Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due path traversal and improper image integrity validation. A successful exploit could allow the attacker to execute persistent code on the underlying operating system. Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. ERP

cve CVE-2025-20313 1 source, 1 claim · Watch

NVD writes:
Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due path traversal and improper image integrity validation. A successful exploit could allow the attacker to execute persistent code on the underlying operating system. Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of thi… the claim

What it is to other things

affectscisco/ios_xe
NVD
made_bycisco
NVD

In words only, so not counted until a person confirms one:

affectscisco/cisco_ios_xe_software
NVD says “Cisco · Cisco IOS XE Software”

What each source says

PropertySourceSaidMeans here
Cvss
cvss
NVD6.7
receipt
Source
NVD
Its words
6.7
Read by
field:cve.metrics.cvssMetricV31[].cvssData.baseScore
Said since
2026-09-29 09:45 UTC
Last answered
2026-10-04 18:16 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "Cisco IOS XE Software",
            "vendor": "Cisco",
            "versions": [
              {
                "status": "affected",
                "version": "17.3.1"
              },
              {
                "status": "affected",
                "version": "17.3.2"
              },
              {
                "status": "affected",
                "version": "17.3.3"
              },
              {
                "status": "affected",
                "version": "17.3.1a"
              },
              {
                "status": "affected",
                "version": "17.3.1w"
              },
              {
                "status": "affected",
                "version": "17.3.2a"
              },
              {
                "status": "affected",
                "version": "17.3.1x"
              },
              {
                "status": "affected",
                "version": "17.3.1z"
              },
              {
                "status": "affected",
                "version": "17.3.4"
              },
              {
                "status": "affected",
                "version": "17.3.5"
              },
              {
                "status": "affected",
                "version": "17.3.4a"
              },
              {
                "status": "affected",
                "version": "17.3.6"
              },
              {
                "status": "affected",
                "version": "17.3.4b"
              },
              {
                "status": "affected",
                "version": "17.3.4c"
              },
              {
                "status": "affected",
                "version": "17.3.5a"
              },
              {
                "status": "affected",
                "version": "17.3.5b"
              },
              {
                "status": "affected",
                "version": "17.3.7"
              },
              {
                "status": "affected",
                "version": "17.3.8"
              },
              {
                "status": "affected",
                "version": "17.3.8a"
              },
              {
                "status": "affected",
                "version": "17.4.1"
              },
              {
                "status": "affected",
                "version": "17.4.2"
              },
              {
                "status": "affected",
                "version": "17.4.1a"
              },
              {
                "status": "affected",
                "version": "17.4.1b"
              },
              {
                "status": "affected",
                "version": "17.4.2a"
              },
              {
                "status": "affected",
                "version": "17.5.1"
              },
              {
                "status": "affected",
                "version": "17.5.1a"
              },
              {
                "status": "affected",
                "version": "17.6.1"
              },
              {
                "status": "affected",
                "version": "17.6.2"
              },
              {
                "status": "affected",
                "version": "17.6.1w"
              },
              {
                "status": "affected",
                "version": "17.6.1a"
              },
              {
                "status": "affected",
                "version": "17.6.1x"
              },
              {
                "status": "affected",
                "version": "17.6.3"
              },
              {
                "status": "affected",
                "version": "17.6.1y"
              },
              {
                "status": "affected",
                "version": "17.6.1z"
              },
              {
                "status": "affected",
                "version": "17.6.3a"
              },
              {
                "status": "affected",
                "version": "17.6.4"
              },
              {
                "status": "affected",
                "version": "17.6.1z1"
              },
              {
                "status": "affected",
                "version": "17.6.5"
              },
              {
                "status": "affected",
                "version": "17.6.6"
              },
              {
                "status": "affected",
                "version": "17.6.6a"
              },
              {
                "status": "affected",
                "version": "17.6.5a"
              },
              {
                "status": "affected",
                "version": "17.6.7"
              },
              {
                "status": "affected",
                "version": "17.6.8"
              },
              {
                "status": "affected",
                "version": "17.6.8a"
              },
              {
                "status": "affected",
                "version": "17.7.1"
              },
              {
                "status": "affected",
                "version": "17.7.1a"
              },
              {
                "status": "affected",
                "version": "17.7.1b"
              },
              {
                "status": "affected",
                "version": "17.7.2"
              },
              {
                "status": "affected",
                "version": "17.10.1"
              },
              {
                "status": "affected",
