CVE-2025-20181: Medium severity cisco ios vulnerability

Published May 7, 2025

Updated

A vulnerability in Cisco IOS Software for Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches could allow an authenticated, local attacker with privilege level 15 or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. This vulnerability is due to missing signature verification for specific files that may be loaded during the device boot process. An attacker could exploit this vulnerability by placing a crafted file into a specific location on an affected device. A successful exploit could allow the attacker to execute arbitrary code at boot time. Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.

Affected Software

154 affected components

Cisco IOS Software

Cisco Catalyst 2960X Series Switches

Cisco Catalyst 2960XR Series Switches

Cisco Catalyst 2960CX Series Switches

Cisco Catalyst 3560CX Series Switches

All of the following

Any of the following

Cisco IOS=15.0\(1\)ex

Cisco IOS=15.0\(1\)ey

Cisco IOS=15.0\(1\)ey1

Cisco IOS=15.0\(1\)ey2

Cisco IOS=15.0\(1\)xo

Cisco IOS=15.0\(1\)xo1

Cisco IOS=15.0\(2\)ex

Cisco IOS=15.0\(2\)ex1

Cisco IOS=15.0\(2\)ex2

Cisco IOS=15.0\(2\)ex3

Cisco IOS=15.0\(2\)ex4

Cisco IOS=15.0\(2\)ex5

Cisco IOS=15.0\(2\)ex8

Cisco IOS=15.0\(2\)ex10

Cisco IOS=15.0\(2\)ex11

Cisco IOS=15.0\(2\)ex12

Cisco IOS=15.0\(2\)ex13

Cisco IOS=15.0\(2\)se8

Cisco IOS=15.0\(2\)sqd

Cisco IOS=15.0\(2\)sqd1

Cisco IOS=15.0\(2\)sqd2

Cisco IOS=15.0\(2\)sqd3

Cisco IOS=15.0\(2\)sqd4

Cisco IOS=15.0\(2\)sqd5

Cisco IOS=15.0\(2\)sqd6

Cisco IOS=15.0\(2\)sqd7

Cisco IOS=15.0\(2\)sqd8

Cisco IOS=15.0\(2\)xo

Cisco IOS=15.0\(2a\)ex5

Cisco IOS=15.2\(2\)e

Cisco IOS=15.2\(2\)e1

Cisco IOS=15.2\(2\)e2

Cisco IOS=15.2\(2\)e3

Cisco IOS=15.2\(2\)e4

Cisco IOS=15.2\(2\)e5

Cisco IOS=15.2\(2\)e5a

Cisco IOS=15.2\(2\)e5b

Cisco IOS=15.2\(2\)e6

Cisco IOS=15.2\(2\)e7

Cisco IOS=15.2\(2\)e8

Cisco IOS=15.2\(2\)e9

Cisco IOS=15.2\(2\)e10

Cisco IOS=15.2\(2a\)e1

Cisco IOS=15.2\(2a\)e2

Cisco IOS=15.2\(3\)e

Cisco IOS=15.2\(3\)e1

Cisco IOS=15.2\(3\)e2

Cisco IOS=15.2\(3\)e3

Cisco IOS=15.2\(3\)e4

Cisco IOS=15.2\(3a\)e

Cisco IOS=15.2\(4\)e

Cisco IOS=15.2\(4\)e1

Cisco IOS=15.2\(4\)e2

Cisco IOS=15.2\(4\)e3

Cisco IOS=15.2\(4\)e4

Cisco IOS=15.2\(4\)e5

Cisco IOS=15.2\(4\)e6

Cisco IOS=15.2\(4\)e7

Cisco IOS=15.2\(4\)e8

Cisco IOS=15.2\(4\)e9

Cisco IOS=15.2\(4\)e10

Cisco IOS=15.2\(4\)e10a

Cisco IOS=15.2\(4\)e10d

Cisco IOS=15.2\(4\)ea7

Cisco IOS=15.2\(4\)ea8

Cisco IOS=15.2\(4\)ea9

Cisco IOS=15.2\(4\)ea9a

Cisco IOS=15.2\(5\)e

Cisco IOS=15.2\(5\)e1

Cisco IOS=15.2\(5\)e2

Cisco IOS=15.2\(5b\)e

Cisco IOS=15.2\(6\)e

Cisco IOS=15.2\(6\)e0a

Cisco IOS=15.2\(6\)e0c

Cisco IOS=15.2\(6\)e1

Cisco IOS=15.2\(6\)e2

Cisco IOS=15.2\(6\)e2a

Cisco IOS=15.2\(6\)e2b

