cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB: Cisco IOS XR Software iPXE Boot Signature Bypass Vulnerability

Published Sep 13, 2023

Updated

A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device.This vulnerability is due to insufficient image verification. An attacker could exploit this vulnerability by

Affected Software

1 affected component

Cisco IOS XR

Event History

Sep 13, 2023

Advisory Published

04:00 PM

Data Sourced

04:00 PM

DescriptionSeverityWeakness

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-20236

Frequently Asked Questions

What is the severity of cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB?

The cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB vulnerability is classified as a high severity issue due to its potential impact on device integrity.

How do I fix cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB?

To fix the cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB vulnerability, upgrade to the latest version of Cisco IOS XR software that contains the necessary patches.

Who is affected by cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB?

Organizations using Cisco IOS XR software, particularly those running versions vulnerable to the iPXE boot function flaw, are affected by cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB.

What type of attack can leverage cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB?

An authenticated, local attacker could exploit cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB to install an unverified software image on an affected device.

What causes the cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB vulnerability?

The cisco-sa-iosxr-ipxe-sigbypass-pymfyqgB vulnerability is caused by insufficient image verification during the iPXE boot process in Cisco IOS XR software.