                "version": "17.10.1a"
              },
              {
                "status": "affected",
                "version": "17.10.1b"
              },
              {
                "status": "affected",
                "version": "17.8.1"
              },
              {
                "status": "affected",
                "version": "17.8.1a"
              },
              {
                "status": "affected",
                "version": "17.9.1"
              },
              {
                "status": "affected",
                "version": "17.9.1w"
              },
              {
                "status": "affected",
                "version": "17.9.2"
              },
              {
                "status": "affected",
                "version": "17.9.1a"
              },
              {
                "status": "affected",
                "version": "17.9.1x"
              },
              {
                "status": "affected",
                "version": "17.9.1y"
              },
              {
                "status": "affected",
                "version": "17.9.3"
              },
              {
                "status": "affected",
                "version": "17.9.2a"
              },
              {
                "status": "affected",
                "version": "17.9.1x1"
              },
              {
                "status": "affected",
                "version": "17.9.3a"
              },
              {
                "status": "affected",
                "version": "17.9.4"
              },
              {
                "status": "affected",
                "version": "17.9.1y1"
              },
              {
                "status": "affected",
                "version": "17.9.5"
              },
              {
                "status": "affected",
                "version": "17.9.4a"
              },
              {
                "status": "affected",
                "version": "17.9.5a"
              },
              {
                "status": "affected",
                "version": "17.9.5b"
              },
              {
                "status": "affected",
                "version": "17.9.6"
              },
              {
                "status": "affected",
                "version": "17.9.6a"
              },
              {
                "status": "affected",
                "version": "17.9.7"
              },
              {
                "status": "affected",
                "version": "17.9.5e"
              },
              {
                "status": "affected",
                "version": "17.9.5f"
              },
              {
                "status": "affected",
                "version": "17.9.7a"
              },
              {
                "status": "affected",
                "version": "17.9.7b"
              },
              {
                "status": "affected",
                "version": "17.11.1"
              },
              {
                "status": "affected",
                "version": "17.11.1a"
              },
              {
                "status": "affected",
                "version": "17.12.1"
              },
              {
                "status": "affected",
                "version": "17.12.1w"
              },
              {
                "status": "affected",
                "version": "17.12.1a"
              },
              {
                "status": "affected",
                "version": "17.12.1x"
              },
              {
                "status": "affected",
                "version": "17.12.2"
              },
              {
                "status": "affected",
                "version": "17.12.3"
              },
              {
                "status": "affected",
                "version": "17.12.2a"
              },
              {
                "status": "affected",
                "version": "17.12.1y"
              },
              {
                "status": "affected",
                "version": "17.12.1z"
              },
              {
                "status": "affected",
                "version": "17.12.4"
              },
              {
                "status": "affected",
                "version": "17.12.3a"
              },
              {
                "status": "affected",
                "version": "17.12.1z1"
              },
              {
                "status": "affected",
                "version": "17.12.1z2"
              },
              {
                "status": "affected",
                "version": "17.12.4a"
              },
              {
                "status": "affected",
                "version": "17.12.5"
              },
              {
                "status": "affected",
                "version": "17.12.4b"
              },
              {
                "status": "affected",
                "version": "17.12.1z3"
              },
              {
                "status": "affected",
                "version": "17.12.5a"
              },
              {
                "status": "affected",
                "version": "17.12.1z4"
              },
              {
                "status": "affected",
                "version": "17.12.5b"
              },
              {
                "status": "affected",
                "version": "17.12.5c"
              },
              {
                "status": "affected",
                "version": "17.13.1"
              },
              {
                "status": "affected",
                "version": "17.13.1a"
              },
              {
                "status": "affected",
                "version": "17.14.1"
              },
              {
                "status": "affected",
                "version": "17.14.1a"
              },
              {
                "status": "affected",
                "version": "17.15.1"
              },
              {
                "status": "affected",
                "version": "17.15.1w"
              },
              {
                "status": "affected",
                "version": "17.15.1a"
              },
              {
                "status": "affected",
                "version": "17.15.2"
              },
              {
                "status": "affected",
                "version": "17.15.1b"
              },
              {
                "status": "affected",
                "version": "17.15.1x"
              },
              {
                "status": "affected",
