cvelistv5 - cve-2025-20181

CVE-2025-20181 (GCVE-0-2025-20181)

Vulnerability from cvelistv5 – Published: 2025-05-07 17:35 – Updated: 2025-05-07 19:45

Summary

Severity ?

6.8 (Medium)


                        
                          CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-347 - Improper Verification of Cryptographic Signature

Assigner

cisco

References

URL

Tags

https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

	Vendor	Product	Version
	Cisco	IOS	Affected: 15.0(1)XO1 Affected: 15.0(1)XO Affected: 15.0(2)XO Affected: 15.0(1)EY Affected: 15.0(1)EY1 Affected: 15.0(1)EY2 Affected: 15.0(2)SE8 Affected: 15.0(1)EX Affected: 15.0(2)EX Affected: 15.0(2)EX1 Affected: 15.0(2)EX2 Affected: 15.0(2)EX3 Affected: 15.0(2)EX4 Affected: 15.0(2)EX5 Affected: 15.0(2)EX8 Affected: 15.0(2a)EX5 Affected: 15.0(2)EX10 Affected: 15.0(2)EX11 Affected: 15.0(2)EX13 Affected: 15.0(2)EX12 Affected: 15.2(2)E Affected: 15.2(3)E Affected: 15.2(2)E1 Affected: 15.2(4)E Affected: 15.2(3)E1 Affected: 15.2(2)E2 Affected: 15.2(2a)E1 Affected: 15.2(2)E3 Affected: 15.2(2a)E2 Affected: 15.2(3)E2 Affected: 15.2(3a)E Affected: 15.2(3)E3 Affected: 15.2(4)E1 Affected: 15.2(2)E4 Affected: 15.2(2)E5 Affected: 15.2(4)E2 Affected: 15.2(3)E4 Affected: 15.2(5)E Affected: 15.2(4)E3 Affected: 15.2(2)E6 Affected: 15.2(5)E1 Affected: 15.2(5b)E Affected: 15.2(2)E5a Affected: 15.2(2)E5b Affected: 15.2(4)E4 Affected: 15.2(2)E7 Affected: 15.2(5)E2 Affected: 15.2(6)E Affected: 15.2(4)E5 Affected: 15.2(2)E8 Affected: 15.2(6)E0a Affected: 15.2(6)E1 Affected: 15.2(6)E0c Affected: 15.2(4)E6 Affected: 15.2(6)E2 Affected: 15.2(2)E9 Affected: 15.2(4)E7 Affected: 15.2(7)E Affected: 15.2(2)E10 Affected: 15.2(4)E8 Affected: 15.2(6)E2a Affected: 15.2(6)E2b Affected: 15.2(7)E1 Affected: 15.2(7)E0a Affected: 15.2(7)E0b Affected: 15.2(7)E0s Affected: 15.2(6)E3 Affected: 15.2(4)E9 Affected: 15.2(7)E2 Affected: 15.2(7a)E0b Affected: 15.2(4)E10 Affected: 15.2(7)E3 Affected: 15.2(7)E1a Affected: 15.2(7b)E0b Affected: 15.2(7)E2a Affected: 15.2(4)E10a Affected: 15.2(7)E4 Affected: 15.2(7)E3k Affected: 15.2(8)E Affected: 15.2(8)E1 Affected: 15.2(7)E5 Affected: 15.2(7)E6 Affected: 15.2(8)E2 Affected: 15.2(4)E10d Affected: 15.2(7)E7 Affected: 15.2(8)E3 Affected: 15.2(7)E8 Affected: 15.2(8)E4 Affected: 15.2(7)E9 Affected: 15.2(8)E5 Affected: 15.2(8)E6 Affected: 15.2(7)E10 Affected: 15.2(6)EB Affected: 15.2(4)EA7 Affected: 15.2(4)EA8 Affected: 15.2(4)EA9 Affected: 15.2(4)EA9a Affected: 15.0(2)SQD Affected: 15.0(2)SQD1 Affected: 15.0(2)SQD2 Affected: 15.0(2)SQD3 Affected: 15.0(2)SQD4 Affected: 15.0(2)SQD5 Affected: 15.0(2)SQD6 Affected: 15.0(2)SQD7 Affected: 15.0(2)SQD8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-20181",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-07T18:56:17.739877Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-07T19:45:02.742Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "IOS",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "15.0(1)XO1"
            },
            {
              "status": "affected",
              "version": "15.0(1)XO"
            },
            {
              "status": "affected",
              "version": "15.0(2)XO"
            },
            {
              "status": "affected",
              "version": "15.0(1)EY"
            },
            {
              "status": "affected",
              "version": "15.0(1)EY1"
            },
            {
              "status": "affected",
              "version": "15.0(1)EY2"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE8"
            },
            {
              "status": "affected",
              "version": "15.0(1)EX"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX1"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX2"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX3"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX4"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX5"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX8"
            },
            {
              "status": "affected",
              "version": "15.0(2a)EX5"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX10"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX11"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX13"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX12"
            },
            {
              "status": "affected",
              "version": "15.2(2)E"
            },
            {
              "status": "affected",
              "version": "15.2(3)E"
            },
            {
              "status": "affected",
              "version": "15.2(2)E1"
            },
            {
              "status": "affected",
              "version": "15.2(4)E"
            },
            {
              "status": "affected",
              "version": "15.2(3)E1"
            },
            {
              "status": "affected",
              "version": "15.2(2)E2"
            },
            {
              "status": "affected",
              "version": "15.2(2a)E1"
            },
            {
              "status": "affected",
              "version": "15.2(2)E3"
            },
            {
              "status": "affected",
              "version": "15.2(2a)E2"
            },
            {
              "status": "affected",
              "version": "15.2(3)E2"
            },
            {
              "status": "affected",
              "version": "15.2(3a)E"
            },
            {
              "status": "affected",
              "version": "15.2(3)E3"
            },
            {
              "status": "affected",
              "version": "15.2(4)E1"
            },
            {
              "status": "affected",
              "version": "15.2(2)E4"
            },
            {
              "status": "affected",
              "version": "15.2(2)E5"
            },
            {
              "status": "affected",
              "version": "15.2(4)E2"
            },
            {
              "status": "affected",
              "version": "15.2(3)E4"
            },
            {
              "status": "affected",
              "version": "15.2(5)E"
            },
            {
              "status": "affected",
              "version": "15.2(4)E3"
            },
            {
              "status": "affected",
              "version": "15.2(2)E6"
            },
            {
              "status": "affected",
              "version": "15.2(5)E1"
            },
            {
              "status": "affected",
              "version": "15.2(5b)E"
            },
            {
              "status": "affected",
              "version": "15.2(2)E5a"
            },
            {
              "status": "affected",
              "version": "15.2(2)E5b"
            },
            {
              "status": "affected",
              "version": "15.2(4)E4"
            },
            {
              "status": "affected",
              "version": "15.2(2)E7"
            },
            {
              "status": "affected",
              "version": "15.2(5)E2"
            },
            {
              "status": "affected",
              "version": "15.2(6)E"
            },
            {
              "status": "affected",
              "version": "15.2(4)E5"
            },
            {
              "status": "affected",
              "version": "15.2(2)E8"
            },
            {
              "status": "affected",
              "version": "15.2(6)E0a"
            },
            {
              "status": "affected",
              "version": "15.2(6)E1"
            },
            {
              "status": "affected",
              "version": "15.2(6)E0c"
            },
            {
              "status": "affected",
              "version": "15.2(4)E6"
            },
            {
              "status": "affected",
              "version": "15.2(6)E2"
            },
            {
              "status": "affected",
              "version": "15.2(2)E9"
            },
            {
              "status": "affected",
              "version": "15.2(4)E7"
            },
            {
              "status": "affected",
              "version": "15.2(7)E"
            },
            {
              "status": "affected",
              "version": "15.2(2)E10"
            },
            {
              "status": "affected",
              "version": "15.2(4)E8"
            },
            {
              "status": "affected",
              "version": "15.2(6)E2a"
            },
            {
              "status": "affected",
              "version": "15.2(6)E2b"
            },
            {
              "status": "affected",
              "version": "15.2(7)E1"
            },
            {
              "status": "affected",
              "version": "15.2(7)E0a"
            },
            {
              "status": "affected",
              "version": "15.2(7)E0b"
            },
            {
              "status": "affected",
              "version": "15.2(7)E0s"
            },
            {
              "status": "affected",
              "version": "15.2(6)E3"
            },
            {
              "status": "affected",
              "version": "15.2(4)E9"
            },
            {
              "status": "affected",
              "version": "15.2(7)E2"
            },
            {
              "status": "affected",
              "version": "15.2(7a)E0b"
            },
            {
              "status": "affected",
              "version": "15.2(4)E10"
            },
            {
              "status": "affected",
              "version": "15.2(7)E3"
            },
            {
              "status": "affected",
              "version": "15.2(7)E1a"
            },
            {
              "status": "affected",
              "version": "15.2(7b)E0b"
            },
            {
              "status": "affected",
              "version": "15.2(7)E2a"
            },
            {
              "status": "affected",
              "version": "15.2(4)E10a"
            },
            {
              "status": "affected",
              "version": "15.2(7)E4"
            },
            {
              "status": "affected",
              "version": "15.2(7)E3k"
            },
            {
              "status": "affected",
              "version": "15.2(8)E"
            },
            {
              "status": "affected",
              "version": "15.2(8)E1"
            },
            {
              "status": "affected",
              "version": "15.2(7)E5"
            },
            {
              "status": "affected",
              "version": "15.2(7)E6"
            },
            {
              "status": "affected",
              "version": "15.2(8)E2"
            },
            {
              "status": "affected",
              "version": "15.2(4)E10d"
            },
            {
              "status": "affected",
              "version": "15.2(7)E7"
            },
            {
              "status": "affected",
              "version": "15.2(8)E3"
            },
            {
              "status": "affected",
              "version": "15.2(7)E8"
            },
            {
              "status": "affected",
              "version": "15.2(8)E4"
            },
            {
              "status": "affected",
              "version": "15.2(7)E9"
            },
            {
              "status": "affected",
              "version": "15.2(8)E5"
            },
            {
              "status": "affected",
              "version": "15.2(8)E6"
            },
            {
              "status": "affected",
              "version": "15.2(7)E10"
            },
            {
              "status": "affected",
              "version": "15.2(6)EB"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA7"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA8"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA9"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA9a"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD1"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD2"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD3"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD4"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD5"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD6"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD7"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\r\n\r This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time.\r\n\r Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "cvssV3_0"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-347",
              "description": "Improper Verification of Cryptographic Signature",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T17:35:31.850Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-c2960-3560-sboot-ZtqADrHq",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
        }
      ],
      "source": {
        "advisory": "cisco-sa-c2960-3560-sboot-ZtqADrHq",
        "defects": [
          "CSCvd75918"
        ],
        "discovery": "INTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2025-20181",
    "datePublished": "2025-05-07T17:35:31.850Z",
    "dateReserved": "2024-10-10T19:15:13.225Z",
    "dateUpdated": "2025-05-07T19:45:02.742Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-20181\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2025-05-07T18:15:37.973\",\"lastModified\":\"2025-08-04T18:51:54.673\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\\r\\n\\r This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time.\\r\\n\\r Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en el software Cisco IOS para los switches Cisco Catalyst de las series 2960X, 2960XR, 2960CX y 3560CX podr\u00eda permitir que un atacante local autenticado con nivel de privilegio 15, o uno no autenticado con acceso f\u00edsico al dispositivo, ejecute c\u00f3digo persistente durante el arranque y rompa la cadena de confianza. Esta vulnerabilidad se debe a la falta de verificaci\u00f3n de firmas para archivos espec\u00edficos que pueden cargarse durante el arranque del dispositivo. Un atacante podr\u00eda explotar esta vulnerabilidad colocando un archivo manipulado en una ubicaci\u00f3n espec\u00edfica del dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante ejecutar c\u00f3digo arbitrario durante el arranque. Dado que esto permite al atacante eludir una importante funci\u00f3n de seguridad del dispositivo, Cisco ha elevado la calificaci\u00f3n de impacto en la seguridad (SIR) de este aviso de media a alta.\"}],\"metrics\":{\"cvssMetricV30\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":6.8,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"PHYSICAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":0.9,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-347\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(1\\\\)ex:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"189B0C7C-D794-43EB-A6C6-F29C4B9623A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(1\\\\)ey:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5AF55C0A-768F-445A-AF40-2B553363AF18\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(1\\\\)ey1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9E7D5CC-521E-4B2A-B6DB-D2A49D31DE4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(1\\\\)ey2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10D75DC6-D7B1-46D2-ABEF-97D908992FF1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(1\\\\)xo:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"28722F17-AF23-4435-AF9B-996798ACF2C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(1\\\\)xo1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"587450DF-77E4-4320-9191-383EBE5A6CB7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)ex:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C965E814-7ABE-4C45-8EA8-B6818BC213F6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)ex1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4556022D-5B0C-4F7A-868C-9EC01F716D16\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)ex2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7760B1FF-BC56-49F4-8020-439EA2F53AC5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)ex3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"49229E8B-19ED-4E5E-AA2E-F699C033F4A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)ex4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9A4AC61-4386-4218-91B7-6CE776D8050B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)ex5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59403A6B-3488-4F81-BE3C-A06AF1731B99\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)ex8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"02ABF12A-78BD-459D-BF53-065A56C385AD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)ex10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D15A929-0C2B-4C3D-99E4-0E7D46217216\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)ex11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7D00EB0E-92D3-4C5B-B107-730B47BD6E01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)ex12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF7F6A52-9AA9-4441-A137-7EE3470C155C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)ex13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"92CEEA13-0B40-4203-8BAE-09374C9B1FE5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)se8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"611A649F-161B-4683-98D5-4C8150838039\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)sqd:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2D39E1ED-2F67-4116-9BF5-44CA8EF9A016\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)sqd1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"729613AF-4C56-4514-9ECD-6A466C278E0F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)sqd2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"368F2F9E-FD52-4A74-8378-DF246252B745\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)sqd3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2E452976-8876-40D7-8880-29197DB5457A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)sqd4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCE5C762-5329-47E9-8D0C-C0A546AC24CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)sqd5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0E5CC49C-34B5-4C8A-8FFC-DACB4B0C76FD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)sqd6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D93F335-8058-45BA-8653-9F3E4A5FA28E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)sqd7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DA6FDABA-6F35-4FAA-9ADF-04E4CD1DCF15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)sqd8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF152F35-32C6-4C2A-BC91-90AAE442F239\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2\\\\)xo:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"42CEA3E9-2320-40D9-8BC0-4CA631ED2C3D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.0\\\\(2a\\\\)ex5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7CD47CBD-A833-4CD0-A62C-22FBB7A4244D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3A156FE-590E-49DB-819D-4103D629829D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C1F6C767-042C-4277-90F4-F81D9AFFF227\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D33DB919-4F82-43C6-830A-A9D4FC043B42\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"72782F95-948D-489B-A19A-9DAB825DFE4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F904CD0-8609-47F7-988C-613DE26BDBB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC3A39FE-69F6-4BB9-A9CE-D516A3802538\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e5a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB9B7058-3467-4CCE-B9A4-71CF8143FEC8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e5b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"90447919-CC40-4CA5-A488-2FCF0F25ABE1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DEF74559-F418-48EA-9CA7-A9574CAFC97E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A5A1ADB8-DF62-4CB6-8075-2F0956BB0126\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB0F2B2A-F273-4166-826F-88B54A480BB9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"194D54FC-F399-4C86-AE04-FB3FD828DDA0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2\\\\)e10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1C85E0E-A920-4501-AC23-0F7534CF88EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2a\\\\)e1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C846C74-7644-4DAB-A4B8-B33464EBE92E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(2a\\\\)e2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5DDB0B25-95E0-4796-A56F-1A59EF7EA283\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(3\\\\)e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB214EAE-AEB7-4359-AD8C-86CCC080EF96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(3\\\\)e1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"757000B2-A8EB-464A-9A2D-EC4D920A0569\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(3\\\\)e2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"102BF855-ED1C-4D26-85D9-74B2BE0E9CF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(3\\\\)e3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B42618DF-F118-41A7-96E5-24C229DA020E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(3\\\\)e4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26F6FC68-BF4A-4511-8B46-A93C81E349B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(3a\\\\)e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"260E5F96-48DB-41C4-B45E-5BE0367DD7E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80114F8D-320D-41FF-ADD3-729E250A8CD4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"879C4495-3B26-4370-8708-16F5002E37CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A9DDD1E-201F-42B8-ADC9-9CD2F3ED2C4F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D8C2BB1F-79DF-4471-B75F-C22CEBB5380F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F5A55B3-49E4-4C48-B942-4816504BAA30\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62AADD63-CEA3-461B-94EA-0CDAB4A2ED00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB704746-C27B-4C6B-948C-B8C0A3F40782\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F354F8F6-70D3-43EE-BF08-DFB87E83E847\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62F908B0-7ECE-40F8-8549-29BD1A070606\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"378E67DD-779C-4852-BF29-38C2DFFB1BBB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e10a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9033ACC7-1CCC-44E7-8275-73499C0E6E87\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)e10d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BFD4AF73-6C03-4978-BC43-857188BF7E4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)ea7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7785E177-C04E-4170-9C35-B4259D14EA85\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)ea8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8CAE727E-E552-4222-8FF0-6146A813BDEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)ea9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C7850295-C728-4448-ABA7-D01397DBBE5A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(4\\\\)ea9a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7C104A47-53EE-47FC-BAE5-21925BEE98E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(5\\\\)e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F112DE64-0042-4FB9-945D-3107468193E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(5\\\\)e1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E027FB12-862F-413E-AA2B-4BBD90AE3650\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(5\\\\)e2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD28874B-148A-4299-9AA1-67A550B25F8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(5b\\\\)e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F29B2E6F-ED6C-4568-9042-7A1BD96A9E07\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(6\\\\)e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"199DCF1B-8A1E-47CC-87A6-64E6F21D8886\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(6\\\\)e0a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5B78669-3B28-4F1D-993D-85282A7D0E96\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(6\\\\)e0c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DD05109E-1183-419D-96A1-9CD5EA5ECC3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(6\\\\)e1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3C73A3A-4B84-476F-AC3C-81DCB527E29A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(6\\\\)e2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5DEE2C71-C401-43D1-86DC-725FE5FDF87E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(6\\\\)e2a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1758F264-96F9-4EE9-9CA9-AD5407885547\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(6\\\\)e2b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FB2842F6-4CD5-457C-AC75-241A5AB9534B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(6\\\\)e3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5ABE0470-E94A-4CAF-865D-73E2607A0DC1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(6\\\\)eb:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A9CCD7E3-C62B-4151-96FF-1175D4896E95\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6437E689-A049-4D48-AB7A-49CA7EBDE8B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e0a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"110B699D-169E-4932-A480-6EBB90CAE94B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e0b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4C12918-E5BB-465E-9DA4-06B7351DD805\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e0s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4862C453-8BD7-4D53-B2D6-CE3E44A4915A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0C4E1F4-AD64-418C-A308-85501E0F3EA2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27EF41C6-A0D0-4149-BC5D-B31C4F5CC6D1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57ED9CDC-FC03-4DA7-A791-CE61D0D8364D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e2a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AB8C3BBA-4829-4006-B7EB-F552D86922C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F980EFA3-BB92-49D3-8D5F-2804BB44ABB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e3k:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D6D0AA7-E879-4303-AB2D-4FEF3574B60E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"345C9300-CAC2-4427-A6B4-8DBC72573E00\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"64BFCF66-DE06-46DA-8F9D-60A446DC0F0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BDF6ABA-F0A4-423F-9056-A57C6A074137\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"956FE25C-3CB8-4479-850D-719827123A3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"23ABB581-90EF-4F6C-9778-735932D2B08D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BC3FD874-5EDF-48E0-A5AC-415A620C1FF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7\\\\)e10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"58F396D6-9B6E-4E6A-B561-9822DB13C7AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7a\\\\)e0b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1374E243-4EC2-4A81-991C-B5705135CAD2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(7b\\\\)e0b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6ECA6101-94BA-4209-8243-A56AF02963EA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(8\\\\)e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFF00927-80B0-4BE3-BF7C-E663A5E7763A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(8\\\\)e1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9795E31D-A642-4100-A980-CD49C291AB7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(8\\\\)e2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"83C79479-27C6-4273-BC80-70395D609197\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(8\\\\)e3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"28ACC494-2B4B-4BCE-9275-B7B10CC69B1B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(8\\\\)e4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8BB9098-7C1D-4776-8B1F-EF4A0461CCDB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(8\\\\)e5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"602A88C0-30D1-4B63-A8F7-EF1D35350897\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:15.2\\\\(8\\\\)e6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8D3AE0C5-D071-44B4-B820-422296FDC259\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960cx-8pc-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D5B6046-6377-471B-9639-D7F635B08190\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960cx-8tc-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EFCF1E00-1C43-486E-A64E-14F5BEF82362\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-24pd-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D76048CE-58D5-4F67-8679-9C863D41F15E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-24ps-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB7DC221-0BA1-4051-8643-1180C9EA682A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-24psq-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"00CEE576-6C55-4BD4-B9F2-33E40483437B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-24psq-l_cool:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2683677D-9FD4-416B-8CFF-D81AF3174B3A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-24td-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"548B1FAF-946A-446B-8248-10BC194496B1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-24ts-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3531645A-C4FB-4F6D-BBD2-D2852AA13509\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-24ts-ll:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"46984315-BF1E-4146-9960-328AEFA73D54\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-48fpd-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5FC6D2F-0B4A-4D12-BF34-8D91C948CD23\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-48fps-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"927762E0-6EE5-48C9-A7EE-8824BEBED08A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-48lpd-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"34F1CA06-D540-4CDB-BACB-5D528C830753\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-48lps-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F53A6E90-DA02-420A-B4A7-BC6D73C4B95A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-48td-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B48837AB-F3DB-4246-90E2-6D8CD8BCF658\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-48ts-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8B888C8-9E13-4353-A8D8-96900726AE77\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960x-48ts-ll:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EA35A21E-9FB8-4694-B46D-E9381CB3D0C6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-24pd-i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F1BD40B3-2AD6-42D3-AE79-2E66A4CDF79E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-24pd-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F5F1600-30A5-4B31-A518-7B84BFE16883\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-24ps-i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E03D0B73-B854-4385-9AD2-EAC7B041558D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-24ps-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"868B074C-2A14-4242-829A-202095A2CFF1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-24td-i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C990D9F-42F4-4722-AF6E-2933E5872C17\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-24td-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"99C76EA7-969F-4A5F-B045-995C9445B415\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-24ts-i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"567757A5-74CB-4FB6-9BDA-FA4F51A02998\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-24ts-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7794B87E-C70E-4DA3-9FC8-0170A0898557\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-48fpd-i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BEB1267-B23F-4001-B6E2-49894CF6EC38\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-48fpd-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"845DDB35-3BB6-41CB-8304-340F444B6FE9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-48fps-i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DAC629E-531F-4B99-9A07-15E113169FCA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-48fps-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A63DC2E4-83AB-487E-80D5-036723D930F5\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-48lpd-i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6DD7CDE-C7E1-466C-A6E3-33AA30F9CDEE\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-48lpd-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4F543085-A2E2-4D7E-96EC-E9C6B964AED2\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-48lps-i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B64C85B3-D227-4BE7-BE7B-B05F86FE0583\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-48lps-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3BC9AD1E-3FE7-42D2-9A8D-F71694EF9BAB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-48td-i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A153EAF3-C3DC-49C5-BBBA-7459850B1F57\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-48td-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C2000D5-E0C0-4488-8213-DC3079301050\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-48ts-i:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"63AF0F69-A0E0-4AAC-B96B-1C1B59D76669\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_2960xr-48ts-l:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"179F9893-1C6B-468E-84F3-1CAAAE0A7671\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_3560cx-12pc-s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2ABDF97F-B703-40A0-B510-D73859139E87\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_3560cx-12pd-s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6637D9D4-14CE-48D2-90D4-19EF761F4193\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_3560cx-12tc-s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37BE430A-2446-4F29-88D8-D452D1022B02\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_3560cx-8pc-s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"09DF34EC-7BC3-44DC-B7B1-94162245CBBA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_3560cx-8pt-s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06EEDB4F-BD1E-4914-AF79-64D42643683D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_3560cx-8tc-s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"54BFFB02-7C84-4569-8129-74B84A5E7310\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:catalyst_3560cx-8xpd-s:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F12A3197-0CE2-44F4-B310-DE8D4A72B00D\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-20181\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-05-07T18:56:17.739877Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-07T18:56:19.192Z\"}}], \"cna\": {\"source\": {\"defects\": [\"CSCvd75918\"], \"advisory\": \"cisco-sa-c2960-3560-sboot-ZtqADrHq\", \"discovery\": \"INTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_0\", \"cvssV3_0\": {\"scope\": \"UNCHANGED\", \"version\": \"3.0\", \"baseScore\": 6.8, \"attackVector\": \"PHYSICAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"IOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"15.0(1)XO1\"}, {\"status\": \"affected\", \"version\": \"15.0(1)XO\"}, {\"status\": \"affected\", \"version\": \"15.0(2)XO\"}, {\"status\": \"affected\", \"version\": \"15.0(1)EY\"}, {\"status\": \"affected\", \"version\": \"15.0(1)EY1\"}, {\"status\": \"affected\", \"version\": \"15.0(1)EY2\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE8\"}, {\"status\": \"affected\", \"version\": \"15.0(1)EX\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX1\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX2\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX3\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX4\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX5\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX8\"}, {\"status\": \"affected\", \"version\": \"15.0(2a)EX5\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX10\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX11\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX13\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX12\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E\"}, {\"status\": \"affected\", \"version\": \"15.2(3)E\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E\"}, {\"status\": \"affected\", \"version\": \"15.2(3)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(2a)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E3\"}, {\"status\": \"affected\", \"version\": \"15.2(2a)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(3)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(3a)E\"}, {\"status\": \"affected\", \"version\": \"15.2(3)E3\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E4\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E5\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(3)E4\"}, {\"status\": \"affected\", \"version\": \"15.2(5)E\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E3\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E6\"}, {\"status\": \"affected\", \"version\": \"15.2(5)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(5b)E\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E5a\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E5b\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E4\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E7\"}, {\"status\": \"affected\", \"version\": \"15.2(5)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(6)E\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E5\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E8\"}, {\"status\": \"affected\", \"version\": \"15.2(6)E0a\"}, {\"status\": \"affected\", \"version\": \"15.2(6)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(6)E0c\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E6\"}, {\"status\": \"affected\", \"version\": \"15.2(6)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E9\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E7\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E10\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E8\"}, {\"status\": \"affected\", \"version\": \"15.2(6)E2a\"}, {\"status\": \"affected\", \"version\": \"15.2(6)E2b\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E0a\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E0b\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E0s\"}, {\"status\": \"affected\", \"version\": \"15.2(6)E3\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E9\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(7a)E0b\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E10\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E3\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E1a\"}, {\"status\": \"affected\", \"version\": \"15.2(7b)E0b\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E2a\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E10a\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E4\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E3k\"}, {\"status\": \"affected\", \"version\": \"15.2(8)E\"}, {\"status\": \"affected\", \"version\": \"15.2(8)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E5\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E6\"}, {\"status\": \"affected\", \"version\": \"15.2(8)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E10d\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E7\"}, {\"status\": \"affected\", \"version\": \"15.2(8)E3\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E8\"}, {\"status\": \"affected\", \"version\": \"15.2(8)E4\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E9\"}, {\"status\": \"affected\", \"version\": \"15.2(8)E5\"}, {\"status\": \"affected\", \"version\": \"15.2(8)E6\"}, {\"status\": \"affected\", \"version\": \"15.2(7)E10\"}, {\"status\": \"affected\", \"version\": \"15.2(6)EB\"}, {\"status\": \"affected\", \"version\": \"15.2(4)EA7\"}, {\"status\": \"affected\", \"version\": \"15.2(4)EA8\"}, {\"status\": \"affected\", \"version\": \"15.2(4)EA9\"}, {\"status\": \"affected\", \"version\": \"15.2(4)EA9a\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD1\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD2\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD3\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD4\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD5\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD6\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD7\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD8\"}]}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq\", \"name\": \"cisco-sa-c2960-3560-sboot-ZtqADrHq\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\\r\\n\\r This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time.\\r\\n\\r Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-347\", \"description\": \"Improper Verification of Cryptographic Signature\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2025-05-07T17:35:31.850Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-20181\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-07T19:45:02.742Z\", \"dateReserved\": \"2024-10-10T19:15:13.225Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2025-05-07T17:35:31.850Z\", \"assignerShortName\": \"cisco\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CISCO-SA-C2960-3560-SBOOT-ZTQADRHQ

