Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
Vulnerability Details :

CVE-2025-20181

Summary
Assigner-cisco
Assigner Org ID-d1c1063e-7a18-46af-9102-31f8928bc633
Published At-07 May, 2025 | 17:35
Updated At-07 May, 2025 | 19:45
Rejected At-
Credits

A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time. Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

Vendors
-
Not available
Products
-
Metrics (CVSS)
VersionBase scoreBase severityVector
Weaknesses
Attack Patterns
Solution/Workaround
References
HyperlinkResource Type
EPSS History
Score
Latest Score
-
N/A
No data available for selected date range
Percentile
Latest Percentile
-
N/A
No data available for selected date range
Stakeholder-Specific Vulnerability Categorization (SSVC)
▼Common Vulnerabilities and Exposures (CVE)
cve.org
Assigner:cisco
Assigner Org ID:d1c1063e-7a18-46af-9102-31f8928bc633
Published At:07 May, 2025 | 17:35
Updated At:07 May, 2025 | 19:45
Rejected At:
▼CVE Numbering Authority (CNA)

A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time. Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

Affected Products
Vendor
Cisco Systems, Inc.Cisco
Product
IOS
Versions
Affected
  • 15.0(1)XO1
  • 15.0(1)XO
  • 15.0(2)XO
  • 15.0(1)EY
  • 15.0(1)EY1
  • 15.0(1)EY2
  • 15.0(2)SE8
  • 15.0(1)EX
  • 15.0(2)EX
  • 15.0(2)EX1
  • 15.0(2)EX2
  • 15.0(2)EX3
  • 15.0(2)EX4
  • 15.0(2)EX5
  • 15.0(2)EX8
  • 15.0(2a)EX5
  • 15.0(2)EX10
  • 15.0(2)EX11
  • 15.0(2)EX13
  • 15.0(2)EX12
  • 15.2(2)E
  • 15.2(3)E
  • 15.2(2)E1
  • 15.2(4)E
  • 15.2(3)E1
  • 15.2(2)E2
  • 15.2(2a)E1
  • 15.2(2)E3
  • 15.2(2a)E2
  • 15.2(3)E2
  • 15.2(3a)E
  • 15.2(3)E3
  • 15.2(4)E1
  • 15.2(2)E4
  • 15.2(2)E5
  • 15.2(4)E2
  • 15.2(3)E4
  • 15.2(5)E
  • 15.2(4)E3
  • 15.2(2)E6
  • 15.2(5)E1
  • 15.2(5b)E
  • 15.2(2)E5a
  • 15.2(2)E5b
  • 15.2(4)E4
  • 15.2(2)E7
  • 15.2(5)E2
  • 15.2(6)E
  • 15.2(4)E5
  • 15.2(2)E8
  • 15.2(6)E0a
  • 15.2(6)E1
  • 15.2(6)E0c
  • 15.2(4)E6
  • 15.2(6)E2
  • 15.2(2)E9
  • 15.2(4)E7
  • 15.2(7)E
  • 15.2(2)E10
  • 15.2(4)E8
  • 15.2(6)E2a
  • 15.2(6)E2b
  • 15.2(7)E1
  • 15.2(7)E0a
  • 15.2(7)E0b
  • 15.2(7)E0s
  • 15.2(6)E3
  • 15.2(4)E9
  • 15.2(7)E2
  • 15.2(7a)E0b
  • 15.2(4)E10
  • 15.2(7)E3
  • 15.2(7)E1a
  • 15.2(7b)E0b
  • 15.2(7)E2a
  • 15.2(4)E10a
  • 15.2(7)E4
  • 15.2(7)E3k
  • 15.2(8)E
  • 15.2(8)E1
  • 15.2(7)E5
  • 15.2(7)E6
  • 15.2(8)E2
  • 15.2(4)E10d
  • 15.2(7)E7
  • 15.2(8)E3
  • 15.2(7)E8
  • 15.2(8)E4
  • 15.2(7)E9
  • 15.2(8)E5
  • 15.2(8)E6
  • 15.2(7)E10
  • 15.2(6)EB
  • 15.2(4)EA7
  • 15.2(4)EA8
  • 15.2(4)EA9
  • 15.2(4)EA9a
  • 15.0(2)SQD
  • 15.0(2)SQD1
  • 15.0(2)SQD2
  • 15.0(2)SQD3
  • 15.0(2)SQD4
  • 15.0(2)SQD5
  • 15.0(2)SQD6
  • 15.0(2)SQD7
  • 15.0(2)SQD8
Problem Types
TypeCWE IDDescription
cweCWE-347Improper Verification of Cryptographic Signature
Type: cwe
CWE ID: CWE-347
Description: Improper Verification of Cryptographic Signature
Metrics
VersionBase scoreBase severityVector
3.06.8MEDIUM
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Version: 3.0
Base score: 6.8
Base severity: MEDIUM
Vector:
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq
N/A
Hyperlink: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq
Resource: N/A
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Information is not available yet
▼National Vulnerability Database (NVD)
nvd.nist.gov
Source:psirt@cisco.com
Published At:07 May, 2025 | 18:15
Updated At:04 Aug, 2025 | 18:51