                "version": "17.15.3"
              },
              {
                "status": "affected",
                "version": "17.15.2c"
              },
              {
                "status": "affected",
                "version": "17.15.2a"
              },
              {
                "status": "affected",
                "version": "17.15.1y"
              },
              {
                "status": "affected",
                "version": "17.15.2b"
              },
              {
                "status": "affected",
                "version": "17.15.3a"
              },
              {
                "status": "affected",
                "version": "17.15.3b"
              },
              {
                "status": "affected",
                "version": "17.16.1"
              },
              {
                "status": "affected",
                "version": "17.16.1a"
              },
              {
                "status": "affected",
                "version": "17.17.1"
              }
            ]
          }
        ],
        "source": "psirt@cisco.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "128F95D7-E49F-4B36-8F47-823C0298449E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "E21B3881-37E9-4C00-9336-12C9C28D1B61",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "E54599DB-A85E-4EEA-9985-2CBF90E28A08",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "4046C325-7EDB-4C95-AA98-541BEC8F9E0F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1z:*:*:*:*:*:*:*",
                "matchCriteriaId": "E5B70A3D-CBE1-4218-A7B4-F85741A57BD7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "2B270A04-9961-4E99-806B-441CD674AFBD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1360069D-0358-4746-8C3F-44C2A40988D7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "C5DD2403-113B-4100-8BD4-90E1927E6648",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "DAF73937-BCE2-4BEF-B4B0-83212DA4A6C8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4a:*:*:*:*:*:*:*",
                "matchCriteriaId": "2DDB1E60-C2A9-4570-BE80-F3D478A53738",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9841799A-87E2-46AE-807A-824981EAB35A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4c:*:*:*:*:*:*:*",
                "matchCriteriaId": "0CEF022B-271F-4017-B74B-82748D5EBA01",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "6B2902D8-3A7B-4C47-9BC6-8CA4C580A346",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "8871B890-78F4-4D9D-AEFF-6A393493C51E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9E489AC5-A445-44FF-AA85-F0915577384E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.6:*:*:*:*:*:*:*",
                "matchCriteriaId": "917BA05C-2A18-4C68-B508-85C2B5A94416",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "06337791-7D8D-4EAA-BACC-4E270F377B3E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.8:*:*:*:*:*:*:*",
                "matchCriteriaId": "336A8630-653C-4E28-8DE1-76CDD8573980",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.8a:*:*:*:*:*:*:*",
                "matchCriteriaId": "0A1767AE-7D9F-4BAA-90E1-CF8314CD0B53",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "5A6B707B-4543-41F1-83DF-49A93BF56FB1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "DC8F611B-D347-4A21-90E6-56CF4D8A35A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "D9A92CE4-B4B0-4C14-AE11-8DFE511406F3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "274E3E6F-4280-4EAE-B102-1BE57FE1F1D2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "46B52A51-51DB-4A12-AB1D-8D9605226599",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "938B0720-8CA7-43BA-9708-5CE9EC7A565A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "D4BE7166-DBD3-4CE6-A14A-725FE896B85E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "4DE62C4B-7C06-4907-BADE-416C1618D2D9",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "0C60DF3F-DBD9-4BBF-812E-4BB0C47BDF3C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "26FEE2E2-DD85-4006-8895-0BDA04E8EE4C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "A0CD237B-2843-4D37-87D7-AE6D1A53458A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "1B80614B-6362-45F0-B305-2F137B053DCF",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1z:*:*:*:*:*:*:*",
                "matchCriteriaId": "47B20C7E-1C9C-4EF4-91E4-388643C4B9C0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1z1:*:*:*:*:*:*:*",
                "matchCriteriaId": "EB7966A0-D84D-47F7-AED9-D041BCDA6703",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "04D19D8C-FACF-49B4-BA99-CC3A3FDADAFB",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "0B78942C-BEE1-4D18-9075-8E1D991BF621",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "5B306D35-4A13-4D23-8EC2-D000E8ADCDA5",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "9F21093D-1036-4F6B-B90F-ACE1EF99EA33",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "280D24C6-A2BF-46E8-B512-6A3FA7833922",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1F903F51-ABF4-49B0-A5BA-A6B51F79666F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.6:*:*:*:*:*:*:*",
                "matchCriteriaId": "E3F244E7-8EE9-4E58-83FA-EEDD3C8F792D",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.6a:*:*:*:*:*:*:*",
                "matchCriteriaId": "5238B1D1-740D-4B37-A0CB-1B3343E55D05",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "27E0750C-A622-49D6-A8EF-B59E2F8F1912",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.8:*:*:*:*:*:*:*",
                "matchCriteriaId": "2258D93E-71AA-4964-A5DF-008E3479F2A4",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.8a:*:*:*:*:*:*:*",
                "matchCriteriaId": "608ACC60-143B-4835-B6AC-E6C3111B4078",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "38B87B17-C653-40AC-8AE4-066BB1123C88",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "9012A66E-82C4-4ACF-A4BB-37EC54B87B50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9C945710-7DC3-43D9-9FBE-F2A1B8666C73",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "849C6FF1-F7C0-4021-BCA2-A791C87E4F37",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "7592C7E3-3735-425F-A276-9EE03224CD5E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1103BE75-EB64-4A9A-801E-EDE6A1F861F5",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "5B0C2129-8149-4362-827C-A5494C9D398B",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "7452C7E9-6241-42C5-9A7F-13C0BD38A2B4",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "38C48FC4-5362-4B61-8B8C-7CAFFB81045E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "2BC43383-DF99-4D38-A220-0A202623B36A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1x1:*:*:*:*:*:*:*",