Vulnerability from csaf_cisco - Published: 2025-05-07 16:00 - Updated: 2025-05-07 16:00

Summary

Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches Secure Boot Bypass Vulnerability

Notes

Summary

A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time. Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279"].

Vulnerable Products

This vulnerability affects the following Cisco products if they are running a vulnerable release of Cisco IOS Software, regardless of device configuration: Catalyst 2960X Series Switches Catalyst 2960XR Series Switches Catalyst 2960CX Series Switches Catalyst 3560CX Series Switches For information about which Cisco software releases are vulnerable, see the Fixed Software ["#fs"] section of this advisory.

Products Confirmed Not Vulnerable

Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by this vulnerability. Cisco has confirmed that this vulnerability does not affect the following Cisco products: IOS Software running on devices other than those listed in the Vulnerable Products ["#vp"] section of this advisory IOS XE Software IOS XR Software Meraki products NX-OS Software

Workarounds

There are no workarounds that address this vulnerability.

Fixed Software

Cisco has released free software updates ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu"] that address the vulnerability described in this advisory. Customers with service contracts that entitle them to regular software updates should obtain security fixes through their usual update channels. Customers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license: https://www.cisco.com/c/en/us/products/end-user-license-agreement.html ["https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"] Additionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades. The Cisco Support and Downloads page ["https://www.cisco.com/c/en/us/support/index.html"] on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. When considering software upgrades ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page ["https://www.cisco.com/go/psirt"], to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers. Customers Without Service Contracts Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"] Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade. Cisco IOS and IOS XE Software To help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (“First Fixed”). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (“Combined First Fixed”). To use the tool, go to the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"] page and follow the instructions. Alternatively, use the following form to determine whether a release is affected by any Cisco Security Advisory. To use the form, follow these steps: Choose which advisories the tool will search—only this advisory, only advisories with a Critical or High Security Impact Rating (SIR) ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"], or all advisories. Enter a release number—for example, 15.9(3)M2 or 17.3.3. Click Check. Only this advisory All Critical and High advisories All advisories

Vulnerability Policy

To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.

Exploitation and Public Announcements

The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Source

This vulnerability was found during internal security testing by X.B. of the Cisco Advanced Security Initiatives Group (ASIG).

