CVE-2023-20082: Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches Secure Boot Bypass Vulnerability
First published: Thu Mar 23 2023(Updated: )
A vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to errors that occur when retrieving the public release key that is used for image signature verification. An attacker could exploit this vulnerability by modifying specific variables in the Serial Peripheral Interface (SPI) flash memory of an affected device. A successful exploit could allow the attacker to execute persistent code on the underlying operating system. Note: In Cisco IOS XE Software releases 16.11.1 and later, the complexity of an attack using this vulnerability is high. However, an attacker with level-15 privileges could easily downgrade the Cisco IOS XE Software on a device to a release that would lower the attack complexity.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XE | <17.3.7 | |
| Cisco IOS XE | >=17.4<17.6.5 | |
| Cisco IOS XE | =17.7 | |
| Cisco Catalyst 9300 | ||
| Cisco Catalyst 9300-24p-a | ||
| Cisco Catalyst 9300-24p-e | ||
| Cisco Catalyst 9300-24s-a | ||
| Cisco Catalyst 9300-24s-e | ||
| Cisco Catalyst 9300-24t-a | ||
| Cisco Catalyst 9300-24t-e | ||
| Cisco Catalyst 9300-24u-a | ||
| Cisco Catalyst 9300-24u-e | ||
| Cisco Catalyst 9300-24ux-a | ||
| Cisco Catalyst 9300-24ux-e | ||
| Cisco Catalyst 9300-48p-a | ||
| Cisco Catalyst 9300-48p-e | ||
| Cisco Catalyst 9300-48s-a | ||
| Cisco Catalyst 9300-48s-e | ||
| Cisco Catalyst 9300-48t-a | ||
| Cisco Catalyst 9300-48t-e | ||
| Cisco Catalyst 9300-48u-a | ||
| Cisco Catalyst 9300-48u-e | ||
| Cisco Catalyst 9300-48un-a | ||
| Cisco Catalyst 9300-48un-e | ||
| Cisco Catalyst 9300-48uxm-a | ||
| Cisco Catalyst 9300-48uxm-e | ||
| Cisco Catalyst 9300l | ||
| Cisco Catalyst 9300l-24p-4g-a | ||
| Cisco Catalyst 9300l-24p-4g-e | ||
| Cisco Catalyst 9300l-24p-4x-a | ||
| Cisco Catalyst 9300l-24p-4x-e | ||
| Cisco Catalyst 9300l-24t-4g-a | ||
| Cisco Catalyst 9300l-24t-4g-e | ||
| Cisco Catalyst 9300l-24t-4x-a | ||
| Cisco Catalyst 9300l-24t-4x-e | ||
| Cisco Catalyst 9300l-48p-4g-a | ||
| Cisco Catalyst 9300l-48p-4g-e | ||
| Cisco Catalyst 9300l-48p-4x-a | ||
| Cisco Catalyst 9300l-48p-4x-e | ||
| Cisco Catalyst 9300l-48t-4g-a | ||
| Cisco Catalyst 9300l-48t-4g-e | ||
| Cisco Catalyst 9300l-48t-4x-a | ||
| Cisco Catalyst 9300l-48t-4x-e | ||
| Cisco Catalyst 9300l Stack | ||
| Cisco Catalyst 9300lm | ||
| Cisco Catalyst 9300x |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-20082?
CVE-2023-20082 is a vulnerability in Cisco IOS XE Software for Cisco Catalyst 9300 Series Switches that could allow an attacker to execute persistent code at boot time and break the chain of trust.
Who is affected by CVE-2023-20082?
This vulnerability affects users of Cisco Catalyst 9300 Series Switches running Cisco IOS XE Software versions 17.3.7 to 17.6.5 and version 17.7.
What is the severity of CVE-2023-20082?
The severity of CVE-2023-20082 is medium with a CVSS score of 6.8.
How can I fix CVE-2023-20082?
To fix CVE-2023-20082, Cisco recommends upgrading to a fixed software version as mentioned in the Cisco Security Advisory.
Where can I find more information about CVE-2023-20082?
You can find more information about CVE-2023-20082 in the Cisco Security Advisory at the provided reference link.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/last-modified-date
- agent/title
- agent/weakness
- agent/severity
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco ios xe
- version/cisco ios xe/17.4
- version/cisco ios xe/17.7
- canonical/cisco catalyst 9300
- canonical/cisco catalyst 9300-24p-a
- canonical/cisco catalyst 9300-24p-e
- canonical/cisco catalyst 9300-24s-a
- canonical/cisco catalyst 9300-24s-e
- canonical/cisco catalyst 9300-24t-a
- canonical/cisco catalyst 9300-24t-e
- canonical/cisco catalyst 9300-24u-a
- canonical/cisco catalyst 9300-24u-e
- canonical/cisco catalyst 9300-24ux-a
- canonical/cisco catalyst 9300-24ux-e
- canonical/cisco catalyst 9300-48p-a
- canonical/cisco catalyst 9300-48p-e
- canonical/cisco catalyst 9300-48s-a
- canonical/cisco catalyst 9300-48s-e
- canonical/cisco catalyst 9300-48t-a
- canonical/cisco catalyst 9300-48t-e
- canonical/cisco catalyst 9300-48u-a
- canonical/cisco catalyst 9300-48u-e
- canonical/cisco catalyst 9300-48un-a
- canonical/cisco catalyst 9300-48un-e
- canonical/cisco catalyst 9300-48uxm-a
- canonical/cisco catalyst 9300-48uxm-e
- canonical/cisco catalyst 9300l
- canonical/cisco catalyst 9300l-24p-4g-a
- canonical/cisco catalyst 9300l-24p-4g-e
- canonical/cisco catalyst 9300l-24p-4x-a
- canonical/cisco catalyst 9300l-24p-4x-e
- canonical/cisco catalyst 9300l-24t-4g-a
- canonical/cisco catalyst 9300l-24t-4g-e
- canonical/cisco catalyst 9300l-24t-4x-a
- canonical/cisco catalyst 9300l-24t-4x-e
- canonical/cisco catalyst 9300l-48p-4g-a
- canonical/cisco catalyst 9300l-48p-4g-e
- canonical/cisco catalyst 9300l-48p-4x-a
- canonical/cisco catalyst 9300l-48p-4x-e
- canonical/cisco catalyst 9300l-48t-4g-a
- canonical/cisco catalyst 9300l-48t-4g-e
- canonical/cisco catalyst 9300l-48t-4x-a
- canonical/cisco catalyst 9300l-48t-4x-e
- canonical/cisco catalyst 9300l stack
- canonical/cisco catalyst 9300lm
- canonical/cisco catalyst 9300x