                "matchCriteriaId": "B7E6CD08-EC7E-42C1-B2C2-CA5E154545A0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "DE62DC68-E882-49E7-AAD2-2F73637FFB4A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1y1:*:*:*:*:*:*:*",
                "matchCriteriaId": "57CD29C9-C629-48B0-ABDD-CEC3DEB6FB11",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "D197445E-EC12-429C-BDD4-F63FA5C1B3E3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "BD27DF50-9E81-4EC5-BA73-513F1DFB972C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "51EA3EAA-A379-467E-AF9A-FCFBACAE49C7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4FC63AAF-758F-4A70-9738-96E75A0A1DDA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "E67BE408-8DCF-491F-9EA9-E368565C1B49",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.4a:*:*:*:*:*:*:*",
                "matchCriteriaId": "D9CFE98A-FBA5-4837-BBD9-3C875ECEBF1B",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "36A5F20F-3F38-4FB9-B49D-28569EB1A763",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4D2264D7-5E89-4F50-B948-FAB41D07C8BA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5b:*:*:*:*:*:*:*",
                "matchCriteriaId": "6BB8368D-B9F9-4679-8154-1174E140CA17",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5e:*:*:*:*:*:*:*",
                "matchCriteriaId": "78EEDF40-2CDA-4147-A9F2-A5F4B8FF35EC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5f:*:*:*:*:*:*:*",
                "matchCriteriaId": "40CEA4FC-B946-4D54-A45B-686FC02D5411",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.6:*:*:*:*:*:*:*",
                "matchCriteriaId": "7BDBE176-04ED-48F0-BA9F-45BECFEDBE2A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.6a:*:*:*:*:*:*:*",
                "matchCriteriaId": "94E52AA0-0A77-47DF-9600-7D5B8A6D09B6",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "DB62FB56-A09A-4BE3-AF4C-180903078C69",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.7a:*:*:*:*:*:*:*",
                "matchCriteriaId": "0627B380-B8E7-4BA4-BC1B-ADBCC3A6018B",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.7b:*:*:*:*:*:*:*",
                "matchCriteriaId": "03F75200-396B-43BB-A529-9A3A45B9EBAF",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "42FAEC29-D754-49D6-85F1-F5DDFAF6E80F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "CCE76032-948F-444F-BA5D-72A34D1CD382",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9A965A2A-129C-45C3-BCB1-2860F583D020",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "F313F2EC-F3D6-4639-934C-402DDA3DA806",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4AFB2CA6-8332-4E4D-BDB4-C3B770D3AD6C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "1BF0778B-015D-481B-BAC0-40667F3453D3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1EEBC0EB-0DBB-4530-AFC4-AA0036469656",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "66D0DB87-6BB7-4FCF-BF20-6D4D48D72B79",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "E0A766E7-CF3C-4529-AFA4-D780059A66BC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "46B7F7EA-6512-433F-B1E4-B2F889427464",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z:*:*:*:*:*:*:*",
                "matchCriteriaId": "63527910-7F55-4D40-BFE7-D497C91C334D",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z1:*:*:*:*:*:*:*",
                "matchCriteriaId": "6EACA43F-64DB-496B-A6B1-DB9FAF6606EB",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z2:*:*:*:*:*:*:*",
                "matchCriteriaId": "7E147E53-B047-429F-9E3B-04FB5F777B85",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z3:*:*:*:*:*:*:*",
                "matchCriteriaId": "0656EA0A-3BB6-49AD-A6BB-922C2BC5B075",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z4:*:*:*:*:*:*:*",
                "matchCriteriaId": "9EDBECC5-25B6-461F-BE21-F4EA569DAEA4",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "EE165207-A066-44C1-B78A-6EFD80023204",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4AF792BC-C270-4294-8E4E-71FAC3ACFCF8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "1098FCEA-6A9F-4634-A0EF-EC55ABCCEA3E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "53B97B06-206B-42F0-B68F-5C5136EAD2B1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "6281EB0F-EE0E-4B06-A7A1-29460A98A8CA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4a:*:*:*:*:*:*:*",
                "matchCriteriaId": "07650346-67D7-4805-BF81-BB145304CC87",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9C6C0D21-ABD5-42F1-B04B-745CA6115D07",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "99810E61-9C5F-4B26-8DFD-75C971593386",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "B25CC70F-42ED-42EF-8CC6-50FF1F809F60",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5b:*:*:*:*:*:*:*",
                "matchCriteriaId": "DB60F2D0-B9D2-42A8-85EC-433BCE5BEC24",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5c:*:*:*:*:*:*:*",
                "matchCriteriaId": "FB757B3D-14A1-4997-AA51-9870FD81763C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.13.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "8577AF01-F2C7-48D3-AB0B-78BD63A60029",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.13.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "CD0D2D94-6470-4E4B-A1B1-0124F92AA793",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.14.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "31789E98-7C8D-4C5A-8A3F-FC9AFE9A248C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.14.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "7A62648B-3273-4D75-8533-A5CBE1B1BCE0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "0174C08C-8846-45AE-83ED-E9964348FA28",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "E73D685D-A002-4D82-9B4C-1D6B5C0B0320",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "1ED4E436-D338-4014-967D-9FE449518191",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "D66E9FE8-DD32-4D0A-BB80-E690F5299F45",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "D4F9C74B-113E-4808-B979-7738E3A52B00",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "1C482977-8384-4A57-B251-39BC01E4F7EC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "A18E50D1-BAF5-4C0F-9253-774089BAA2EE",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "8FDCA684-FF44-49EB-93B5-ED6778E437BA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2b:*:*:*:*:*:*:*",