A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time. Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.06.8MEDIUM
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Type: Secondary
Version: 3.0
Base score: 6.8
Base severity: MEDIUM
Vector:
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE Matches

Cisco Systems, Inc.
cisco
>>ios>>15.0\(1\)ex
cpe:2.3:o:cisco:ios:15.0\(1\)ex:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(1\)ey
cpe:2.3:o:cisco:ios:15.0\(1\)ey:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(1\)ey1
cpe:2.3:o:cisco:ios:15.0\(1\)ey1:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(1\)ey2
cpe:2.3:o:cisco:ios:15.0\(1\)ey2:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(1\)xo
cpe:2.3:o:cisco:ios:15.0\(1\)xo:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(1\)xo1
cpe:2.3:o:cisco:ios:15.0\(1\)xo1:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)ex
cpe:2.3:o:cisco:ios:15.0\(2\)ex:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)ex1
cpe:2.3:o:cisco:ios:15.0\(2\)ex1:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)ex2
cpe:2.3:o:cisco:ios:15.0\(2\)ex2:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)ex3
cpe:2.3:o:cisco:ios:15.0\(2\)ex3:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)ex4
cpe:2.3:o:cisco:ios:15.0\(2\)ex4:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)ex5
cpe:2.3:o:cisco:ios:15.0\(2\)ex5:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)ex8
cpe:2.3:o:cisco:ios:15.0\(2\)ex8:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)ex10
cpe:2.3:o:cisco:ios:15.0\(2\)ex10:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)ex11
cpe:2.3:o:cisco:ios:15.0\(2\)ex11:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)ex12
cpe:2.3:o:cisco:ios:15.0\(2\)ex12:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)ex13
cpe:2.3:o:cisco:ios:15.0\(2\)ex13:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)se8
cpe:2.3:o:cisco:ios:15.0\(2\)se8:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)sqd
cpe:2.3:o:cisco:ios:15.0\(2\)sqd:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)sqd1
cpe:2.3:o:cisco:ios:15.0\(2\)sqd1:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)sqd2
cpe:2.3:o:cisco:ios:15.0\(2\)sqd2:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)sqd3
cpe:2.3:o:cisco:ios:15.0\(2\)sqd3:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)sqd4
cpe:2.3:o:cisco:ios:15.0\(2\)sqd4:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)sqd5
cpe:2.3:o:cisco:ios:15.0\(2\)sqd5:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)sqd6
cpe:2.3:o:cisco:ios:15.0\(2\)sqd6:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)sqd7
cpe:2.3:o:cisco:ios:15.0\(2\)sqd7:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)sqd8
cpe:2.3:o:cisco:ios:15.0\(2\)sqd8:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2\)xo
cpe:2.3:o:cisco:ios:15.0\(2\)xo:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.0\(2a\)ex5
cpe:2.3:o:cisco:ios:15.0\(2a\)ex5:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e
cpe:2.3:o:cisco:ios:15.2\(2\)e:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e1
cpe:2.3:o:cisco:ios:15.2\(2\)e1:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e2
cpe:2.3:o:cisco:ios:15.2\(2\)e2:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e3
cpe:2.3:o:cisco:ios:15.2\(2\)e3:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e4
cpe:2.3:o:cisco:ios:15.2\(2\)e4:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e5
cpe:2.3:o:cisco:ios:15.2\(2\)e5:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e5a
cpe:2.3:o:cisco:ios:15.2\(2\)e5a:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e5b
cpe:2.3:o:cisco:ios:15.2\(2\)e5b:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e6
cpe:2.3:o:cisco:ios:15.2\(2\)e6:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e7
cpe:2.3:o:cisco:ios:15.2\(2\)e7:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e8
cpe:2.3:o:cisco:ios:15.2\(2\)e8:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e9
cpe:2.3:o:cisco:ios:15.2\(2\)e9:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2\)e10
cpe:2.3:o:cisco:ios:15.2\(2\)e10:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2a\)e1
cpe:2.3:o:cisco:ios:15.2\(2a\)e1:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(2a\)e2
cpe:2.3:o:cisco:ios:15.2\(2a\)e2:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(3\)e
cpe:2.3:o:cisco:ios:15.2\(3\)e:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(3\)e1
cpe:2.3:o:cisco:ios:15.2\(3\)e1:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(3\)e2
cpe:2.3:o:cisco:ios:15.2\(3\)e2:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(3\)e3
cpe:2.3:o:cisco:ios:15.2\(3\)e3:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(3\)e4
cpe:2.3:o:cisco:ios:15.2\(3\)e4:*:*:*:*:*:*:*
Cisco Systems, Inc.
cisco
>>ios>>15.2\(3a\)e
cpe:2.3:o:cisco:ios:15.2\(3a\)e:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-347Primarypsirt@cisco.com
CWE ID: CWE-347
Type: Primary
Source: psirt@cisco.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHqpsirt@cisco.com
Vendor Advisory
Hyperlink: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq
Source: psirt@cisco.com
Resource:
Vendor Advisory

Change History

0
Information is not available yet

Similar CVEs

0Records found

Details not found