{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-28T10:15:23.099","vulnerabilities":[{"cve":{"id":"CVE-2025-20143","sourceIdentifier":"psirt@cisco.com","published":"2025-03-12T16:15:21.733","lastModified":"2025-07-22T12:28:22.273","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Secure Boot functionality and load unverified software on an affected device. To exploit this vulnerability, the attacker must have root-system privileges on the affected device.\r\n\r\nThis vulnerability is due to insufficient verification of modules in the software load process. An attacker could exploit this vulnerability by manipulating the loaded binaries to bypass some of the integrity checks that are performed during the booting process. A successful exploit could allow the attacker to control the boot configuration, which could enable them to bypass the requirement to run Cisco-signed images or alter the security properties of the running system.\r\nNote: This vulnerability affects Cisco IOS XR Software, not the Secure Boot feature.\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability."},{"lang":"es","value":"Una vulnerabilidad en el proceso de arranque del software Cisco IOS XR podría permitir que un atacante local autenticado con privilegios elevados eluda la funcionalidad de arranque seguro e instale software no verificado en un dispositivo afectado. Para explotar esta vulnerabilidad, el atacante debe tener privilegios de superusuario en el dispositivo afectado. Esta vulnerabilidad se debe a una verificación insuficiente de los módulos durante la carga del software. Un atacante podría explotarla manipulando los binarios cargados para eludir algunas de las comprobaciones de integridad que se realizan durante el arranque. Una explotación exitosa podría permitir al atacante controlar la configuración de arranque, lo que le permitiría eludir el requisito de ejecutar imágenes firmadas por Cisco o modificar las propiedades de seguridad del sistema en ejecución. Nota: Esta vulnerabilidad afecta al software Cisco IOS XR, no a la función de arranque seguro. Cisco ha publicado actualizaciones de software que solucionan esta vulnerabilidad. No existen workarounds que la solucionen."}],"metrics":{"cvssMetricV31":[{"source":"psirt@cisco.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":6.7,"baseSeverity":"MEDIUM","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":0.8,"impactScore":5.9}]},"weaknesses":[{"source":"psirt@cisco.com","type":"Secondary","description":[{"lang":"en","value":"CWE-347"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*","versionEndExcluding":"7.9.1","matchCriteriaId":"A8E6CEEB-0908-4884-A51E-000000DE5E92"}]}]}],"references":[{"url":"https://blog.apnic.net/2024/09/02/crafting-endless-as-paths-in-bgp/","source":"psirt@cisco.com","tags":["Technical Description"]},{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-lkm-zNErZjbZ","source":"psirt@cisco.com","tags":["Vendor Advisory"]}]}}]}