Riskcovery

CVE-2025-20155

State
Published
Severity
6.0 Medium
Published
May 7, 2025
Updated
Feb 26, 2026
Reserved
Oct 10, 2024

Read the record on cve.org

Description

A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system. This vulnerability is due to insufficient input validation of the bootstrap file that is read by the system software when a device is first deployed in SD-WAN mode or when an administrator configures SD-Routing on the device. An attacker could exploit this vulnerability by modifying a bootstrap file generated by Cisco Catalyst SD-WAN Manager, loading it into the device flash, and then either reloading the device in a green field deployment in SD-WAN mode or configuring the device with SD-Routing. A successful exploit could allow the attacker to perform arbitrary file writes to the underlying operating system.

Scores

CVSSScoreVectorSource
3.16.0 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:Ncisco

Weaknesses

  • CWE-1287 Improper Validation of Specified Type of Input

Affected Products

ProductVersions
Cisco IOS XE SoftwareCisco
  • 17.9.4Affected
  • 17.9.5Affected
  • 17.9.4aAffected
  • 17.9.5aAffected
  • 17.9.5bAffected
  • 17.9.6Affected
  • 17.9.6aAffected
  • 17.9.5eAffected
  • 17.9.5fAffected
  • 17.12.1Affected
  • 17.12.1wAffected
  • 17.12.1aAffected
  • 17.12.1xAffected
  • 17.12.2Affected
  • 17.12.3Affected
  • 17.12.2aAffected
  • 17.12.1yAffected
  • 17.12.1zAffected
  • 17.12.4Affected
  • 17.12.3aAffected
  • 17.12.1z1Affected
  • 17.12.4aAffected
  • 17.12.4bAffected
  • 17.13.1Affected
  • 17.13.1aAffected
  • and 3 more versions

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.