                "matchCriteriaId": "3E0FD5B7-69E7-43CB-A658-E05557AC2D77",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2c:*:*:*:*:*:*:*",
                "matchCriteriaId": "3CBDBD9B-7122-413B-8671-17AEBE56C2F7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "2855BC9A-3F17-48FF-AE97-46ADB30AD0AD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "E12CD6C1-1441-48E1-89BF-0C9C735B94E5",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.3b:*:*:*:*:*:*:*",
                "matchCriteriaId": "0298ACD6-BAC6-4E0E-9962-3882F90700AD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.16.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "88707E5B-2040-40AB-A8D2-39D6B97E40B1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.16.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "F04A22BF-A461-4B5F-BB30-5F5C2FE56134",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.17.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "A9F98075-6210-4332-B76E-ECDFF1D55D33",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\r\n\r These vulnerabilities are due path traversal and improper image integrity validation.  A successful exploit could allow the attacker to execute persistent code on the underlying operating system.\r\n\r Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.\r\n\r For more information about these vulnerabilities, see the Details [\"#details\"] section of this advisory.\r\n\r   \r\n\r  \r\n\r  \r\n\r ERP"
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades en el software Cisco IOS XE podrían permitir a un atacante local autenticado con privilegios de nivel 15 o a un atacante no autenticado con acceso físico al dispositivo ejecutar código persistente en el momento del arranque y romper la cadena de confianza.\n Estas vulnerabilidades se deben a salto de ruta y a una validación incorrecta de la integridad de la imagen. Un exploit exitoso podría permitir al atacante ejecutar código persistente en el sistema operativo subyacente.\n Debido a que esto permite al atacante eludir una característica de seguridad importante del dispositivo, Cisco ha elevado la Calificación de Impacto de Seguridad (SIR) de este aviso de Media a Alta.\n Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles [“#details”] de este aviso.\n\nERP"
      }
    ],
    "id": "CVE-2025-20313",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 0.8,
          "impactScore": 5.9,
          "source": "psirt@cisco.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-20313",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-09-25T03:56:01.811658Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-09-24T18:15:35.530",
    "references": [
      {
        "source": "psirt@cisco.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secboot-UqFD8AvC"
      }
    ],
    "sourceIdentifier": "psirt@cisco.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-35"
          }
        ],
        "source": "psirt@cisco.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Product
product
NVDCisco IOS XE Software
receipt
Source
NVD
Its words
Cisco IOS XE Software
Read by
field:cve.affected[].affectedData[].product
Said since
2026-09-29 17:49 UTC
Last answered
2026-10-04 18:16 UTC
Original
open at the source
2026-09-29 17:49 UTCCisco IOS XE Software
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "Cisco IOS XE Software",
            "vendor": "Cisco",
            "versions": [
              {
                "status": "affected",
                "version": "17.3.1"
              },
              {
                "status": "affected",
                "version": "17.3.2"
              },
              {
                "status": "affected",
                "version": "17.3.3"
              },
              {
                "status": "affected",
                "version": "17.3.1a"
              },
              {
                "status": "affected",
                "version": "17.3.1w"
              },
              {
                "status": "affected",
                "version": "17.3.2a"
              },
              {
                "status": "affected",
                "version": "17.3.1x"
              },
              {
                "status": "affected",
                "version": "17.3.1z"
              },
              {
                "status": "affected",
                "version": "17.3.4"
              },
              {
                "status": "affected",
                "version": "17.3.5"
              },
              {
                "status": "affected",
                "version": "17.3.4a"
              },
              {
                "status": "affected",
                "version": "17.3.6"
              },
              {
                "status": "affected",
                "version": "17.3.4b"
              },
              {
                "status": "affected",
                "version": "17.3.4c"
              },
              {
                "status": "affected",
                "version": "17.3.5a"
              },
              {
                "status": "affected",
                "version": "17.3.5b"
              },
              {
                "status": "affected",
                "version": "17.3.7"
              },
              {
                "status": "affected",
                "version": "17.3.8"
              },
              {
                "status": "affected",
                "version": "17.3.8a"
              },
              {
                "status": "affected",
                "version": "17.4.1"
              },
              {
                "status": "affected",
                "version": "17.4.2"
              },
              {
                "status": "affected",
                "version": "17.4.1a"
              },
              {
                "status": "affected",
                "version": "17.4.1b"
              },
              {
                "status": "affected",
                "version": "17.4.2a"
              },
              {
                "status": "affected",
                "version": "17.5.1"
              },
              {
                "status": "affected",
                "version": "17.5.1a"
              },
              {
                "status": "affected",
                "version": "17.6.1"
              },
              {
                "status": "affected",
                "version": "17.6.2"
              },