Legal Disclaimer

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME. A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "summary": "This vulnerability was found during internal security testing by X.B. of the Cisco Advanced Security Initiatives Group (ASIG)."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "notes": [
      {
        "category": "summary",
        "text": "A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\r\n\r\nThis vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time.\r\n\r\nBecause this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\n\r\n\r\nThis advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [\"https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279\"].",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "This vulnerability affects the following Cisco products if they are running a vulnerable release of Cisco IOS Software, regardless of device configuration:\r\n\r\nCatalyst 2960X Series Switches\r\nCatalyst 2960XR Series Switches\r\nCatalyst 2960CX Series Switches\r\nCatalyst 3560CX Series Switches\r\n\r\nFor information about which Cisco software releases are vulnerable, see the Fixed Software [\"#fs\"] section of this advisory.",
        "title": "Vulnerable Products"
      },
      {
        "category": "general",
        "text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that this vulnerability does not affect the following Cisco products:\r\n\r\nIOS Software running on devices other than those listed in the Vulnerable Products [\"#vp\"] section of this advisory\r\nIOS XE Software\r\nIOS XR Software\r\nMeraki products\r\nNX-OS Software",
        "title": "Products Confirmed Not Vulnerable"
      },
      {
        "category": "general",
        "text": "There are no workarounds that address this vulnerability.",
        "title": "Workarounds"
      },
      {
        "category": "general",
        "text": "Cisco has released free software updates [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu\"] that address the vulnerability described in this advisory. Customers with service contracts that entitle them to regular software updates should obtain security fixes through their usual update channels.\r\n\r\nCustomers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:\r\nhttps://www.cisco.com/c/en/us/products/end-user-license-agreement.html [\"https://www.cisco.com/c/en/us/products/end-user-license-agreement.html\"]\r\n\r\nAdditionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.\r\n\r\nThe Cisco Support and Downloads page [\"https://www.cisco.com/c/en/us/support/index.html\"] on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool.\r\n\r\nWhen considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page [\"https://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.\r\n  Customers Without Service Contracts\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]\r\n\r\nCustomers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n        Cisco IOS and IOS XE Software\r\nTo help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (\u201cFirst Fixed\u201d). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (\u201cCombined First Fixed\u201d).\r\n\r\nTo use the tool, go to the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"] page and follow the instructions. Alternatively, use the following form to determine whether a release is affected by any Cisco Security Advisory. To use the form, follow these steps:\r\n\r\nChoose which advisories the tool will search\u2014only this advisory, only advisories with a Critical or High Security Impact Rating (SIR) [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr\"], or all advisories.\r\nEnter a release number\u2014for example, 15.9(3)M2 or 17.3.3.\r\nClick Check.\r\n\r\n       Only this advisory  All Critical and High advisories  All advisories",
        "title": "Fixed Software"
      },
      {
        "category": "general",
        "text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
        "title": "Vulnerability Policy"
      },
      {
        "category": "general",
        "text": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
        "title": "Exploitation and Public Announcements"
      },
      {
        "category": "general",
        "text": "This vulnerability was found during internal security testing by X.B. of the Cisco Advanced Security Initiatives Group (ASIG).",
        "title": "Source"
      },
      {
        "category": "legal_disclaimer",
        "text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
        "title": "Legal Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@cisco.com",
      "issuing_authority": "Cisco PSIRT",
      "name": "Cisco",
      "namespace": "https://wwww.cisco.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches Secure Boot Bypass Vulnerability",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
      },
      {
        "category": "external",
        "summary": "Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication",
        "url": "https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279"
      },
      {
        "category": "external",
        "summary": "Cisco Security Vulnerability Policy",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
      },
      {
        "category": "external",
        "summary": "free software updates",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu"
      },
      {
        "category": "external",
        "summary": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html",
        "url": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"
      },
      {
        "category": "external",
        "summary": "Cisco Support and Downloads page",
        "url": "https://www.cisco.com/c/en/us/support/index.html"
      },
      {
        "category": "external",
        "summary": "considering software upgrades",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisories page",
        "url": "https://www.cisco.com/go/psirt"
      },
      {
        "category": "external",
        "summary": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html",
        "url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
      },
      {
        "category": "external",
        "summary": "Cisco Software Checker",
        "url": "https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"
      },
      {
        "category": "external",
        "summary": "Security Impact Rating (SIR)",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"
      },
      {
        "category": "external",
        "summary": "Security Vulnerability Policy",
        "url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"
      }
    ],
    "title": "Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches Secure Boot Bypass Vulnerability",
    "tracking": {
      "current_release_date": "2025-05-07T16:00:00+00:00",
      "generator": {
        "date": "2025-05-07T16:00:53+00:00",
        "engine": {
          "name": "TVCE"
        }
      },
      "id": "cisco-sa-c2960-3560-sboot-ZtqADrHq",
      "initial_release_date": "2025-05-07T16:00:00+00:00",
      "revision_history": [
        {
          "date": "2025-05-07T15:53:27+00:00",
          "number": "1.0.0",
          "summary": "Initial public release."
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.0(1)XO1",
                    "product": {
                      "name": "15.0(1)XO1",
                      "product_id": "CSAFPID-103955"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(1)XO",
                    "product": {
                      "name": "15.0(1)XO",
                      "product_id": "CSAFPID-106072"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)XO",
                    "product": {
                      "name": "15.0(2)XO",
                      "product_id": "CSAFPID-111005"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.0XO"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.0(1)EY",
                    "product": {
                      "name": "15.0(1)EY",
                      "product_id": "CSAFPID-104376"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(1)EY1",
                    "product": {
                      "name": "15.0(1)EY1",
                      "product_id": "CSAFPID-115969"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(1)EY2",
                    "product": {
                      "name": "15.0(1)EY2",
                      "product_id": "CSAFPID-187269"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.0EY"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SE8",
                    "product": {
                      "name": "15.0(2)SE8",
                      "product_id": "CSAFPID-209028"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.0SE"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.0(1)EX",
                    "product": {
                      "name": "15.0(1)EX",
                      "product_id": "CSAFPID-109442"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX",
                    "product": {
                      "name": "15.0(2)EX",
                      "product_id": "CSAFPID-189064"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX1",
                    "product": {
                      "name": "15.0(2)EX1",
                      "product_id": "CSAFPID-189115"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX2",
                    "product": {
                      "name": "15.0(2)EX2",
                      "product_id": "CSAFPID-192910"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX3",
                    "product": {
                      "name": "15.0(2)EX3",
                      "product_id": "CSAFPID-194540"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX4",
                    "product": {
                      "name": "15.0(2)EX4",
                      "product_id": "CSAFPID-194913"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX5",
                    "product": {
                      "name": "15.0(2)EX5",
                      "product_id": "CSAFPID-195943"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX6",
                    "product": {
                      "name": "15.0(2)EX6",
                      "product_id": "CSAFPID-200496"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX7",
                    "product": {
                      "name": "15.0(2)EX7",
                      "product_id": "CSAFPID-201366"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX8",
                    "product": {
                      "name": "15.0(2)EX8",
                      "product_id": "CSAFPID-204831"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2a)EX5",
                    "product": {
                      "name": "15.0(2a)EX5",
                      "product_id": "CSAFPID-205064"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX10",
                    "product": {
                      "name": "15.0(2)EX10",
                      "product_id": "CSAFPID-211570"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX11",
                    "product": {
                      "name": "15.0(2)EX11",
                      "product_id": "CSAFPID-214797"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX13",
                    "product": {
                      "name": "15.0(2)EX13",
                      "product_id": "CSAFPID-225160"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)EX12",
                    "product": {
                      "name": "15.0(2)EX12",
                      "product_id": "CSAFPID-230965"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.0EX"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E",
                    "product": {
                      "name": "15.2(2)E",
                      "product_id": "CSAFPID-187057"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3)E",
                    "product": {
                      "name": "15.2(3)E",
                      "product_id": "CSAFPID-197483"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E1",
                    "product": {
                      "name": "15.2(2)E1",
                      "product_id": "CSAFPID-201074"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2b)E",
                    "product": {
                      "name": "15.2(2b)E",
                      "product_id": "CSAFPID-204102"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E",
                    "product": {
                      "name": "15.2(4)E",
                      "product_id": "CSAFPID-204108"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3)E1",
                    "product": {
                      "name": "15.2(3)E1",
                      "product_id": "CSAFPID-204186"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E2",
                    "product": {
                      "name": "15.2(2)E2",
                      "product_id": "CSAFPID-204228"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2a)E1",
                    "product": {
                      "name": "15.2(2a)E1",
                      "product_id": "CSAFPID-204818"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E3",
                    "product": {
                      "name": "15.2(2)E3",
                      "product_id": "CSAFPID-205672"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2a)E2",
                    "product": {
                      "name": "15.2(2a)E2",
                      "product_id": "CSAFPID-209045"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3)E2",
                    "product": {
                      "name": "15.2(3)E2",
                      "product_id": "CSAFPID-209046"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3a)E",
                    "product": {
                      "name": "15.2(3a)E",
                      "product_id": "CSAFPID-209047"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3)E3",
                    "product": {
                      "name": "15.2(3)E3",
                      "product_id": "CSAFPID-209358"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3m)E2",
                    "product": {
                      "name": "15.2(3m)E2",
                      "product_id": "CSAFPID-209359"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E1",
                    "product": {
                      "name": "15.2(4)E1",
                      "product_id": "CSAFPID-209887"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E4",
                    "product": {
                      "name": "15.2(2)E4",
                      "product_id": "CSAFPID-210766"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E5",
                    "product": {
                      "name": "15.2(2)E5",
                      "product_id": "CSAFPID-211296"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E2",
                    "product": {
                      "name": "15.2(4)E2",
                      "product_id": "CSAFPID-213610"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4m)E1",
                    "product": {
                      "name": "15.2(4m)E1",
                      "product_id": "CSAFPID-214072"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3)E4",
                    "product": {
                      "name": "15.2(3)E4",
                      "product_id": "CSAFPID-214078"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5)E",
                    "product": {
                      "name": "15.2(5)E",
                      "product_id": "CSAFPID-214556"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3m)E7",
                    "product": {
                      "name": "15.2(3m)E7",
                      "product_id": "CSAFPID-216295"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E3",
                    "product": {
                      "name": "15.2(4)E3",
                      "product_id": "CSAFPID-217805"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E6",
                    "product": {
                      "name": "15.2(2)E6",
                      "product_id": "CSAFPID-218891"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5)E1",
                    "product": {
                      "name": "15.2(5)E1",
                      "product_id": "CSAFPID-220441"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5b)E",
                    "product": {
                      "name": "15.2(5b)E",
                      "product_id": "CSAFPID-220457"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4m)E3",
                    "product": {
                      "name": "15.2(4m)E3",
                      "product_id": "CSAFPID-220664"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(3m)E8",
                    "product": {
                      "name": "15.2(3m)E8",
                      "product_id": "CSAFPID-220689"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E5a",
                    "product": {
                      "name": "15.2(2)E5a",
                      "product_id": "CSAFPID-221033"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E5b",
                    "product": {
                      "name": "15.2(2)E5b",
                      "product_id": "CSAFPID-222436"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4n)E2",
                    "product": {
                      "name": "15.2(4n)E2",
                      "product_id": "CSAFPID-222500"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4o)E2",
                    "product": {
                      "name": "15.2(4o)E2",
                      "product_id": "CSAFPID-222924"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E4",
                    "product": {
                      "name": "15.2(4)E4",
                      "product_id": "CSAFPID-224553"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E7",
                    "product": {
                      "name": "15.2(2)E7",
                      "product_id": "CSAFPID-224868"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(5)E2",
                    "product": {
                      "name": "15.2(5)E2",
                      "product_id": "CSAFPID-225740"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4p)E1",
                    "product": {
                      "name": "15.2(4p)E1",
                      "product_id": "CSAFPID-226077"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E",
                    "product": {
                      "name": "15.2(6)E",
                      "product_id": "CSAFPID-227598"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E5",
                    "product": {
                      "name": "15.2(4)E5",
                      "product_id": "CSAFPID-227959"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E8",
                    "product": {
                      "name": "15.2(2)E8",
                      "product_id": "CSAFPID-230587"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4m)E2",
                    "product": {
                      "name": "15.2(4m)E2",
                      "product_id": "CSAFPID-230588"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4o)E3",
                    "product": {
                      "name": "15.2(4o)E3",
                      "product_id": "CSAFPID-230589"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4q)E1",
                    "product": {
                      "name": "15.2(4q)E1",
                      "product_id": "CSAFPID-230590"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E0a",
                    "product": {
                      "name": "15.2(6)E0a",
                      "product_id": "CSAFPID-230591"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E1",
                    "product": {
                      "name": "15.2(6)E1",
                      "product_id": "CSAFPID-230592"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E0c",
                    "product": {
                      "name": "15.2(6)E0c",
                      "product_id": "CSAFPID-231245"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E6",
                    "product": {
                      "name": "15.2(4)E6",
                      "product_id": "CSAFPID-231471"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E2",
                    "product": {
                      "name": "15.2(6)E2",
                      "product_id": "CSAFPID-232007"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E9",
                    "product": {
                      "name": "15.2(2)E9",
                      "product_id": "CSAFPID-232765"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E1a",
                    "product": {
                      "name": "15.2(6)E1a",
                      "product_id": "CSAFPID-238999"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E7",
                    "product": {
                      "name": "15.2(4)E7",
                      "product_id": "CSAFPID-239053"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E1s",
                    "product": {
                      "name": "15.2(6)E1s",
                      "product_id": "CSAFPID-240186"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4s)E1",
                    "product": {
                      "name": "15.2(4s)E1",
                      "product_id": "CSAFPID-241916"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E",
                    "product": {
                      "name": "15.2(7)E",
                      "product_id": "CSAFPID-242313"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E10",
                    "product": {
                      "name": "15.2(2)E10",
                      "product_id": "CSAFPID-244911"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E8",
                    "product": {
                      "name": "15.2(4)E8",
                      "product_id": "CSAFPID-246497"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E9a",
                    "product": {
                      "name": "15.2(2)E9a",
                      "product_id": "CSAFPID-247572"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E2a",
                    "product": {
                      "name": "15.2(6)E2a",
                      "product_id": "CSAFPID-247630"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E2b",
                    "product": {
                      "name": "15.2(6)E2b",
                      "product_id": "CSAFPID-250278"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E1",
                    "product": {
                      "name": "15.2(7)E1",
                      "product_id": "CSAFPID-254193"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E0a",
                    "product": {
                      "name": "15.2(7)E0a",
                      "product_id": "CSAFPID-259867"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E0b",
                    "product": {
                      "name": "15.2(7)E0b",
                      "product_id": "CSAFPID-260993"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E0s",
                    "product": {
                      "name": "15.2(7)E0s",
                      "product_id": "CSAFPID-262300"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(6)E3",
                    "product": {
                      "name": "15.2(6)E3",
                      "product_id": "CSAFPID-262684"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E10a",
                    "product": {
                      "name": "15.2(2)E10a",
                      "product_id": "CSAFPID-263981"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E9",
                    "product": {
                      "name": "15.2(4)E9",
                      "product_id": "CSAFPID-264643"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E2",
                    "product": {
                      "name": "15.2(7)E2",
                      "product_id": "CSAFPID-270096"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7a)E0b",
                    "product": {
                      "name": "15.2(7a)E0b",
                      "product_id": "CSAFPID-271140"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E10",
                    "product": {
                      "name": "15.2(4)E10",
                      "product_id": "CSAFPID-271286"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E3",
                    "product": {
                      "name": "15.2(7)E3",
                      "product_id": "CSAFPID-271631"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E1a",
                    "product": {
                      "name": "15.2(7)E1a",
                      "product_id": "CSAFPID-273573"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7b)E0b",
                    "product": {
                      "name": "15.2(7b)E0b",
                      "product_id": "CSAFPID-276903"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E2a",
                    "product": {
                      "name": "15.2(7)E2a",
                      "product_id": "CSAFPID-277205"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E10a",
                    "product": {
                      "name": "15.2(4)E10a",
                      "product_id": "CSAFPID-278029"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E4",
                    "product": {
                      "name": "15.2(7)E4",
                      "product_id": "CSAFPID-278803"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E2b",
                    "product": {
                      "name": "15.2(7)E2b",
                      "product_id": "CSAFPID-279380"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E3k",
                    "product": {
                      "name": "15.2(7)E3k",
                      "product_id": "CSAFPID-280771"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E10b",
                    "product": {
