",
"CSAFPID-210766",
"CSAFPID-211290",
"CSAFPID-211296",
"CSAFPID-211570",
"CSAFPID-213610",
"CSAFPID-214072",
"CSAFPID-214078",
"CSAFPID-214556",
"CSAFPID-214797",
"CSAFPID-216295",
"CSAFPID-217078",
"CSAFPID-217805",
"CSAFPID-218891",
"CSAFPID-220441",
"CSAFPID-220457",
"CSAFPID-220664",
"CSAFPID-220670",
"CSAFPID-220689",
"CSAFPID-221033",
"CSAFPID-222436",
"CSAFPID-222500",
"CSAFPID-222924",
"CSAFPID-224553",
"CSAFPID-224868",
"CSAFPID-225160",
"CSAFPID-225358",
"CSAFPID-225740",
"CSAFPID-226038",
"CSAFPID-226077",
"CSAFPID-227364",
"CSAFPID-227598",
"CSAFPID-227959",
"CSAFPID-230587",
"CSAFPID-230588",
"CSAFPID-230589",
"CSAFPID-230590",
"CSAFPID-230591",
"CSAFPID-230592",
"CSAFPID-230965",
"CSAFPID-230992",
"CSAFPID-231245",
"CSAFPID-231471",
"CSAFPID-232007",
"CSAFPID-232765",
"CSAFPID-232850",
"CSAFPID-238999",
"CSAFPID-239053",
"CSAFPID-240186",
"CSAFPID-241614",
"CSAFPID-241916",
"CSAFPID-242313",
"CSAFPID-243144",
"CSAFPID-244911",
"CSAFPID-246497",
"CSAFPID-247572",
"CSAFPID-247630",
"CSAFPID-250278",
"CSAFPID-251487",
"CSAFPID-254193",
"CSAFPID-257830",
"CSAFPID-259867",
"CSAFPID-260993",
"CSAFPID-262300",
"CSAFPID-262684",
"CSAFPID-263981",
"CSAFPID-264643",
"CSAFPID-270096",
"CSAFPID-271140",
"CSAFPID-271286",
"CSAFPID-271631",
"CSAFPID-273573",
"CSAFPID-274038",
"CSAFPID-276903",
"CSAFPID-277205",
"CSAFPID-277230",
"CSAFPID-277232",
"CSAFPID-277253",
"CSAFPID-278029",
"CSAFPID-278803",
"CSAFPID-279335",
"CSAFPID-279337",
"CSAFPID-279380",
"CSAFPID-280759",
"CSAFPID-280771",
"CSAFPID-280779",
"CSAFPID-280857",
"CSAFPID-281581",
"CSAFPID-282026",
"CSAFPID-282112",
"CSAFPID-283833",
"CSAFPID-284159",
"CSAFPID-284291",
"CSAFPID-284334",
"CSAFPID-284341",
"CSAFPID-284349",
"CSAFPID-284566",
"CSAFPID-284567",
"CSAFPID-284785",
"CSAFPID-286029",
"CSAFPID-286399",
"CSAFPID-286400",
"CSAFPID-286451",
"CSAFPID-286452",
"CSAFPID-286558",
"CSAFPID-286844",
"CSAFPID-286860",
"CSAFPID-286927",
"CSAFPID-286940",
"CSAFPID-287123",
"CSAFPID-289270",
"CSAFPID-289301",
"CSAFPID-289371",
"CSAFPID-290557",
"CSAFPID-290581",
"CSAFPID-290618",
"CSAFPID-290619",
"CSAFPID-295162",
"CSAFPID-295426",
"CSAFPID-300274",
"CSAFPID-300846"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-103955",
"CSAFPID-104376",
"CSAFPID-106072",
"CSAFPID-109442",
"CSAFPID-111005",
"CSAFPID-115969",
"CSAFPID-187057",
"CSAFPID-187269",
"CSAFPID-189064",
"CSAFPID-189115",
"CSAFPID-192910",
"CSAFPID-194540",
"CSAFPID-194913",
"CSAFPID-195943",
"CSAFPID-197483",
"CSAFPID-200496",
"CSAFPID-201074",
"CSAFPID-201366",
"CSAFPID-204102",
"CSAFPID-204108",