              {
                "status": "affected",
                "version": "17.6.1w"
              },
              {
                "status": "affected",
                "version": "17.6.1a"
              },
              {
                "status": "affected",
                "version": "17.6.1x"
              },
              {
                "status": "affected",
                "version": "17.6.3"
              },
              {
                "status": "affected",
                "version": "17.6.1y"
              },
              {
                "status": "affected",
                "version": "17.6.1z"
              },
              {
                "status": "affected",
                "version": "17.6.3a"
              },
              {
                "status": "affected",
                "version": "17.6.4"
              },
              {
                "status": "affected",
                "version": "17.6.1z1"
              },
              {
                "status": "affected",
                "version": "17.6.5"
              },
              {
                "status": "affected",
                "version": "17.6.6"
              },
              {
                "status": "affected",
                "version": "17.6.6a"
              },
              {
                "status": "affected",
                "version": "17.6.5a"
              },
              {
                "status": "affected",
                "version": "17.6.7"
              },
              {
                "status": "affected",
                "version": "17.6.8"
              },
              {
                "status": "affected",
                "version": "17.6.8a"
              },
              {
                "status": "affected",
                "version": "17.7.1"
              },
              {
                "status": "affected",
                "version": "17.7.1a"
              },
              {
                "status": "affected",
                "version": "17.7.1b"
              },
              {
                "status": "affected",
                "version": "17.7.2"
              },
              {
                "status": "affected",
                "version": "17.10.1"
              },
              {
                "status": "affected",
                "version": "17.10.1a"
              },
              {
                "status": "affected",
                "version": "17.10.1b"
              },
              {
                "status": "affected",
                "version": "17.8.1"
              },
              {
                "status": "affected",
                "version": "17.8.1a"
              },
              {
                "status": "affected",
                "version": "17.9.1"
              },
              {
                "status": "affected",
                "version": "17.9.1w"
              },
              {
                "status": "affected",
                "version": "17.9.2"
              },
              {
                "status": "affected",
                "version": "17.9.1a"
              },
              {
                "status": "affected",
                "version": "17.9.1x"
              },
              {
                "status": "affected",
                "version": "17.9.1y"
              },
              {
                "status": "affected",
                "version": "17.9.3"
              },
              {
                "status": "affected",
                "version": "17.9.2a"
              },
              {
                "status": "affected",
                "version": "17.9.1x1"
              },
              {
                "status": "affected",
                "version": "17.9.3a"
              },
              {
                "status": "affected",
                "version": "17.9.4"
              },
              {
                "status": "affected",
                "version": "17.9.1y1"
              },
              {
                "status": "affected",
                "version": "17.9.5"
              },
              {
                "status": "affected",
                "version": "17.9.4a"
              },
              {
                "status": "affected",
                "version": "17.9.5a"
              },
              {
                "status": "affected",
                "version": "17.9.5b"
              },
              {
                "status": "affected",
                "version": "17.9.6"
              },
              {
                "status": "affected",
                "version": "17.9.6a"
              },
              {
                "status": "affected",
                "version": "17.9.7"
              },
              {
                "status": "affected",
                "version": "17.9.5e"
              },
              {
                "status": "affected",
                "version": "17.9.5f"
              },
              {
                "status": "affected",
                "version": "17.9.7a"
              },
              {
                "status": "affected",
                "version": "17.9.7b"
              },
              {
                "status": "affected",
                "version": "17.11.1"
              },
              {
                "status": "affected",
                "version": "17.11.1a"
              },
              {
                "status": "affected",
                "version": "17.12.1"
              },
              {
                "status": "affected",
                "version": "17.12.1w"
              },
              {
                "status": "affected",
                "version": "17.12.1a"
              },
              {
                "status": "affected",
                "version": "17.12.1x"
              },
              {
                "status": "affected",
                "version": "17.12.2"
              },
              {
                "status": "affected",
                "version": "17.12.3"
              },
              {
                "status": "affected",
                "version": "17.12.2a"
              },
              {
                "status": "affected",
                "version": "17.12.1y"
              },
              {
                "status": "affected",
                "version": "17.12.1z"
              },
              {
                "status": "affected",
                "version": "17.12.4"
              },
              {
                "status": "affected",