                      "name": "15.2(4)E10b",
                      "product_id": "CSAFPID-280779"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(8)E",
                    "product": {
                      "name": "15.2(8)E",
                      "product_id": "CSAFPID-280857"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(8)E1",
                    "product": {
                      "name": "15.2(8)E1",
                      "product_id": "CSAFPID-281581"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E5",
                    "product": {
                      "name": "15.2(7)E5",
                      "product_id": "CSAFPID-282112"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E6",
                    "product": {
                      "name": "15.2(7)E6",
                      "product_id": "CSAFPID-284159"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(8)E2",
                    "product": {
                      "name": "15.2(8)E2",
                      "product_id": "CSAFPID-284334"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E10c",
                    "product": {
                      "name": "15.2(4)E10c",
                      "product_id": "CSAFPID-284349"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E10b",
                    "product": {
                      "name": "15.2(2)E10b",
                      "product_id": "CSAFPID-284567"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)E10d",
                    "product": {
                      "name": "15.2(4)E10d",
                      "product_id": "CSAFPID-286452"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E7",
                    "product": {
                      "name": "15.2(7)E7",
                      "product_id": "CSAFPID-286558"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(2)E10c",
                    "product": {
                      "name": "15.2(2)E10c",
                      "product_id": "CSAFPID-286860"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(8)E3",
                    "product": {
                      "name": "15.2(8)E3",
                      "product_id": "CSAFPID-287123"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E8",
                    "product": {
                      "name": "15.2(7)E8",
                      "product_id": "CSAFPID-290581"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(8)E4",
                    "product": {
                      "name": "15.2(8)E4",
                      "product_id": "CSAFPID-290619"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E9",
                    "product": {
                      "name": "15.2(7)E9",
                      "product_id": "CSAFPID-295162"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(8)E5",
                    "product": {
                      "name": "15.2(8)E5",
                      "product_id": "CSAFPID-295426"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(8)E6",
                    "product": {
                      "name": "15.2(8)E6",
                      "product_id": "CSAFPID-300274"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(7)E10",
                    "product": {
                      "name": "15.2(7)E10",
                      "product_id": "CSAFPID-300846"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.2E"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.2(6)EB",
                    "product": {
                      "name": "15.2(6)EB",
                      "product_id": "CSAFPID-251487"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.2EB"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EA7",
                    "product": {
                      "name": "15.2(4)EA7",
                      "product_id": "CSAFPID-230992"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EA8",
                    "product": {
                      "name": "15.2(4)EA8",
                      "product_id": "CSAFPID-241614"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EA9",
                    "product": {
                      "name": "15.2(4)EA9",
                      "product_id": "CSAFPID-257830"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.2(4)EA9a",
                    "product": {
                      "name": "15.2(4)EA9a",
                      "product_id": "CSAFPID-274038"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.2EA"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SQD",
                    "product": {
                      "name": "15.0(2)SQD",
                      "product_id": "CSAFPID-204324"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SQD1",
                    "product": {
                      "name": "15.0(2)SQD1",
                      "product_id": "CSAFPID-209628"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SQD2",
                    "product": {
                      "name": "15.0(2)SQD2",
                      "product_id": "CSAFPID-211290"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SQD3",
                    "product": {
                      "name": "15.0(2)SQD3",
                      "product_id": "CSAFPID-217078"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SQD4",
                    "product": {
                      "name": "15.0(2)SQD4",
                      "product_id": "CSAFPID-220670"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SQD5",
                    "product": {
                      "name": "15.0(2)SQD5",
                      "product_id": "CSAFPID-225358"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SQD6",
                    "product": {
                      "name": "15.0(2)SQD6",
                      "product_id": "CSAFPID-226038"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SQD7",
                    "product": {
                      "name": "15.0(2)SQD7",
                      "product_id": "CSAFPID-227364"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.0(2)SQD8",
                    "product": {
                      "name": "15.0(2)SQD8",
                      "product_id": "CSAFPID-232850"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.0SQD"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "12.2(6)I1",
                    "product": {
                      "name": "12.2(6)I1",
                      "product_id": "CSAFPID-243144"
                    }
                  }
                ],
                "category": "product_version",
                "name": "12.2I"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVR1",
                    "product": {
                      "name": "15.1(3)SVR1",
                      "product_id": "CSAFPID-277230"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVR2",
                    "product": {
                      "name": "15.1(3)SVR2",
                      "product_id": "CSAFPID-277253"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVR3",
                    "product": {
                      "name": "15.1(3)SVR3",
                      "product_id": "CSAFPID-279337"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVR10",
                    "product": {
                      "name": "15.1(3)SVR10",
                      "product_id": "CSAFPID-290618"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVR"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVS",
                    "product": {
                      "name": "15.1(3)SVS",
                      "product_id": "CSAFPID-277232"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVS1",
                    "product": {
                      "name": "15.1(3)SVS1",
                      "product_id": "CSAFPID-279335"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVS"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVT1",
                    "product": {
                      "name": "15.1(3)SVT1",
                      "product_id": "CSAFPID-280759"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVT2",
                    "product": {
                      "name": "15.1(3)SVT2",
                      "product_id": "CSAFPID-282026"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVT3",
                    "product": {
                      "name": "15.1(3)SVT3",
                      "product_id": "CSAFPID-284785"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVT4",
                    "product": {
                      "name": "15.1(3)SVT4",
                      "product_id": "CSAFPID-286399"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVT"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVU1",
                    "product": {
                      "name": "15.1(3)SVU1",
                      "product_id": "CSAFPID-283833"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVU10",
                    "product": {
                      "name": "15.1(3)SVU10",
                      "product_id": "CSAFPID-284291"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVU2",
                    "product": {
                      "name": "15.1(3)SVU2",
                      "product_id": "CSAFPID-284566"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVU11",
                    "product": {
                      "name": "15.1(3)SVU11",
                      "product_id": "CSAFPID-286400"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVU20",
                    "product": {
                      "name": "15.1(3)SVU20",
                      "product_id": "CSAFPID-289270"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVU21",
                    "product": {
                      "name": "15.1(3)SVU21",
                      "product_id": "CSAFPID-290557"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVU"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVV1",
                    "product": {
                      "name": "15.1(3)SVV1",
                      "product_id": "CSAFPID-284341"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVV2",
                    "product": {
                      "name": "15.1(3)SVV2",
                      "product_id": "CSAFPID-286029"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVV3",
                    "product": {
                      "name": "15.1(3)SVV3",
                      "product_id": "CSAFPID-286940"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVV4",
                    "product": {
                      "name": "15.1(3)SVV4",
                      "product_id": "CSAFPID-289371"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVV"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVW",
                    "product": {
                      "name": "15.1(3)SVW",
                      "product_id": "CSAFPID-286451"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVW1",
                    "product": {
                      "name": "15.1(3)SVW1",
                      "product_id": "CSAFPID-286844"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVW"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVX",
                    "product": {
                      "name": "15.1(3)SVX",
                      "product_id": "CSAFPID-286927"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "15.1(3)SVX1",
                    "product": {
                      "name": "15.1(3)SVX1",
                      "product_id": "CSAFPID-289301"
                    }
                  }
                ],
                "category": "product_version",
                "name": "15.1SVX"
              }
            ],
            "category": "product_family",
            "name": "IOS"
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-20181",
      "ids": [
        {
          "system_name": "Cisco Bug ID",
          "text": "CSCvd75918"
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Complete.",
          "title": "Affected Product Comprehensiveness"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-103955",
          "CSAFPID-104376",
          "CSAFPID-106072",
          "CSAFPID-109442",
          "CSAFPID-111005",
          "CSAFPID-115969",
          "CSAFPID-187057",
          "CSAFPID-187269",
          "CSAFPID-189064",
          "CSAFPID-189115",
          "CSAFPID-192910",
          "CSAFPID-194540",
          "CSAFPID-194913",
          "CSAFPID-195943",
          "CSAFPID-197483",
          "CSAFPID-200496",
          "CSAFPID-201074",
          "CSAFPID-201366",
          "CSAFPID-204102",
          "CSAFPID-204108",
          "CSAFPID-204186",
          "CSAFPID-204228",
          "CSAFPID-204324",
          "CSAFPID-204818",
          "CSAFPID-204831",
          "CSAFPID-205064",
          "CSAFPID-205672",
          "CSAFPID-209028",
          "CSAFPID-209045",
          "CSAFPID-209046",
          "CSAFPID-209047",
          "CSAFPID-209358",
          "CSAFPID-209359",
          "CSAFPID-209628",
          "CSAFPID-209887",
          "CSAFPID-210766",
          "CSAFPID-211290",
          "CSAFPID-211296",
          "CSAFPID-211570",
          "CSAFPID-213610",
          "CSAFPID-214072",
          "CSAFPID-214078",
          "CSAFPID-214556",
          "CSAFPID-214797",
          "CSAFPID-216295",
          "CSAFPID-217078",
          "CSAFPID-217805",
          "CSAFPID-218891",
          "CSAFPID-220441",
          "CSAFPID-220457",
          "CSAFPID-220664",
          "CSAFPID-220670",
          "CSAFPID-220689",
          "CSAFPID-221033",
          "CSAFPID-222436",
          "CSAFPID-222500",
          "CSAFPID-222924",
          "CSAFPID-224553",
          "CSAFPID-224868",
          "CSAFPID-225160",
          "CSAFPID-225358",
          "CSAFPID-225740",
          "CSAFPID-226038",
          "CSAFPID-226077",
          "CSAFPID-227364",
          "CSAFPID-227598",
          "CSAFPID-227959",
          "CSAFPID-230587",
          "CSAFPID-230588",
          "CSAFPID-230589",
          "CSAFPID-230590",
          "CSAFPID-230591",
          "CSAFPID-230592",
          "CSAFPID-230965",
          "CSAFPID-230992",
          "CSAFPID-231245",
          "CSAFPID-231471",
          "CSAFPID-232007",
          "CSAFPID-232765",
          "CSAFPID-232850",
          "CSAFPID-238999",
          "CSAFPID-239053",
          "CSAFPID-240186",
          "CSAFPID-241614",
          "CSAFPID-241916",
          "CSAFPID-242313",
          "CSAFPID-243144",
          "CSAFPID-244911",
          "CSAFPID-246497",
          "CSAFPID-247572",
          "CSAFPID-247630",
          "CSAFPID-250278",
          "CSAFPID-251487",
          "CSAFPID-254193",
          "CSAFPID-257830",
          "CSAFPID-259867",
          "CSAFPID-260993",
          "CSAFPID-262300",
          "CSAFPID-262684",
          "CSAFPID-263981",
          "CSAFPID-264643",
          "CSAFPID-270096",
          "CSAFPID-271140",
          "CSAFPID-271286",
          "CSAFPID-271631",
          "CSAFPID-273573",
          "CSAFPID-274038",
          "CSAFPID-276903",
          "CSAFPID-277205",
          "CSAFPID-277230",
          "CSAFPID-277232",
          "CSAFPID-277253",
          "CSAFPID-278029",
          "CSAFPID-278803",
          "CSAFPID-279335",
          "CSAFPID-279337",
          "CSAFPID-279380",
          "CSAFPID-280759",
          "CSAFPID-280771",
          "CSAFPID-280779",
          "CSAFPID-280857",
          "CSAFPID-281581",
          "CSAFPID-282026",
          "CSAFPID-282112",
          "CSAFPID-283833",
          "CSAFPID-284159",
          "CSAFPID-284291",
          "CSAFPID-284334",
          "CSAFPID-284341",
          "CSAFPID-284349",
          "CSAFPID-284566",
          "CSAFPID-284567",
          "CSAFPID-284785",
          "CSAFPID-286029",
          "CSAFPID-286399",
          "CSAFPID-286400",
          "CSAFPID-286451",
          "CSAFPID-286452",
          "CSAFPID-286558",
          "CSAFPID-286844",
          "CSAFPID-286860",
          "CSAFPID-286927",
          "CSAFPID-286940",
          "CSAFPID-287123",
          "CSAFPID-289270",
          "CSAFPID-289301",
          "CSAFPID-289371",
          "CSAFPID-290557",
          "CSAFPID-290581",
          "CSAFPID-290618",
          "CSAFPID-290619",
          "CSAFPID-295162",
          "CSAFPID-295426",
          "CSAFPID-300274",
          "CSAFPID-300846"
        ]
      },
      "release_date": "2025-05-07T16:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Cisco has released software updates that address this vulnerability.",
          "product_ids": [
            "CSAFPID-103955",
            "CSAFPID-104376",
            "CSAFPID-106072",
            "CSAFPID-109442",
            "CSAFPID-111005",
            "CSAFPID-115969",
            "CSAFPID-187057",
            "CSAFPID-187269",
            "CSAFPID-189064",
            "CSAFPID-189115",
            "CSAFPID-192910",
            "CSAFPID-194540",
            "CSAFPID-194913",
            "CSAFPID-195943",
            "CSAFPID-197483",
            "CSAFPID-200496",
            "CSAFPID-201074",
            "CSAFPID-201366",
            "CSAFPID-204102",
            "CSAFPID-204108",
            "CSAFPID-204186",
            "CSAFPID-204228",
            "CSAFPID-204324",
            "CSAFPID-204818",
            "CSAFPID-204831",
            "CSAFPID-205064",
            "CSAFPID-205672",
            "CSAFPID-209028",
            "CSAFPID-209045",
            "CSAFPID-209046",
            "CSAFPID-209047",
            "CSAFPID-209358",
            "CSAFPID-209359",
            "CSAFPID-209628",
            "CSAFPID-209887",
            "CSAFPID-210766",
            "CSAFPID-211290",
            "CSAFPID-211296",
            "CSAFPID-211570",
            "CSAFPID-213610",
            "CSAFPID-214072",
            "CSAFPID-214078",
            "CSAFPID-214556",
            "CSAFPID-214797",
            "CSAFPID-216295",
            "CSAFPID-217078",
            "CSAFPID-217805",
            "CSAFPID-218891",
            "CSAFPID-220441",
            "CSAFPID-220457",
            "CSAFPID-220664",
            "CSAFPID-220670",
            "CSAFPID-220689",
            "CSAFPID-221033",
            "CSAFPID-222436",
            "CSAFPID-222500",
            "CSAFPID-222924",
            "CSAFPID-224553",
            "CSAFPID-224868",
            "CSAFPID-225160",
            "CSAFPID-225358",
            "CSAFPID-225740",
            "CSAFPID-226038",
            "CSAFPID-226077",
            "CSAFPID-227364",
            "CSAFPID-227598",
            "CSAFPID-227959",
            "CSAFPID-230587",
            "CSAFPID-230588",
            "CSAFPID-230589",
            "CSAFPID-230590",
            "CSAFPID-230591",
            "CSAFPID-230592",
            "CSAFPID-230965",
            "CSAFPID-230992",
            "CSAFPID-231245",
            "CSAFPID-231471",
            "CSAFPID-232007",
            "CSAFPID-232765",
            "CSAFPID-232850",
            "CSAFPID-238999",
            "CSAFPID-239053",
            "CSAFPID-240186",
            "CSAFPID-241614",
            "CSAFPID-241916",
            "CSAFPID-242313",
            "CSAFPID-243144",
            "CSAFPID-244911",
            "CSAFPID-246497",
            "CSAFPID-247572",
            "CSAFPID-247630",
            "CSAFPID-250278",
            "CSAFPID-251487",
            "CSAFPID-254193",
            "CSAFPID-257830",
            "CSAFPID-259867",
            "CSAFPID-260993",
            "CSAFPID-262300",
            "CSAFPID-262684",
            "CSAFPID-263981",
            "CSAFPID-264643",
            "CSAFPID-270096",
            "CSAFPID-271140",
            "CSAFPID-271286",
            "CSAFPID-271631",
            "CSAFPID-273573",
            "CSAFPID-274038",
            "CSAFPID-276903",
            "CSAFPID-277205",
            "CSAFPID-277230",
            "CSAFPID-277232",
            "CSAFPID-277253",
            "CSAFPID-278029",
            "CSAFPID-278803",
            "CSAFPID-279335",
            "CSAFPID-279337",
            "CSAFPID-279380",
            "CSAFPID-280759",
            "CSAFPID-280771",
            "CSAFPID-280779",
            "CSAFPID-280857",
            "CSAFPID-281581",
            "CSAFPID-282026",
            "CSAFPID-282112",
            "CSAFPID-283833",
            "CSAFPID-284159",
            "CSAFPID-284291",
            "CSAFPID-284334",
            "CSAFPID-284341",
            "CSAFPID-284349",
            "CSAFPID-284566",
            "CSAFPID-284567",
            "CSAFPID-284785",
            "CSAFPID-286029",
            "CSAFPID-286399",
            "CSAFPID-286400",
            "CSAFPID-286451",
            "CSAFPID-286452",
            "CSAFPID-286558",
            "CSAFPID-286844",
            "CSAFPID-286860",
            "CSAFPID-286927",
            "CSAFPID-286940",
            "CSAFPID-287123",
            "CSAFPID-289270",
            "CSAFPID-289301",
            "CSAFPID-289371",
            "CSAFPID-290557",
            "CSAFPID-290581",
            "CSAFPID-290618",
            "CSAFPID-290619",
            "CSAFPID-295162",
            "CSAFPID-295426",
            "CSAFPID-300274",
            "CSAFPID-300846"
          ],
          "url": "https://software.cisco.com"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-103955",
            "CSAFPID-104376",
            "CSAFPID-106072",
            "CSAFPID-109442",
            "CSAFPID-111005",
            "CSAFPID-115969",
            "CSAFPID-187057",
            "CSAFPID-187269",
            "CSAFPID-189064",
            "CSAFPID-189115",
            "CSAFPID-192910",
            "CSAFPID-194540",
            "CSAFPID-194913",
            "CSAFPID-195943",
            "CSAFPID-197483",
            "CSAFPID-200496",
            "CSAFPID-201074",
            "CSAFPID-201366",
            "CSAFPID-204102",
            "CSAFPID-204108",
            "CSAFPID-204186",
            "CSAFPID-204228",
            "CSAFPID-204324",
            "CSAFPID-204818",
            "CSAFPID-204831",
            "CSAFPID-205064",
            "CSAFPID-205672",
            "CSAFPID-209028",
            "CSAFPID-209045",
            "CSAFPID-209046",
            "CSAFPID-209047",
            "CSAFPID-209358",
            "CSAFPID-209359",
            "CSAFPID-209628",
            "CSAFPID-209887",
            "CSAFPID-210766",
            "CSAFPID-211290",
            "CSAFPID-211296",
            "CSAFPID-211570",
            "CSAFPID-213610",
            "CSAFPID-214072",
            "CSAFPID-214078",
            "CSAFPID-214556",
            "CSAFPID-214797",
            "CSAFPID-216295",
            "CSAFPID-217078",
            "CSAFPID-217805",
            "CSAFPID-218891",
            "CSAFPID-220441",
            "CSAFPID-220457",
            "CSAFPID-220664",
            "CSAFPID-220670",
            "CSAFPID-220689",
            "CSAFPID-221033",
            "CSAFPID-222436",
            "CSAFPID-222500",
            "CSAFPID-222924",
            "CSAFPID-224553",
            "CSAFPID-224868",
            "CSAFPID-225160",
            "CSAFPID-225358",
            "CSAFPID-225740",
            "CSAFPID-226038",
            "CSAFPID-226077",
            "CSAFPID-227364",
            "CSAFPID-227598",
            "CSAFPID-227959",
            "CSAFPID-230587",
            "CSAFPID-230588",
            "CSAFPID-230589",
            "CSAFPID-230590",
            "CSAFPID-230591",
            "CSAFPID-230592",
            "CSAFPID-230965",
            "CSAFPID-230992",
            "CSAFPID-231245",
            "CSAFPID-231471",
            "CSAFPID-232007",
            "CSAFPID-232765",
            "CSAFPID-232850",
            "CSAFPID-238999",
            "CSAFPID-239053",
            "CSAFPID-240186",
            "CSAFPID-241614",
            "CSAFPID-241916",
            "CSAFPID-242313",
            "CSAFPID-243144",
            "CSAFPID-244911",
            "CSAFPID-246497",
            "CSAFPID-247572",
            "CSAFPID-247630",
            "CSAFPID-250278",
            "CSAFPID-251487",
            "CSAFPID-254193",
            "CSAFPID-257830",
            "CSAFPID-259867",
            "CSAFPID-260993",
            "CSAFPID-262300",
            "CSAFPID-262684",
            "CSAFPID-263981",
            "CSAFPID-264643",
            "CSAFPID-270096",
            "CSAFPID-271140",
            "CSAFPID-271286",
            "CSAFPID-271631",
            "CSAFPID-273573",
            "CSAFPID-274038",
            "CSAFPID-276903",
            "CSAFPID-277205",
            "CSAFPID-277230",
            "CSAFPID-277232",
            "CSAFPID-277253",
            "CSAFPID-278029",
            "CSAFPID-278803",
            "CSAFPID-279335",
            "CSAFPID-279337",
            "CSAFPID-279380",
            "CSAFPID-280759",
            "CSAFPID-280771",
            "CSAFPID-280779",
            "CSAFPID-280857",
            "CSAFPID-281581",
            "CSAFPID-282026",
            "CSAFPID-282112",
            "CSAFPID-283833",
            "CSAFPID-284159",
            "CSAFPID-284291",
            "CSAFPID-284334",
            "CSAFPID-284341",
            "CSAFPID-284349",
            "CSAFPID-284566",
            "CSAFPID-284567",
            "CSAFPID-284785",
            "CSAFPID-286029",
            "CSAFPID-286399",
            "CSAFPID-286400",
            "CSAFPID-286451",
            "CSAFPID-286452",
            "CSAFPID-286558",
            "CSAFPID-286844",
            "CSAFPID-286860",
            "CSAFPID-286927",
            "CSAFPID-286940",
            "CSAFPID-287123",
            "CSAFPID-289270",
            "CSAFPID-289301",
            "CSAFPID-289371",
            "CSAFPID-290557",
            "CSAFPID-290581",
            "CSAFPID-290618",
            "CSAFPID-290619",
            "CSAFPID-295162",
            "CSAFPID-295426",
            "CSAFPID-300274",
            "CSAFPID-300846"
          ]
        }
      ],
      "title": "Cisco IOS Software Secure Boot Bypass Vulnerability"
    }
  ]
}

