cveboard RSS feed

CVE-2025-20248

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Cisco IOS XR Software Image Verification Bypass Vulnerability

A vulnerability in the installation process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR Software image signature verification and load unsigned software on an affected device. To exploit this vulnerability, the attacker must have root-system privileges on the affected device. This vulnerability is due to incomplete validation of files during the installation of an .iso file. An attacker could exploit this vulnerability by modifying contents of the .iso image and then installing and activating it on the device. A successful exploit could allow the attacker to load an unsigned file as part of the image activation process.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco IOS XR Software

Vendor
Cisco
Product
Cisco IOS XR Software
Platforms
Unknown
Default status
unknown
Cisco IOS XR Software · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
6.5.3affectedUnavailableUnavailableUnavailableNone listed
6.5.29affectedUnavailableUnavailableUnavailableNone listed
6.5.1affectedUnavailableUnavailableUnavailableNone listed
6.6.1affectedUnavailableUnavailableUnavailableNone listed
6.5.2affectedUnavailableUnavailableUnavailableNone listed
6.5.92affectedUnavailableUnavailableUnavailableNone listed
6.5.15affectedUnavailableUnavailableUnavailableNone listed
6.6.2affectedUnavailableUnavailableUnavailableNone listed
7.0.1affectedUnavailableUnavailableUnavailableNone listed
6.6.25affectedUnavailableUnavailableUnavailableNone listed
6.5.26affectedUnavailableUnavailableUnavailableNone listed
6.6.11affectedUnavailableUnavailableUnavailableNone listed
6.5.25affectedUnavailableUnavailableUnavailableNone listed
6.5.28affectedUnavailableUnavailableUnavailableNone listed
6.5.93affectedUnavailableUnavailableUnavailableNone listed
6.6.12affectedUnavailableUnavailableUnavailableNone listed
6.5.90affectedUnavailableUnavailableUnavailableNone listed
7.0.0affectedUnavailableUnavailableUnavailableNone listed
7.1.1affectedUnavailableUnavailableUnavailableNone listed
7.0.90affectedUnavailableUnavailableUnavailableNone listed
6.6.3affectedUnavailableUnavailableUnavailableNone listed
6.7.1affectedUnavailableUnavailableUnavailableNone listed
7.0.2affectedUnavailableUnavailableUnavailableNone listed
7.1.15affectedUnavailableUnavailableUnavailableNone listed
7.2.0affectedUnavailableUnavailableUnavailableNone listed
7.2.1affectedUnavailableUnavailableUnavailableNone listed
7.1.2affectedUnavailableUnavailableUnavailableNone listed
6.7.2affectedUnavailableUnavailableUnavailableNone listed
7.1.25affectedUnavailableUnavailableUnavailableNone listed
6.6.4affectedUnavailableUnavailableUnavailableNone listed
7.3.1affectedUnavailableUnavailableUnavailableNone listed
7.1.3affectedUnavailableUnavailableUnavailableNone listed
6.7.3affectedUnavailableUnavailableUnavailableNone listed
7.4.1affectedUnavailableUnavailableUnavailableNone listed
7.2.2affectedUnavailableUnavailableUnavailableNone listed
6.5.31affectedUnavailableUnavailableUnavailableNone listed
6.8.1affectedUnavailableUnavailableUnavailableNone listed
7.4.15affectedUnavailableUnavailableUnavailableNone listed
6.5.32affectedUnavailableUnavailableUnavailableNone listed
7.3.2affectedUnavailableUnavailableUnavailableNone listed
7.5.1affectedUnavailableUnavailableUnavailableNone listed
7.4.16affectedUnavailableUnavailableUnavailableNone listed
7.3.27affectedUnavailableUnavailableUnavailableNone listed
7.6.1affectedUnavailableUnavailableUnavailableNone listed
7.5.2affectedUnavailableUnavailableUnavailableNone listed
7.6.15affectedUnavailableUnavailableUnavailableNone listed
7.3.3affectedUnavailableUnavailableUnavailableNone listed
7.7.1affectedUnavailableUnavailableUnavailableNone listed
6.8.2affectedUnavailableUnavailableUnavailableNone listed
7.3.4affectedUnavailableUnavailableUnavailableNone listed
7.4.2affectedUnavailableUnavailableUnavailableNone listed
6.7.35affectedUnavailableUnavailableUnavailableNone listed
6.9.1affectedUnavailableUnavailableUnavailableNone listed
7.6.2affectedUnavailableUnavailableUnavailableNone listed
7.8.1affectedUnavailableUnavailableUnavailableNone listed
7.5.3affectedUnavailableUnavailableUnavailableNone listed
7.7.2affectedUnavailableUnavailableUnavailableNone listed
6.9.2affectedUnavailableUnavailableUnavailableNone listed
7.9.1affectedUnavailableUnavailableUnavailableNone listed
7.8.2affectedUnavailableUnavailableUnavailableNone listed
7.5.4affectedUnavailableUnavailableUnavailableNone listed
6.5.33affectedUnavailableUnavailableUnavailableNone listed
7.8.22affectedUnavailableUnavailableUnavailableNone listed
7.10.1affectedUnavailableUnavailableUnavailableNone listed
7.7.21affectedUnavailableUnavailableUnavailableNone listed
7.9.2affectedUnavailableUnavailableUnavailableNone listed
7.3.5affectedUnavailableUnavailableUnavailableNone listed
7.5.5affectedUnavailableUnavailableUnavailableNone listed
7.11.1affectedUnavailableUnavailableUnavailableNone listed
7.9.21affectedUnavailableUnavailableUnavailableNone listed
7.10.2affectedUnavailableUnavailableUnavailableNone listed
7.6.3affectedUnavailableUnavailableUnavailableNone listed
24.1.1affectedUnavailableUnavailableUnavailableNone listed
7.3.6affectedUnavailableUnavailableUnavailableNone listed
7.11.2affectedUnavailableUnavailableUnavailableNone listed
24.2.1affectedUnavailableUnavailableUnavailableNone listed
24.1.2affectedUnavailableUnavailableUnavailableNone listed
24.2.11affectedUnavailableUnavailableUnavailableNone listed
24.3.1affectedUnavailableUnavailableUnavailableNone listed
24.4.1affectedUnavailableUnavailableUnavailableNone listed
24.2.2affectedUnavailableUnavailableUnavailableNone listed
7.8.23affectedUnavailableUnavailableUnavailableNone listed
7.11.21affectedUnavailableUnavailableUnavailableNone listed
24.2.20affectedUnavailableUnavailableUnavailableNone listed
24.3.2affectedUnavailableUnavailableUnavailableNone listed
24.4.10affectedUnavailableUnavailableUnavailableNone listed
6.5.35affectedUnavailableUnavailableUnavailableNone listed
24.4.15affectedUnavailableUnavailableUnavailableNone listed
6.5.351affectedUnavailableUnavailableUnavailableNone listed
6.5.352affectedUnavailableUnavailableUnavailableNone listed