Product:
Cisco IOS XR Software
Summary
A vulnerability in the installation process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass image signature verification and load unsigned software on an affected device. This vulnerability is due to incomplete validation of files during the installation of an .iso file. An attacker with root-system privileges could exploit this by modifying the .iso image contents and installing it on the device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6 | CVE-2025-20248 |
Exploitation
To exploit this vulnerability, an attacker must have root-system privileges on the affected device. They can modify the contents of the .iso image and then install and activate it on the device. A successful exploit allows the attacker to load an unsigned file during the image activation process, potentially compromising the device’s integrity.
Affected Products
- Cisco IOS XR Software: Vulnerable due to incomplete validation during .iso file installation.
Mitigation
To mitigate this vulnerability, ensure that only trusted and verified .iso images are used for installation. Regularly update and patch devices to protect against known vulnerabilities. Implement strict access controls to limit who can install software on affected devices.