FKIE_CVE-2025-20181

Vulnerability from fkie_nvd - Published: 2025-05-07 18:15 - Updated: 2025-08-04 18:51

Severity ?

6.8 (Medium) - CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	psirt@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq	Vendor Advisory

Impacted products

Vendor	Product	Version
cisco	ios	15.0\(1\)ex
cisco	ios	15.0\(1\)ey
cisco	ios	15.0\(1\)ey1
cisco	ios	15.0\(1\)ey2
cisco	ios	15.0\(1\)xo
cisco	ios	15.0\(1\)xo1
cisco	ios	15.0\(2\)ex
cisco	ios	15.0\(2\)ex1
cisco	ios	15.0\(2\)ex2
cisco	ios	15.0\(2\)ex3
cisco	ios	15.0\(2\)ex4
cisco	ios	15.0\(2\)ex5
cisco	ios	15.0\(2\)ex8
cisco	ios	15.0\(2\)ex10
cisco	ios	15.0\(2\)ex11
cisco	ios	15.0\(2\)ex12
cisco	ios	15.0\(2\)ex13
cisco	ios	15.0\(2\)se8
cisco	ios	15.0\(2\)sqd
cisco	ios	15.0\(2\)sqd1
cisco	ios	15.0\(2\)sqd2
cisco	ios	15.0\(2\)sqd3
cisco	ios	15.0\(2\)sqd4
cisco	ios	15.0\(2\)sqd5
cisco	ios	15.0\(2\)sqd6
cisco	ios	15.0\(2\)sqd7
cisco	ios	15.0\(2\)sqd8
cisco	ios	15.0\(2\)xo
cisco	ios	15.0\(2a\)ex5
cisco	ios	15.2\(2\)e
cisco	ios	15.2\(2\)e1
cisco	ios	15.2\(2\)e2
cisco	ios	15.2\(2\)e3
cisco	ios	15.2\(2\)e4
cisco	ios	15.2\(2\)e5
cisco	ios	15.2\(2\)e5a
cisco	ios	15.2\(2\)e5b
cisco	ios	15.2\(2\)e6
cisco	ios	15.2\(2\)e7
cisco	ios	15.2\(2\)e8
cisco	ios	15.2\(2\)e9
cisco	ios	15.2\(2\)e10
cisco	ios	15.2\(2a\)e1
cisco	ios	15.2\(2a\)e2
cisco	ios	15.2\(3\)e
cisco	ios	15.2\(3\)e1
cisco	ios	15.2\(3\)e2
cisco	ios	15.2\(3\)e3
cisco	ios	15.2\(3\)e4
cisco	ios	15.2\(3a\)e
cisco	ios	15.2\(4\)e
cisco	ios	15.2\(4\)e1
cisco	ios	15.2\(4\)e2
cisco	ios	15.2\(4\)e3
cisco	ios	15.2\(4\)e4
cisco	ios	15.2\(4\)e5
cisco	ios	15.2\(4\)e6
cisco	ios	15.2\(4\)e7
cisco	ios	15.2\(4\)e8
cisco	ios	15.2\(4\)e9
cisco	ios	15.2\(4\)e10
cisco	ios	15.2\(4\)e10a
cisco	ios	15.2\(4\)e10d
cisco	ios	15.2\(4\)ea7
cisco	ios	15.2\(4\)ea8
cisco	ios	15.2\(4\)ea9
cisco	ios	15.2\(4\)ea9a
cisco	ios	15.2\(5\)e
cisco	ios	15.2\(5\)e1
cisco	ios	15.2\(5\)e2
cisco	ios	15.2\(5b\)e
cisco	ios	15.2\(6\)e
cisco	ios	15.2\(6\)e0a
cisco	ios	15.2\(6\)e0c
cisco	ios	15.2\(6\)e1
cisco	ios	15.2\(6\)e2
cisco	ios	15.2\(6\)e2a
cisco	ios	15.2\(6\)e2b
cisco	ios	15.2\(6\)e3
cisco	ios	15.2\(6\)eb
cisco	ios	15.2\(7\)e
cisco	ios	15.2\(7\)e0a
cisco	ios	15.2\(7\)e0b
cisco	ios	15.2\(7\)e0s
cisco	ios	15.2\(7\)e1
cisco	ios	15.2\(7\)e1a
cisco	ios	15.2\(7\)e2
cisco	ios	15.2\(7\)e2a
cisco	ios	15.2\(7\)e3
cisco	ios	15.2\(7\)e3k
cisco	ios	15.2\(7\)e4
cisco	ios	15.2\(7\)e5
cisco	ios	15.2\(7\)e6
cisco	ios	15.2\(7\)e7
cisco	ios	15.2\(7\)e8
cisco	ios	15.2\(7\)e9
cisco	ios	15.2\(7\)e10
cisco	ios	15.2\(7a\)e0b
cisco	ios	15.2\(7b\)e0b
cisco	ios	15.2\(8\)e
cisco	ios	15.2\(8\)e1
cisco	ios	15.2\(8\)e2
cisco	ios	15.2\(8\)e3
cisco	ios	15.2\(8\)e4
cisco	ios	15.2\(8\)e5
cisco	ios	15.2\(8\)e6
cisco	catalyst_2960cx-8pc-l	-
cisco	catalyst_2960cx-8tc-l	-
cisco	catalyst_2960x-24pd-l	-
cisco	catalyst_2960x-24ps-l	-
cisco	catalyst_2960x-24psq-l	-
cisco	catalyst_2960x-24psq-l_cool	-
cisco	catalyst_2960x-24td-l	-
cisco	catalyst_2960x-24ts-l	-
cisco	catalyst_2960x-24ts-ll	-
cisco	catalyst_2960x-48fpd-l	-
cisco	catalyst_2960x-48fps-l	-
cisco	catalyst_2960x-48lpd-l	-
cisco	catalyst_2960x-48lps-l	-
cisco	catalyst_2960x-48td-l	-
cisco	catalyst_2960x-48ts-l	-
cisco	catalyst_2960x-48ts-ll	-
cisco	catalyst_2960xr-24pd-i	-
cisco	catalyst_2960xr-24pd-l	-
cisco	catalyst_2960xr-24ps-i	-
cisco	catalyst_2960xr-24ps-l	-
cisco	catalyst_2960xr-24td-i	-
cisco	catalyst_2960xr-24td-l	-
cisco	catalyst_2960xr-24ts-i	-
cisco	catalyst_2960xr-24ts-l	-
cisco	catalyst_2960xr-48fpd-i	-
cisco	catalyst_2960xr-48fpd-l	-
cisco	catalyst_2960xr-48fps-i	-
cisco	catalyst_2960xr-48fps-l	-
cisco	catalyst_2960xr-48lpd-i	-
cisco	catalyst_2960xr-48lpd-l	-
cisco	catalyst_2960xr-48lps-i	-
cisco	catalyst_2960xr-48lps-l	-
cisco	catalyst_2960xr-48td-i	-
cisco	catalyst_2960xr-48td-l	-
cisco	catalyst_2960xr-48ts-i	-
cisco	catalyst_2960xr-48ts-l	-
cisco	catalyst_3560cx-12pc-s	-
cisco	catalyst_3560cx-12pd-s	-
cisco	catalyst_3560cx-12tc-s	-
cisco	catalyst_3560cx-8pc-s	-
cisco	catalyst_3560cx-8pt-s	-
cisco	catalyst_3560cx-8tc-s	-
cisco	catalyst_3560cx-8xpd-s	-