Cisco IOS=15.2\(6\)e3

Cisco IOS=15.2\(6\)eb

Cisco IOS=15.2\(7\)e

Cisco IOS=15.2\(7\)e0a

Cisco IOS=15.2\(7\)e0b

Cisco IOS=15.2\(7\)e0s

Cisco IOS=15.2\(7\)e1

Cisco IOS=15.2\(7\)e1a

Cisco IOS=15.2\(7\)e2

Cisco IOS=15.2\(7\)e2a

Cisco IOS=15.2\(7\)e3

Cisco IOS=15.2\(7\)e3k

Cisco IOS=15.2\(7\)e4

Cisco IOS=15.2\(7\)e5

Cisco IOS=15.2\(7\)e6

Cisco IOS=15.2\(7\)e7

Cisco IOS=15.2\(7\)e8

Cisco IOS=15.2\(7\)e9

Cisco IOS=15.2\(7\)e10

Cisco IOS=15.2\(7a\)e0b

Cisco IOS=15.2\(7b\)e0b

Cisco IOS=15.2\(8\)e

Cisco IOS=15.2\(8\)e1

Cisco IOS=15.2\(8\)e2

Cisco IOS=15.2\(8\)e3

Cisco IOS=15.2\(8\)e4

Cisco IOS=15.2\(8\)e5

Cisco IOS=15.2\(8\)e6

Any of the following

Cisco Catalyst 2960cx-8pc-l

Cisco Catalyst 2960cx-8tc-l

Cisco Catalyst 2960x-24pd-l

Cisco Catalyst 2960x-24ps-l

Cisco Catalyst 2960x-24psq-l

Cisco Catalyst 2960x-24psq-l Cool

Cisco Catalyst 2960x-24td-l

Cisco Catalyst 2960x-24ts-l

Cisco Catalyst 2960x-24ts-ll

Cisco Catalyst 2960x-48fpd-l

Cisco Catalyst 2960x-48fps-l

Cisco Catalyst 2960x-48lpd-l

Cisco Catalyst 2960x-48lps-l

Cisco Catalyst 2960x-48td-l

Cisco Catalyst 2960x-48ts-l

Cisco Catalyst 2960x-48ts-ll

Cisco Catalyst 2960xr-24pd-i

Cisco Catalyst 2960xr-24pd-l

Cisco Catalyst 2960xr-24ps-i

Cisco Catalyst 2960xr-24ps-l

Cisco Catalyst 2960xr-24td-i

Cisco Catalyst 2960xr-24td-l

Cisco Catalyst 2960xr-24ts-i

Cisco Catalyst 2960xr-24ts-l

Cisco Catalyst 2960xr-48fpd-i

Cisco Catalyst 2960xr-48fpd-l

Cisco Catalyst 2960xr-48fps-i

Cisco Catalyst 2960xr-48fps-l

Cisco Catalyst 2960xr-48lpd-i

Cisco Catalyst 2960xr-48lpd-l

Cisco Catalyst 2960xr-48lps-i

Cisco Catalyst 2960xr-48lps-l

Cisco Catalyst 2960xr-48td-i

Cisco Catalyst 2960xr-48td-l

Cisco Catalyst 2960xr-48ts-i

Cisco Catalyst 2960xr-48ts-l

Cisco Catalyst 3560cx-12pc-s

Cisco Catalyst 3560cx-12pd-s

Cisco Catalyst 3560cx-12tc-s

Cisco Catalyst 3560cx-8pc-s

Cisco Catalyst 3560cx-8pt-s

Cisco Catalyst 3560cx-8tc-s

Cisco Catalyst 3560cx-8xpd-s

Event History

May 7, 2025

CVE Published

via MITRE·05:35 PM

Data Sourced

via MITRE·05:35 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-20181?

CVE-2025-20181 is considered a high severity vulnerability due to its potential for allowing unauthorized code execution.

How do I fix CVE-2025-20181?

To mitigate CVE-2025-20181, apply the latest firmware updates provided by Cisco for affected switch models.

Who is affected by CVE-2025-20181?

CVE-2025-20181 affects Cisco Catalyst 2960X, 2960XR, 2960CX, and 3560CX Series Switches.

What kind of attacks are possible with CVE-2025-20181?

An attacker can execute persistent code during the boot process, potentially compromising the device.

Is physical access required for CVE-2025-20181 exploitation?

Yes, an unauthenticated attacker needs physical access to the device to exploit CVE-2025-20181.