                "version": "17.12.3a"
              },
              {
                "status": "affected",
                "version": "17.12.1z1"
              },
              {
                "status": "affected",
                "version": "17.12.1z2"
              },
              {
                "status": "affected",
                "version": "17.12.4a"
              },
              {
                "status": "affected",
                "version": "17.12.5"
              },
              {
                "status": "affected",
                "version": "17.12.4b"
              },
              {
                "status": "affected",
                "version": "17.12.1z3"
              },
              {
                "status": "affected",
                "version": "17.12.5a"
              },
              {
                "status": "affected",
                "version": "17.12.1z4"
              },
              {
                "status": "affected",
                "version": "17.12.5b"
              },
              {
                "status": "affected",
                "version": "17.12.5c"
              },
              {
                "status": "affected",
                "version": "17.13.1"
              },
              {
                "status": "affected",
                "version": "17.13.1a"
              },
              {
                "status": "affected",
                "version": "17.14.1"
              },
              {
                "status": "affected",
                "version": "17.14.1a"
              },
              {
                "status": "affected",
                "version": "17.15.1"
              },
              {
                "status": "affected",
                "version": "17.15.1w"
              },
              {
                "status": "affected",
                "version": "17.15.1a"
              },
              {
                "status": "affected",
                "version": "17.15.2"
              },
              {
                "status": "affected",
                "version": "17.15.1b"
              },
              {
                "status": "affected",
                "version": "17.15.1x"
              },
              {
                "status": "affected",
                "version": "17.15.3"
              },
              {
                "status": "affected",
                "version": "17.15.2c"
              },
              {
                "status": "affected",
                "version": "17.15.2a"
              },
              {
                "status": "affected",
                "version": "17.15.1y"
              },
              {
                "status": "affected",
                "version": "17.15.2b"
              },
              {
                "status": "affected",
                "version": "17.15.3a"
              },
              {
                "status": "affected",
                "version": "17.15.3b"
              },
              {
                "status": "affected",
                "version": "17.16.1"
              },
              {
                "status": "affected",
                "version": "17.16.1a"
              },
              {
                "status": "affected",
                "version": "17.17.1"
              }
            ]
          }
        ],
        "source": "psirt@cisco.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "128F95D7-E49F-4B36-8F47-823C0298449E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "E21B3881-37E9-4C00-9336-12C9C28D1B61",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "E54599DB-A85E-4EEA-9985-2CBF90E28A08",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "4046C325-7EDB-4C95-AA98-541BEC8F9E0F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1z:*:*:*:*:*:*:*",
                "matchCriteriaId": "E5B70A3D-CBE1-4218-A7B4-F85741A57BD7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "2B270A04-9961-4E99-806B-441CD674AFBD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1360069D-0358-4746-8C3F-44C2A40988D7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "C5DD2403-113B-4100-8BD4-90E1927E6648",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "DAF73937-BCE2-4BEF-B4B0-83212DA4A6C8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4a:*:*:*:*:*:*:*",
                "matchCriteriaId": "2DDB1E60-C2A9-4570-BE80-F3D478A53738",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9841799A-87E2-46AE-807A-824981EAB35A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4c:*:*:*:*:*:*:*",
                "matchCriteriaId": "0CEF022B-271F-4017-B74B-82748D5EBA01",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "6B2902D8-3A7B-4C47-9BC6-8CA4C580A346",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "8871B890-78F4-4D9D-AEFF-6A393493C51E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9E489AC5-A445-44FF-AA85-F0915577384E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.6:*:*:*:*:*:*:*",
                "matchCriteriaId": "917BA05C-2A18-4C68-B508-85C2B5A94416",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "06337791-7D8D-4EAA-BACC-4E270F377B3E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.8:*:*:*:*:*:*:*",
                "matchCriteriaId": "336A8630-653C-4E28-8DE1-76CDD8573980",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.8a:*:*:*:*:*:*:*",
                "matchCriteriaId": "0A1767AE-7D9F-4BAA-90E1-CF8314CD0B53",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "5A6B707B-4543-41F1-83DF-49A93BF56FB1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "DC8F611B-D347-4A21-90E6-56CF4D8A35A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "D9A92CE4-B4B0-4C14-AE11-8DFE511406F3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "274E3E6F-4280-4EAE-B102-1BE57FE1F1D2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "46B52A51-51DB-4A12-AB1D-8D9605226599",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "938B0720-8CA7-43BA-9708-5CE9EC7A565A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "D4BE7166-DBD3-4CE6-A14A-725FE896B85E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "4DE62C4B-7C06-4907-BADE-416C1618D2D9",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "0C60DF3F-DBD9-4BBF-812E-4BB0C47BDF3C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "26FEE2E2-DD85-4006-8895-0BDA04E8EE4C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "A0CD237B-2843-4D37-87D7-AE6D1A53458A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "1B80614B-6362-45F0-B305-2F137B053DCF",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1z:*:*:*:*:*:*:*",