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(1\\)ex:*:*:*:*:*:*:*",
              "matchCriteriaId": "189B0C7C-D794-43EB-A6C6-F29C4B9623A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(1\\)ey:*:*:*:*:*:*:*",
              "matchCriteriaId": "5AF55C0A-768F-445A-AF40-2B553363AF18",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(1\\)ey1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9E7D5CC-521E-4B2A-B6DB-D2A49D31DE4B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(1\\)ey2:*:*:*:*:*:*:*",
              "matchCriteriaId": "10D75DC6-D7B1-46D2-ABEF-97D908992FF1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo:*:*:*:*:*:*:*",
              "matchCriteriaId": "28722F17-AF23-4435-AF9B-996798ACF2C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(1\\)xo1:*:*:*:*:*:*:*",
              "matchCriteriaId": "587450DF-77E4-4320-9191-383EBE5A6CB7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex:*:*:*:*:*:*:*",
              "matchCriteriaId": "C965E814-7ABE-4C45-8EA8-B6818BC213F6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4556022D-5B0C-4F7A-868C-9EC01F716D16",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7760B1FF-BC56-49F4-8020-439EA2F53AC5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex3:*:*:*:*:*:*:*",
              "matchCriteriaId": "49229E8B-19ED-4E5E-AA2E-F699C033F4A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex4:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9A4AC61-4386-4218-91B7-6CE776D8050B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex5:*:*:*:*:*:*:*",
              "matchCriteriaId": "59403A6B-3488-4F81-BE3C-A06AF1731B99",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex8:*:*:*:*:*:*:*",
              "matchCriteriaId": "02ABF12A-78BD-459D-BF53-065A56C385AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex10:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D15A929-0C2B-4C3D-99E4-0E7D46217216",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex11:*:*:*:*:*:*:*",
              "matchCriteriaId": "7D00EB0E-92D3-4C5B-B107-730B47BD6E01",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex12:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF7F6A52-9AA9-4441-A137-7EE3470C155C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)ex13:*:*:*:*:*:*:*",
              "matchCriteriaId": "92CEEA13-0B40-4203-8BAE-09374C9B1FE5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)se8:*:*:*:*:*:*:*",
              "matchCriteriaId": "611A649F-161B-4683-98D5-4C8150838039",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D39E1ED-2F67-4116-9BF5-44CA8EF9A016",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd1:*:*:*:*:*:*:*",
              "matchCriteriaId": "729613AF-4C56-4514-9ECD-6A466C278E0F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd2:*:*:*:*:*:*:*",
              "matchCriteriaId": "368F2F9E-FD52-4A74-8378-DF246252B745",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd3:*:*:*:*:*:*:*",
              "matchCriteriaId": "2E452976-8876-40D7-8880-29197DB5457A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd4:*:*:*:*:*:*:*",
              "matchCriteriaId": "CCE5C762-5329-47E9-8D0C-C0A546AC24CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd5:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E5CC49C-34B5-4C8A-8FFC-DACB4B0C76FD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd6:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D93F335-8058-45BA-8653-9F3E4A5FA28E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd7:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA6FDABA-6F35-4FAA-9ADF-04E4CD1DCF15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)sqd8:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF152F35-32C6-4C2A-BC91-90AAE442F239",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2\\)xo:*:*:*:*:*:*:*",
              "matchCriteriaId": "42CEA3E9-2320-40D9-8BC0-4CA631ED2C3D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.0\\(2a\\)ex5:*:*:*:*:*:*:*",
              "matchCriteriaId": "7CD47CBD-A833-4CD0-A62C-22FBB7A4244D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3A156FE-590E-49DB-819D-4103D629829D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C1F6C767-042C-4277-90F4-F81D9AFFF227",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D33DB919-4F82-43C6-830A-A9D4FC043B42",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e3:*:*:*:*:*:*:*",
              "matchCriteriaId": "72782F95-948D-489B-A19A-9DAB825DFE4B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e4:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F904CD0-8609-47F7-988C-613DE26BDBB6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC3A39FE-69F6-4BB9-A9CE-D516A3802538",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5a:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB9B7058-3467-4CCE-B9A4-71CF8143FEC8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5b:*:*:*:*:*:*:*",
              "matchCriteriaId": "90447919-CC40-4CA5-A488-2FCF0F25ABE1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e6:*:*:*:*:*:*:*",
              "matchCriteriaId": "DEF74559-F418-48EA-9CA7-A9574CAFC97E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e7:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5A1ADB8-DF62-4CB6-8075-2F0956BB0126",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e8:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB0F2B2A-F273-4166-826F-88B54A480BB9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e9:*:*:*:*:*:*:*",
              "matchCriteriaId": "194D54FC-F399-4C86-AE04-FB3FD828DDA0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2\\)e10:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1C85E0E-A920-4501-AC23-0F7534CF88EC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C846C74-7644-4DAB-A4B8-B33464EBE92E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e2:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DDB0B25-95E0-4796-A56F-1A59EF7EA283",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB214EAE-AEB7-4359-AD8C-86CCC080EF96",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
              "matchCriteriaId": "757000B2-A8EB-464A-9A2D-EC4D920A0569",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
              "matchCriteriaId": "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
              "matchCriteriaId": "B42618DF-F118-41A7-96E5-24C229DA020E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(3\\)e4:*:*:*:*:*:*:*",
              "matchCriteriaId": "26F6FC68-BF4A-4511-8B46-A93C81E349B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e:*:*:*:*:*:*:*",
              "matchCriteriaId": "260E5F96-48DB-41C4-B45E-5BE0367DD7E1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CE9B41B-B1B5-45A2-8DBE-775B1CE4F2C8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e1:*:*:*:*:*:*:*",
              "matchCriteriaId": "80114F8D-320D-41FF-ADD3-729E250A8CD4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e2:*:*:*:*:*:*:*",
              "matchCriteriaId": "879C4495-3B26-4370-8708-16F5002E37CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e3:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A9DDD1E-201F-42B8-ADC9-9CD2F3ED2C4F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e4:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8C2BB1F-79DF-4471-B75F-C22CEBB5380F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e5:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F5A55B3-49E4-4C48-B942-4816504BAA30",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e6:*:*:*:*:*:*:*",
              "matchCriteriaId": "62AADD63-CEA3-461B-94EA-0CDAB4A2ED00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e7:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB704746-C27B-4C6B-948C-B8C0A3F40782",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F354F8F6-70D3-43EE-BF08-DFB87E83E847",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e9:*:*:*:*:*:*:*",
              "matchCriteriaId": "62F908B0-7ECE-40F8-8549-29BD1A070606",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e10:*:*:*:*:*:*:*",
              "matchCriteriaId": "378E67DD-779C-4852-BF29-38C2DFFB1BBB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e10a:*:*:*:*:*:*:*",
              "matchCriteriaId": "9033ACC7-1CCC-44E7-8275-73499C0E6E87",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)e10d:*:*:*:*:*:*:*",
              "matchCriteriaId": "BFD4AF73-6C03-4978-BC43-857188BF7E4B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea7:*:*:*:*:*:*:*",
              "matchCriteriaId": "7785E177-C04E-4170-9C35-B4259D14EA85",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea8:*:*:*:*:*:*:*",
              "matchCriteriaId": "8CAE727E-E552-4222-8FF0-6146A813BDEE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea9:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7850295-C728-4448-ABA7-D01397DBBE5A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea9a:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C104A47-53EE-47FC-BAE5-21925BEE98E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
              "matchCriteriaId": "F112DE64-0042-4FB9-945D-3107468193E5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(5\\)e1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E027FB12-862F-413E-AA2B-4BBD90AE3650",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2:*:*:*:*:*:*:*",
              "matchCriteriaId": "DD28874B-148A-4299-9AA1-67A550B25F8C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(5b\\)e:*:*:*:*:*:*:*",
              "matchCriteriaId": "F29B2E6F-ED6C-4568-9042-7A1BD96A9E07",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(6\\)e:*:*:*:*:*:*:*",
              "matchCriteriaId": "199DCF1B-8A1E-47CC-87A6-64E6F21D8886",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(6\\)e0a:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5B78669-3B28-4F1D-993D-85282A7D0E96",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(6\\)e0c:*:*:*:*:*:*:*",
              "matchCriteriaId": "DD05109E-1183-419D-96A1-9CD5EA5ECC3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3C73A3A-4B84-476F-AC3C-81DCB527E29A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DEE2C71-C401-43D1-86DC-725FE5FDF87E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2a:*:*:*:*:*:*:*",
              "matchCriteriaId": "1758F264-96F9-4EE9-9CA9-AD5407885547",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2b:*:*:*:*:*:*:*",
              "matchCriteriaId": "FB2842F6-4CD5-457C-AC75-241A5AB9534B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(6\\)e3:*:*:*:*:*:*:*",
              "matchCriteriaId": "5ABE0470-E94A-4CAF-865D-73E2607A0DC1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(6\\)eb:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9CCD7E3-C62B-4151-96FF-1175D4896E95",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e:*:*:*:*:*:*:*",
              "matchCriteriaId": "6437E689-A049-4D48-AB7A-49CA7EBDE8B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0a:*:*:*:*:*:*:*",
              "matchCriteriaId": "110B699D-169E-4932-A480-6EBB90CAE94B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0b:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4C12918-E5BB-465E-9DA4-06B7351DD805",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0s:*:*:*:*:*:*:*",
              "matchCriteriaId": "4862C453-8BD7-4D53-B2D6-CE3E44A4915A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0C4E1F4-AD64-418C-A308-85501E0F3EA2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "27EF41C6-A0D0-4149-BC5D-B31C4F5CC6D1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e2:*:*:*:*:*:*:*",
              "matchCriteriaId": "57ED9CDC-FC03-4DA7-A791-CE61D0D8364D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e2a:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB8C3BBA-4829-4006-B7EB-F552D86922C8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e3:*:*:*:*:*:*:*",
              "matchCriteriaId": "F980EFA3-BB92-49D3-8D5F-2804BB44ABB1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e3k:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D6D0AA7-E879-4303-AB2D-4FEF3574B60E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e4:*:*:*:*:*:*:*",
              "matchCriteriaId": "345C9300-CAC2-4427-A6B4-8DBC72573E00",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e5:*:*:*:*:*:*:*",
              "matchCriteriaId": "64BFCF66-DE06-46DA-8F9D-60A446DC0F0A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e6:*:*:*:*:*:*:*",
              "matchCriteriaId": "7BDF6ABA-F0A4-423F-9056-A57C6A074137",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e7:*:*:*:*:*:*:*",
              "matchCriteriaId": "956FE25C-3CB8-4479-850D-719827123A3B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e8:*:*:*:*:*:*:*",
              "matchCriteriaId": "23ABB581-90EF-4F6C-9778-735932D2B08D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e9:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC3FD874-5EDF-48E0-A5AC-415A620C1FF8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7\\)e10:*:*:*:*:*:*:*",
              "matchCriteriaId": "58F396D6-9B6E-4E6A-B561-9822DB13C7AE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7a\\)e0b:*:*:*:*:*:*:*",
              "matchCriteriaId": "1374E243-4EC2-4A81-991C-B5705135CAD2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(7b\\)e0b:*:*:*:*:*:*:*",
              "matchCriteriaId": "6ECA6101-94BA-4209-8243-A56AF02963EA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(8\\)e:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFF00927-80B0-4BE3-BF7C-E663A5E7763A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(8\\)e1:*:*:*:*:*:*:*",
              "matchCriteriaId": "9795E31D-A642-4100-A980-CD49C291AB7F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(8\\)e2:*:*:*:*:*:*:*",
              "matchCriteriaId": "83C79479-27C6-4273-BC80-70395D609197",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(8\\)e3:*:*:*:*:*:*:*",
              "matchCriteriaId": "28ACC494-2B4B-4BCE-9275-B7B10CC69B1B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(8\\)e4:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8BB9098-7C1D-4776-8B1F-EF4A0461CCDB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(8\\)e5:*:*:*:*:*:*:*",
              "matchCriteriaId": "602A88C0-30D1-4B63-A8F7-EF1D35350897",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios:15.2\\(8\\)e6:*:*:*:*:*:*:*",
              "matchCriteriaId": "8D3AE0C5-D071-44B4-B820-422296FDC259",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960cx-8pc-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D5B6046-6377-471B-9639-D7F635B08190",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960cx-8tc-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EFCF1E00-1C43-486E-A64E-14F5BEF82362",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-24pd-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D76048CE-58D5-4F67-8679-9C863D41F15E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-24ps-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB7DC221-0BA1-4051-8643-1180C9EA682A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-24psq-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "00CEE576-6C55-4BD4-B9F2-33E40483437B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-24psq-l_cool:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2683677D-9FD4-416B-8CFF-D81AF3174B3A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-24td-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "548B1FAF-946A-446B-8248-10BC194496B1",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-24ts-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3531645A-C4FB-4F6D-BBD2-D2852AA13509",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-24ts-ll:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "46984315-BF1E-4146-9960-328AEFA73D54",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-48fpd-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5FC6D2F-0B4A-4D12-BF34-8D91C948CD23",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-48fps-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "927762E0-6EE5-48C9-A7EE-8824BEBED08A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-48lpd-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "34F1CA06-D540-4CDB-BACB-5D528C830753",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-48lps-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F53A6E90-DA02-420A-B4A7-BC6D73C4B95A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-48td-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B48837AB-F3DB-4246-90E2-6D8CD8BCF658",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-48ts-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8B888C8-9E13-4353-A8D8-96900726AE77",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960x-48ts-ll:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA35A21E-9FB8-4694-B46D-E9381CB3D0C6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-24pd-i:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1BD40B3-2AD6-42D3-AE79-2E66A4CDF79E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-24pd-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F5F1600-30A5-4B31-A518-7B84BFE16883",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-24ps-i:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E03D0B73-B854-4385-9AD2-EAC7B041558D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-24ps-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "868B074C-2A14-4242-829A-202095A2CFF1",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-24td-i:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C990D9F-42F4-4722-AF6E-2933E5872C17",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-24td-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "99C76EA7-969F-4A5F-B045-995C9445B415",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-24ts-i:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "567757A5-74CB-4FB6-9BDA-FA4F51A02998",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-24ts-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7794B87E-C70E-4DA3-9FC8-0170A0898557",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-48fpd-i:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4BEB1267-B23F-4001-B6E2-49894CF6EC38",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-48fpd-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "845DDB35-3BB6-41CB-8304-340F444B6FE9",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-48fps-i:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1DAC629E-531F-4B99-9A07-15E113169FCA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-48fps-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A63DC2E4-83AB-487E-80D5-036723D930F5",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-48lpd-i:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6DD7CDE-C7E1-466C-A6E3-33AA30F9CDEE",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-48lpd-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F543085-A2E2-4D7E-96EC-E9C6B964AED2",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-48lps-i:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B64C85B3-D227-4BE7-BE7B-B05F86FE0583",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-48lps-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3BC9AD1E-3FE7-42D2-9A8D-F71694EF9BAB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-48td-i:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A153EAF3-C3DC-49C5-BBBA-7459850B1F57",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-48td-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5C2000D5-E0C0-4488-8213-DC3079301050",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-48ts-i:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "63AF0F69-A0E0-4AAC-B96B-1C1B59D76669",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_2960xr-48ts-l:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "179F9893-1C6B-468E-84F3-1CAAAE0A7671",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_3560cx-12pc-s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2ABDF97F-B703-40A0-B510-D73859139E87",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_3560cx-12pd-s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6637D9D4-14CE-48D2-90D4-19EF761F4193",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_3560cx-12tc-s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "37BE430A-2446-4F29-88D8-D452D1022B02",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_3560cx-8pc-s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "09DF34EC-7BC3-44DC-B7B1-94162245CBBA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_3560cx-8pt-s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "06EEDB4F-BD1E-4914-AF79-64D42643683D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_3560cx-8tc-s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "54BFFB02-7C84-4569-8129-74B84A5E7310",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:cisco:catalyst_3560cx-8xpd-s:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F12A3197-0CE2-44F4-B310-DE8D4A72B00D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\r\n\r This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time.\r\n\r Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en el software Cisco IOS para los switches Cisco Catalyst de las series 2960X, 2960XR, 2960CX y 3560CX podr\u00eda permitir que un atacante local autenticado con nivel de privilegio 15, o uno no autenticado con acceso f\u00edsico al dispositivo, ejecute c\u00f3digo persistente durante el arranque y rompa la cadena de confianza. Esta vulnerabilidad se debe a la falta de verificaci\u00f3n de firmas para archivos espec\u00edficos que pueden cargarse durante el arranque del dispositivo. Un atacante podr\u00eda explotar esta vulnerabilidad colocando un archivo manipulado en una ubicaci\u00f3n espec\u00edfica del dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante ejecutar c\u00f3digo arbitrario durante el arranque. Dado que esto permite al atacante eludir una importante funci\u00f3n de seguridad del dispositivo, Cisco ha elevado la calificaci\u00f3n de impacto en la seguridad (SIR) de este aviso de media a alta."
    }
  ],
  "id": "CVE-2025-20181",
  "lastModified": "2025-08-04T18:51:54.673",
  "metrics": {
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "PHYSICAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.8,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 0.9,
        "impactScore": 5.9,
        "source": "psirt@cisco.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-05-07T18:15:37.973",
  "references": [
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-347"
        }
      ],
      "source": "psirt@cisco.com",
      "type": "Primary"
    }
  ]
}