"CSAFPID-204186",
"CSAFPID-204228",
"CSAFPID-204324",
"CSAFPID-204818",
"CSAFPID-204831",
"CSAFPID-205064",
"CSAFPID-205672",
"CSAFPID-209028",
"CSAFPID-209045",
"CSAFPID-209046",
"CSAFPID-209047",
"CSAFPID-209358",
"CSAFPID-209359",
"CSAFPID-209628",
"CSAFPID-209887",
"CSAFPID-210766",
"CSAFPID-211290",
"CSAFPID-211296",
"CSAFPID-211570",
"CSAFPID-213610",
"CSAFPID-214072",
"CSAFPID-214078",
"CSAFPID-214556",
"CSAFPID-214797",
"CSAFPID-216295",
"CSAFPID-217078",
"CSAFPID-217805",
"CSAFPID-218891",
"CSAFPID-220441",
"CSAFPID-220457",
"CSAFPID-220664",
"CSAFPID-220670",
"CSAFPID-220689",
"CSAFPID-221033",
"CSAFPID-222436",
"CSAFPID-222500",
"CSAFPID-222924",
"CSAFPID-224553",
"CSAFPID-224868",
"CSAFPID-225160",
"CSAFPID-225358",
"CSAFPID-225740",
"CSAFPID-226038",
"CSAFPID-226077",
"CSAFPID-227364",
"CSAFPID-227598",
"CSAFPID-227959",
"CSAFPID-230587",
"CSAFPID-230588",
"CSAFPID-230589",
"CSAFPID-230590",
"CSAFPID-230591",
"CSAFPID-230592",
"CSAFPID-230965",
"CSAFPID-230992",
"CSAFPID-231245",
"CSAFPID-231471",
"CSAFPID-232007",
"CSAFPID-232765",
"CSAFPID-232850",
"CSAFPID-238999",
"CSAFPID-239053",
"CSAFPID-240186",
"CSAFPID-241614",
"CSAFPID-241916",
"CSAFPID-242313",
"CSAFPID-243144",
"CSAFPID-244911",
"CSAFPID-246497",
"CSAFPID-247572",
"CSAFPID-247630",
"CSAFPID-250278",
"CSAFPID-251487",
"CSAFPID-254193",
"CSAFPID-257830",
"CSAFPID-259867",
"CSAFPID-260993",
"CSAFPID-262300",
"CSAFPID-262684",
"CSAFPID-263981",
"CSAFPID-264643",
"CSAFPID-270096",
"CSAFPID-271140",
"CSAFPID-271286",
"CSAFPID-271631",
"CSAFPID-273573",
"CSAFPID-274038",
"CSAFPID-276903",
"CSAFPID-277205",
"CSAFPID-277230",
"CSAFPID-277232",
"CSAFPID-277253",
"CSAFPID-278029",
"CSAFPID-278803",
"CSAFPID-279335",
"CSAFPID-279337",
"CSAFPID-279380",
"CSAFPID-280759",
"CSAFPID-280771",
"CSAFPID-280779",
"CSAFPID-280857",
"CSAFPID-281581",
"CSAFPID-282026",
"CSAFPID-282112",
"CSAFPID-283833",
"CSAFPID-284159",
"CSAFPID-284291",
"CSAFPID-284334",
"CSAFPID-284341",
"CSAFPID-284349",
"CSAFPID-284566",
"CSAFPID-284567",
"CSAFPID-284785",
"CSAFPID-286029",
"CSAFPID-286399",
"CSAFPID-286400",
"CSAFPID-286451",
"CSAFPID-286452",
"CSAFPID-286558",
"CSAFPID-286844",
"CSAFPID-286860",
"CSAFPID-286927",
"CSAFPID-286940",
"CSAFPID-287123",
"CSAFPID-289270",
"CSAFPID-289301",
"CSAFPID-289371",
"CSAFPID-290557",
"CSAFPID-290581",
"CSAFPID-290618",
"CSAFPID-290619",
"CSAFPID-295162",
"CSAFPID-295426",
"CSAFPID-300274",
"CSAFPID-300846"
]
}
],
"title": "Cisco IOS Software Secure Boot Bypass Vulnerability"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…