CISCO-CVE-2025-20181

MEDIUM6.8

Cisco IOS Software Secure Boot Bypass Vulnerability

Published May 7, 2025

Modified 10 months ago

Affected Packages

Cisco IOS

CiscoIOS

Affected versions:

12.2(6)I115.0(1)EX15.0(1)EY15.0(1)EY115.0(1)EY215.0(1)XO15.0(1)XO115.0(2)EX15.0(2)EX115.0(2)EX10+145 more

CVSS Analysis

CVSS v3.0

6.8

Exploitability

Attack Vector

PhysicalAV:P

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

6.8/CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Upstream

Ecosystems

Timeline

PublishedMay 7, 2025

ModifiedMay 7, 2025