GHSA-95H6-VGWG-QCQC

Vulnerability from github – Published: 2025-05-07 18:30 – Updated: 2025-05-07 18:30

Details

This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time.

Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

Severity ?

6.8 (Medium)


                  
                    CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-20181"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-347"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-05-07T18:15:37Z",
    "severity": "MODERATE"
  },
  "details": "A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\n\n This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time.\n\n Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.",
  "id": "GHSA-95h6-vgwg-qcqc",
  "modified": "2025-05-07T18:30:49Z",
  "published": "2025-05-07T18:30:49Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20181"
    },
    {
      "type": "WEB",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

CERTFR-2025-AVI-0378

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Cisco	Catalyst Center	Catalyst Center versions antérieures à 2.3.7.9
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x antérieures à 20.15.2
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.16.x antérieures à 20.16.1
Cisco	IOS XR	IOS XR versions antérieures à 24.3.2
Cisco	WLC AireOS	WLC AireOS versions antérieures à 8.10.196.0
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions antérieures à 20.9.7
Cisco	IOS XE	IOS XE : Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des configurations vulnérables des équipements (cf. section Documentation).
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x antérieures à 20.12.5

References

Title

Publication Time

Tags

Bulletin de sécurité Cisco cisco-sa-iosxe-ikev1-dos-XHk3HzFC	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-twamp-kV4FHugn	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-iosxe-privesc-su7scvdp	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-sisf-dos-ZGwt4DdY	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-webui-cmdinj-gVn3OKNC	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-ios-http-privesc-wCRd5e3	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-ewlc-cdp-dos-fpeks9K	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-wlc-wncd-p6Gvt6HL	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-dnac-api-nBPZcJCM	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-c2960-3560-sboot-ZtqADrHq	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-multiprod-ikev2-dos-gPctUqv2	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-sdwan-priviesc-WCk7bmmt	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-wlc-file-uplpd-rHZG9UfC	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks	2025-05-07	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Catalyst Center versions ant\u00e9rieures \u00e0 2.3.7.9",
      "product": {
        "name": "Catalyst Center",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x  ant\u00e9rieures \u00e0 20.15.2",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN Manager versions 20.16.x ant\u00e9rieures \u00e0 20.16.1",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XR  versions ant\u00e9rieures \u00e0 24.3.2",
      "product": {
        "name": "IOS XR",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "WLC AireOS versions ant\u00e9rieures \u00e0 8.10.196.0",
      "product": {
        "name": "WLC AireOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN Manager versions ant\u00e9rieures \u00e0 20.9.7",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XE : Se r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des configurations vuln\u00e9rables des \u00e9quipements (cf. section Documentation).",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x ant\u00e9rieures \u00e0 20.12.5",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-20189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20189"
    },
    {
      "name": "CVE-2025-20192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20192"
    },
    {
      "name": "CVE-2025-20199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20199"
    },
    {
      "name": "CVE-2025-20191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20191"
    },
    {
      "name": "CVE-2025-20188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20188"
    },
    {
      "name": "CVE-2025-20198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20198"
    },
    {
      "name": "CVE-2025-20181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20181"
    },
    {
      "name": "CVE-2025-20122",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20122"
    },
    {
      "name": "CVE-2025-20202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20202"
    },
    {
      "name": "CVE-2025-20210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20210"
    },
    {
      "name": "CVE-2025-20162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20162"
    },
    {
      "name": "CVE-2025-20200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20200"
    },
    {
      "name": "CVE-2025-20154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20154"
    },
    {
      "name": "CVE-2025-20140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20140"
    },
    {
      "name": "CVE-2025-20201",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20201"
    },
    {
      "name": "CVE-2025-20186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20186"
    },
    {
      "name": "CVE-2025-20182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20182"
    },
    {
      "name": "CVE-2025-20197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20197"
    },
    {
      "name": "CVE-2025-20164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20164"
    }
  ],
  "links": [],
  "reference": "CERTFR-2025-AVI-0378",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-05-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
  "vendor_advisories": [
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-twamp-kV4FHugn",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-privesc-su7scvdp",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-privesc-su7scvdp"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sisf-dos-ZGwt4DdY",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sisf-dos-ZGwt4DdY"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-webui-cmdinj-gVn3OKNC",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ios-http-privesc-wCRd5e3",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-http-privesc-wCRd5e3"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ewlc-cdp-dos-fpeks9K",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wlc-wncd-p6Gvt6HL",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-dnac-api-nBPZcJCM",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-api-nBPZcJCM"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-c2960-3560-sboot-ZtqADrHq",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-multiprod-ikev2-dos-gPctUqv2",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multiprod-ikev2-dos-gPctUqv2"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sdwan-priviesc-WCk7bmmt",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-priviesc-WCk7bmmt"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wlc-file-uplpd-rHZG9UfC",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-file-uplpd-rHZG9UfC"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
    }
  ]
}

CERTFR-2025-AVI-0378

Vulnerability from certfr_avis - Published: - Updated:

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Cisco	Catalyst Center	Catalyst Center versions antérieures à 2.3.7.9
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x antérieures à 20.15.2
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.16.x antérieures à 20.16.1
Cisco	IOS XR	IOS XR versions antérieures à 24.3.2
Cisco	WLC AireOS	WLC AireOS versions antérieures à 8.10.196.0
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions antérieures à 20.9.7
Cisco	IOS XE	IOS XE : Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des configurations vulnérables des équipements (cf. section Documentation).
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x antérieures à 20.12.5

References

Title

Publication Time

Tags

Bulletin de sécurité Cisco cisco-sa-iosxe-ikev1-dos-XHk3HzFC	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-twamp-kV4FHugn	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-iosxe-privesc-su7scvdp	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-sisf-dos-ZGwt4DdY	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-webui-cmdinj-gVn3OKNC	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-ios-http-privesc-wCRd5e3	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-ewlc-cdp-dos-fpeks9K	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-wlc-wncd-p6Gvt6HL	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-dnac-api-nBPZcJCM	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-c2960-3560-sboot-ZtqADrHq	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-multiprod-ikev2-dos-gPctUqv2	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-sdwan-priviesc-WCk7bmmt	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-wlc-file-uplpd-rHZG9UfC	2025-05-07	vendor-advisory
Bulletin de sécurité Cisco cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks	2025-05-07	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Catalyst Center versions ant\u00e9rieures \u00e0 2.3.7.9",
      "product": {
        "name": "Catalyst Center",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x  ant\u00e9rieures \u00e0 20.15.2",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN Manager versions 20.16.x ant\u00e9rieures \u00e0 20.16.1",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XR  versions ant\u00e9rieures \u00e0 24.3.2",
      "product": {
        "name": "IOS XR",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "WLC AireOS versions ant\u00e9rieures \u00e0 8.10.196.0",
      "product": {
        "name": "WLC AireOS",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN Manager versions ant\u00e9rieures \u00e0 20.9.7",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "IOS XE : Se r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des configurations vuln\u00e9rables des \u00e9quipements (cf. section Documentation).",
      "product": {
        "name": "IOS XE",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    },
    {
      "description": "Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x ant\u00e9rieures \u00e0 20.12.5",
      "product": {
        "name": "Catalyst SD-WAN",
        "vendor": {
          "name": "Cisco",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2025-20189",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20189"
    },
    {
      "name": "CVE-2025-20192",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20192"
    },
    {
      "name": "CVE-2025-20199",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20199"
    },
    {
      "name": "CVE-2025-20191",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20191"
    },
    {
      "name": "CVE-2025-20188",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20188"
    },
    {
      "name": "CVE-2025-20198",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20198"
    },
    {
      "name": "CVE-2025-20181",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20181"
    },
    {
      "name": "CVE-2025-20122",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20122"
    },
    {
      "name": "CVE-2025-20202",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20202"
    },
    {
      "name": "CVE-2025-20210",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20210"
    },
    {
      "name": "CVE-2025-20162",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20162"
    },
    {
      "name": "CVE-2025-20200",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20200"
    },
    {
      "name": "CVE-2025-20154",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20154"
    },
    {
      "name": "CVE-2025-20140",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20140"
    },
    {
      "name": "CVE-2025-20201",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20201"
    },
    {
      "name": "CVE-2025-20186",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20186"
    },
    {
      "name": "CVE-2025-20182",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20182"
    },
    {
      "name": "CVE-2025-20197",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20197"
    },
    {
      "name": "CVE-2025-20164",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-20164"
    }
  ],
  "links": [],
  "reference": "CERTFR-2025-AVI-0378",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2025-05-09T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
  "vendor_advisories": [
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-twamp-kV4FHugn",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-privesc-su7scvdp",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-privesc-su7scvdp"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sisf-dos-ZGwt4DdY",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sisf-dos-ZGwt4DdY"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-webui-cmdinj-gVn3OKNC",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ios-http-privesc-wCRd5e3",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-http-privesc-wCRd5e3"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ewlc-cdp-dos-fpeks9K",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wlc-wncd-p6Gvt6HL",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-dnac-api-nBPZcJCM",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-api-nBPZcJCM"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-c2960-3560-sboot-ZtqADrHq",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-multiprod-ikev2-dos-gPctUqv2",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multiprod-ikev2-dos-gPctUqv2"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sdwan-priviesc-WCk7bmmt",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-priviesc-WCk7bmmt"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wlc-file-uplpd-rHZG9UfC",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-file-uplpd-rHZG9UfC"
    },
    {
      "published_at": "2025-05-07",
      "title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
    }
  ]
}

NCSC-2025-0146

Vulnerability from csaf_ncscnl - Published: 2025-05-08 08:43 - Updated: 2025-05-08 08:43

Summary

Kwetsbaarheden verholpen in Cisco IOS XE Software

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten

Cisco heeft kwetsbaarheden verholpen in Cisco IOS XE Software.

Interpretaties

De kwetsbaarheden in Cisco IOS XE Software omvatten verschillende problemen, waaronder onvoldoende invoervalidatie en onjuist geheugenbeheer. Deze kwetsbaarheden kunnen worden misbruikt door ongeauthenticeerde aanvallers om Denial-of-Service (DoS) situaties te veroorzaken, ongeautoriseerde toegang te verkrijgen, en zelfs om configuraties te manipuleren. Kwetsbare systemen kunnen onverwacht opnieuw opstarten of kunnen worden blootgesteld aan ongeautoriseerde commando-injectie-aanvallen, wat de integriteit en beschikbaarheid van netwerken in gevaar kan brengen.

Oplossingen

Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans

medium

Schade

high

CWE-762

Mismatched Memory Management Routines

CWE-805

Buffer Access with Incorrect Length Value

CWE-347

Improper Verification of Cryptographic Signature

CWE-232

Improper Handling of Undefined Values

CWE-798

Use of Hard-coded Credentials

CWE-352

Cross-Site Request Forgery (CSRF)

CWE-284

Improper Access Control

CWE-400

Uncontrolled Resource Consumption

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-787

Out-of-bounds Write

CWE-789

Memory Allocation with Excessive Size Value

CWE-20

Improper Input Validation

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Cisco heeft kwetsbaarheden verholpen in Cisco IOS XE Software.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden in Cisco IOS XE Software omvatten verschillende problemen, waaronder onvoldoende invoervalidatie en onjuist geheugenbeheer. Deze kwetsbaarheden kunnen worden misbruikt door ongeauthenticeerde aanvallers om Denial-of-Service (DoS) situaties te veroorzaken, ongeautoriseerde toegang te verkrijgen, en zelfs om configuraties te manipuleren. Kwetsbare systemen kunnen onverwacht opnieuw opstarten of kunnen worden blootgesteld aan ongeautoriseerde commando-injectie-aanvallen, wat de integriteit en beschikbaarheid van netwerken in gevaar kan brengen.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Mismatched Memory Management Routines",
        "title": "CWE-762"
      },
      {
        "category": "general",
        "text": "Buffer Access with Incorrect Length Value",
        "title": "CWE-805"
      },
      {
        "category": "general",
        "text": "Improper Verification of Cryptographic Signature",
        "title": "CWE-347"
      },
      {
        "category": "general",
        "text": "Improper Handling of Undefined Values",
        "title": "CWE-232"
      },
      {
        "category": "general",
        "text": "Use of Hard-coded Credentials",
        "title": "CWE-798"
      },
      {
        "category": "general",
        "text": "Cross-Site Request Forgery (CSRF)",
        "title": "CWE-352"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
        "title": "CWE-78"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Memory Allocation with Excessive Size Value",
        "title": "CWE-789"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-user-del-hQxMpUDj"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-file-uplpd-rHZG9UfC"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Cisco IOS XE Software",
    "tracking": {
      "current_release_date": "2025-05-08T08:43:57.415709Z",
      "generator": {
        "date": "2025-02-25T15:15:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.0"
        }
      },
      "id": "NCSC-2025-0146",
      "initial_release_date": "2025-05-08T08:43:57.415709Z",
      "revision_history": [
        {
          "date": "2025-05-08T08:43:57.415709Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.1.3",
                "product": {
                  "name": "vers:cisco/16.1.3",
                  "product_id": "CSAFPID-2714930"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.10.3",
                "product": {
                  "name": "vers:cisco/16.10.3",
                  "product_id": "CSAFPID-2715313"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.11.2",
                "product": {
                  "name": "vers:cisco/16.11.2",
                  "product_id": "CSAFPID-2715043"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.12.9",
                "product": {
                  "name": "vers:cisco/16.12.9",
                  "product_id": "CSAFPID-2715520"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.10bs",
                "product": {
                  "name": "vers:cisco/3.16.10bs",
                  "product_id": "CSAFPID-2715459"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.10s",
                "product": {
                  "name": "vers:cisco/3.16.10s",
                  "product_id": "CSAFPID-2715039"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.2.2",
                "product": {
                  "name": "vers:cisco/16.2.2",
                  "product_id": "CSAFPID-2714932"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.3.11",
                "product": {
                  "name": "vers:cisco/16.3.11",
                  "product_id": "CSAFPID-2715445"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.4.3",
                "product": {
                  "name": "vers:cisco/16.4.3",
                  "product_id": "CSAFPID-2715031"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.5.3",
                "product": {
                  "name": "vers:cisco/16.5.3",
                  "product_id": "CSAFPID-2715164"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.6.10",
                "product": {
                  "name": "vers:cisco/16.6.10",
                  "product_id": "CSAFPID-2715478"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.7bs",
                "product": {
                  "name": "vers:cisco/3.16.7bs",
                  "product_id": "CSAFPID-2715170"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.7s",
                "product": {
                  "name": "vers:cisco/3.16.7s",
                  "product_id": "CSAFPID-2715017"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.8.3",
                "product": {
                  "name": "vers:cisco/16.8.3",
                  "product_id": "CSAFPID-2714865"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.9s",
                "product": {
                  "name": "vers:cisco/3.16.9s",
                  "product_id": "CSAFPID-2714842"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.10.9s",
                "product": {
                  "name": "vers:cisco/3.10.9s",
                  "product_id": "CSAFPID-2714989"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.11.9e",
                "product": {
                  "name": "vers:cisco/3.11.9e",
                  "product_id": "CSAFPID-2715536"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.12.4s",
                "product": {
                  "name": "vers:cisco/3.12.4s",
                  "product_id": "CSAFPID-2714784"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.13.9s",
                "product": {
                  "name": "vers:cisco/3.13.9s",
                  "product_id": "CSAFPID-2715032"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.14.4s",
                "product": {
                  "name": "vers:cisco/3.14.4s",
                  "product_id": "CSAFPID-2714746"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.15.4s",
                "product": {
                  "name": "vers:cisco/3.15.4s",
                  "product_id": "CSAFPID-2714941"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.2as",
                "product": {
                  "name": "vers:cisco/3.16.2as",
                  "product_id": "CSAFPID-2714791"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.2bs",
                "product": {
                  "name": "vers:cisco/3.16.2bs",
                  "product_id": "CSAFPID-2714942"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.2s",
                "product": {
                  "name": "vers:cisco/3.16.2s",
                  "product_id": "CSAFPID-2714788"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.3as",
                "product": {
                  "name": "vers:cisco/3.16.3as",
                  "product_id": "CSAFPID-2714943"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.3s",
                "product": {
                  "name": "vers:cisco/3.16.3s",
                  "product_id": "CSAFPID-2714798"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4s",
                "product": {
                  "name": "vers:cisco/3.16.4s",
                  "product_id": "CSAFPID-2714944"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4gs",
                "product": {
                  "name": "vers:cisco/3.16.4gs",
                  "product_id": "CSAFPID-2714974"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4es",
                "product": {
                  "name": "vers:cisco/3.16.4es",
                  "product_id": "CSAFPID-2714985"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4ds",
                "product": {
                  "name": "vers:cisco/3.16.4ds",
                  "product_id": "CSAFPID-2714983"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4cs",
                "product": {
                  "name": "vers:cisco/3.16.4cs",
                  "product_id": "CSAFPID-2714978"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4bs",
                "product": {
                  "name": "vers:cisco/3.16.4bs",
                  "product_id": "CSAFPID-2714971"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4as",
                "product": {
                  "name": "vers:cisco/3.16.4as",
                  "product_id": "CSAFPID-2714967"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.5as",
                "product": {
                  "name": "vers:cisco/3.16.5as",
                  "product_id": "CSAFPID-2714992"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.5bs",
                "product": {
                  "name": "vers:cisco/3.16.5bs",
                  "product_id": "CSAFPID-2714996"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.5s",
                "product": {
                  "name": "vers:cisco/3.16.5s",
                  "product_id": "CSAFPID-2714975"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.6bs",
                "product": {
                  "name": "vers:cisco/3.16.6bs",
                  "product_id": "CSAFPID-2715025"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.6s",
                "product": {
                  "name": "vers:cisco/3.16.6s",
                  "product_id": "CSAFPID-2714987"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.7as",
                "product": {
                  "name": "vers:cisco/3.16.7as",
                  "product_id": "CSAFPID-2715168"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.8s",
                "product": {
                  "name": "vers:cisco/3.16.8s",
                  "product_id": "CSAFPID-2715178"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.1as",
                "product": {
                  "name": "vers:cisco/3.16.1as",
                  "product_id": "CSAFPID-2714787"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.1s",
                "product": {
                  "name": "vers:cisco/3.16.1s",
                  "product_id": "CSAFPID-2714773"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco IOS XE Software"
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-20137",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20137",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20137.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20137"
    },
    {
      "cve": "CVE-2025-20140",
      "cwe": {
        "id": "CWE-789",
        "name": "Memory Allocation with Excessive Size Value"
      },
      "notes": [
        {
          "category": "other",
          "text": "Memory Allocation with Excessive Size Value",
          "title": "CWE-789"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20140",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20140.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20140"
    },
    {
      "cve": "CVE-2025-20154",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20154",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20154.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20154"
    },
    {
      "cve": "CVE-2025-20162",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20162",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20162.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20162"
    },
    {
      "cve": "CVE-2025-20181",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Verification of Cryptographic Signature",
          "title": "CWE-347"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20181",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20181.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20181"
    },
    {
      "cve": "CVE-2025-20182",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20182",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20182.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20182"
    },
    {
      "cve": "CVE-2025-20186",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "title": "CWE-78"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20186",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20186.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20186"
    },
    {
      "cve": "CVE-2025-20188",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Hard-coded Credentials",
          "title": "CWE-798"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20188",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20188.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20188"
    },
    {
      "cve": "CVE-2025-20189",
      "cwe": {
        "id": "CWE-762",
        "name": "Mismatched Memory Management Routines"
      },
      "notes": [
        {
          "category": "other",
          "text": "Mismatched Memory Management Routines",
          "title": "CWE-762"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20189",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20189.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20189"
    },
    {
      "cve": "CVE-2025-20190",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20190",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20190.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20190"
    },
    {
      "cve": "CVE-2025-20192",
      "cwe": {
        "id": "CWE-232",
        "name": "Improper Handling of Undefined Values"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Handling of Undefined Values",
          "title": "CWE-232"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20192",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20192.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20192"
    },
    {
      "cve": "CVE-2025-20194",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "title": "CWE-78"
        },
        {
          "category": "other",
          "text": "Cross-Site Request Forgery (CSRF)",
          "title": "CWE-352"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20194",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20194.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20194"
    },
    {
      "cve": "CVE-2025-20202",
      "cwe": {
        "id": "CWE-805",
        "name": "Buffer Access with Incorrect Length Value"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Access with Incorrect Length Value",
          "title": "CWE-805"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20202",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20202.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20202"
    }
  ]
}

WID-SEC-W-2025-0972

Vulnerability from csaf_certbund - Published: 2025-05-07 22:00 - Updated: 2025-05-07 22:00

Summary

Cisco IOS-Software für Cisco Catalyst Switches: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung

Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird. Catalyst ist der Markenname für eine Vielzahl von Netzwerk-Switches die von Cisco Systems verkauft werden.

Angriff

Ein Angreifer kann mehrere Schwachstellen in Cisco IOS für Cisco Catalyst Switches ausnutzen, um Sicherheitsmaßnahmen zu umgehen und beliebigen Code auszuführen.

Betroffene Betriebssysteme

- CISCO Appliance - Hardware Appliance

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das f\u00fcr Cisco Ger\u00e4te wie z. B. Router und Switches eingesetzt wird.\r\nCatalyst ist der Markenname f\u00fcr eine Vielzahl von Netzwerk-Switches die von Cisco Systems verkauft werden.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Cisco IOS f\u00fcr Cisco Catalyst Switches ausnutzen, um Sicherheitsma\u00dfnahmen zu umgehen und beliebigen Code auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- CISCO Appliance\n- Hardware Appliance",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-0972 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0972.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-0972 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0972"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-ipsgacl-pg6qfZk vom 2025-05-07",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipsgacl-pg6qfZk"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-c2960-3560-sboot-ZtqADrHq vom 2025-05-07",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
      }
    ],
    "source_lang": "en-US",
    "title": "Cisco IOS-Software f\u00fcr Cisco Catalyst Switches: Mehrere Schwachstellen erm\u00f6glichen Umgehen von Sicherheitsvorkehrungen",
    "tracking": {
      "current_release_date": "2025-05-07T22:00:00.000+00:00",
      "generator": {
        "date": "2025-05-08T09:59:16.909+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2025-0972",
      "initial_release_date": "2025-05-07T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-05-07T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1000 Series Switches",
                "product": {
                  "name": "Cisco Catalyst 1000 Series Switches",
                  "product_id": "T043462",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:cisco:catalyst:1000_series_switches"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2960L Series Switches",
                "product": {
                  "name": "Cisco Catalyst 2960L Series Switches",
                  "product_id": "T043463",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:cisco:catalyst:2960l_series_switches"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2960X Series Switches",
                "product": {
                  "name": "Cisco Catalyst 2960X Series Switches",
                  "product_id": "T043464",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:cisco:catalyst:2960x_series_switches"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2960XR Series Switches",
                "product": {
                  "name": "Cisco Catalyst 2960XR Series Switches",
                  "product_id": "T043465",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:cisco:catalyst:2960xr_series_switches"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2960CX Series Switches",
                "product": {
                  "name": "Cisco Catalyst 2960CX Series Switches",
                  "product_id": "T043466",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:cisco:catalyst:2960cx_series_switches"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "3560CX Series Switches",
                "product": {
                  "name": "Cisco Catalyst 3560CX Series Switches",
                  "product_id": "T043467",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:cisco:catalyst:3560cx_series_switches"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Catalyst"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Software for Cisco Catalyst Switches",
                "product": {
                  "name": "Cisco IOS Software for Cisco Catalyst Switches",
                  "product_id": "T043461",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:cisco:ios:software_for_cisco_catalyst_switches"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "IOS"
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-20137",
      "product_status": {
        "known_affected": [
          "T043461",
          "T043462",
          "T043463"
        ]
      },
      "release_date": "2025-05-07T22:00:00.000+00:00",
      "title": "CVE-2025-20137"
    },
    {
      "cve": "CVE-2025-20181",
      "product_status": {
        "known_affected": [
          "T043465",
          "T043466",
          "T043467",
          "T043461",
          "T043464"
        ]
      },
      "release_date": "2025-05-07T22:00:00.000+00:00",
      "title": "CVE-2025-20181"
    }
  ]
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-20181 (GCVE-0-2025-20181)

CISCO-SA-C2960-3560-SBOOT-ZTQADRHQ

FKIE_CVE-2025-20181

GHSA-95H6-VGWG-QCQC

CERTFR-2025-AVI-0378

Solutions

CERTFR-2025-AVI-0378

Solutions

NCSC-2025-0146

WID-SEC-W-2025-0972

Tags

Sightings

Nomenclature