                "matchCriteriaId": "47B20C7E-1C9C-4EF4-91E4-388643C4B9C0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1z1:*:*:*:*:*:*:*",
                "matchCriteriaId": "EB7966A0-D84D-47F7-AED9-D041BCDA6703",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "04D19D8C-FACF-49B4-BA99-CC3A3FDADAFB",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "0B78942C-BEE1-4D18-9075-8E1D991BF621",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "5B306D35-4A13-4D23-8EC2-D000E8ADCDA5",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "9F21093D-1036-4F6B-B90F-ACE1EF99EA33",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "280D24C6-A2BF-46E8-B512-6A3FA7833922",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1F903F51-ABF4-49B0-A5BA-A6B51F79666F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.6:*:*:*:*:*:*:*",
                "matchCriteriaId": "E3F244E7-8EE9-4E58-83FA-EEDD3C8F792D",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.6a:*:*:*:*:*:*:*",
                "matchCriteriaId": "5238B1D1-740D-4B37-A0CB-1B3343E55D05",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "27E0750C-A622-49D6-A8EF-B59E2F8F1912",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.8:*:*:*:*:*:*:*",
                "matchCriteriaId": "2258D93E-71AA-4964-A5DF-008E3479F2A4",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.8a:*:*:*:*:*:*:*",
                "matchCriteriaId": "608ACC60-143B-4835-B6AC-E6C3111B4078",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "38B87B17-C653-40AC-8AE4-066BB1123C88",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "9012A66E-82C4-4ACF-A4BB-37EC54B87B50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9C945710-7DC3-43D9-9FBE-F2A1B8666C73",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "849C6FF1-F7C0-4021-BCA2-A791C87E4F37",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "7592C7E3-3735-425F-A276-9EE03224CD5E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1103BE75-EB64-4A9A-801E-EDE6A1F861F5",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "5B0C2129-8149-4362-827C-A5494C9D398B",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "7452C7E9-6241-42C5-9A7F-13C0BD38A2B4",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "38C48FC4-5362-4B61-8B8C-7CAFFB81045E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "2BC43383-DF99-4D38-A220-0A202623B36A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1x1:*:*:*:*:*:*:*",
                "matchCriteriaId": "B7E6CD08-EC7E-42C1-B2C2-CA5E154545A0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "DE62DC68-E882-49E7-AAD2-2F73637FFB4A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1y1:*:*:*:*:*:*:*",
                "matchCriteriaId": "57CD29C9-C629-48B0-ABDD-CEC3DEB6FB11",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "D197445E-EC12-429C-BDD4-F63FA5C1B3E3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "BD27DF50-9E81-4EC5-BA73-513F1DFB972C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "51EA3EAA-A379-467E-AF9A-FCFBACAE49C7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4FC63AAF-758F-4A70-9738-96E75A0A1DDA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "E67BE408-8DCF-491F-9EA9-E368565C1B49",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.4a:*:*:*:*:*:*:*",
                "matchCriteriaId": "D9CFE98A-FBA5-4837-BBD9-3C875ECEBF1B",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "36A5F20F-3F38-4FB9-B49D-28569EB1A763",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4D2264D7-5E89-4F50-B948-FAB41D07C8BA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5b:*:*:*:*:*:*:*",
                "matchCriteriaId": "6BB8368D-B9F9-4679-8154-1174E140CA17",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5e:*:*:*:*:*:*:*",
                "matchCriteriaId": "78EEDF40-2CDA-4147-A9F2-A5F4B8FF35EC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5f:*:*:*:*:*:*:*",
                "matchCriteriaId": "40CEA4FC-B946-4D54-A45B-686FC02D5411",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.6:*:*:*:*:*:*:*",
                "matchCriteriaId": "7BDBE176-04ED-48F0-BA9F-45BECFEDBE2A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.6a:*:*:*:*:*:*:*",
                "matchCriteriaId": "94E52AA0-0A77-47DF-9600-7D5B8A6D09B6",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "DB62FB56-A09A-4BE3-AF4C-180903078C69",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.7a:*:*:*:*:*:*:*",
                "matchCriteriaId": "0627B380-B8E7-4BA4-BC1B-ADBCC3A6018B",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.7b:*:*:*:*:*:*:*",
                "matchCriteriaId": "03F75200-396B-43BB-A529-9A3A45B9EBAF",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "42FAEC29-D754-49D6-85F1-F5DDFAF6E80F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "CCE76032-948F-444F-BA5D-72A34D1CD382",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9A965A2A-129C-45C3-BCB1-2860F583D020",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "F313F2EC-F3D6-4639-934C-402DDA3DA806",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4AFB2CA6-8332-4E4D-BDB4-C3B770D3AD6C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "1BF0778B-015D-481B-BAC0-40667F3453D3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1EEBC0EB-0DBB-4530-AFC4-AA0036469656",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "66D0DB87-6BB7-4FCF-BF20-6D4D48D72B79",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "E0A766E7-CF3C-4529-AFA4-D780059A66BC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "46B7F7EA-6512-433F-B1E4-B2F889427464",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z:*:*:*:*:*:*:*",
                "matchCriteriaId": "63527910-7F55-4D40-BFE7-D497C91C334D",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z1:*:*:*:*:*:*:*",
                "matchCriteriaId": "6EACA43F-64DB-496B-A6B1-DB9FAF6606EB",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z2:*:*:*:*:*:*:*",
                "matchCriteriaId": "7E147E53-B047-429F-9E3B-04FB5F777B85",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z3:*:*:*:*:*:*:*",
                "matchCriteriaId": "0656EA0A-3BB6-49AD-A6BB-922C2BC5B075",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z4:*:*:*:*:*:*:*",
                "matchCriteriaId": "9EDBECC5-25B6-461F-BE21-F4EA569DAEA4",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "EE165207-A066-44C1-B78A-6EFD80023204",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4AF792BC-C270-4294-8E4E-71FAC3ACFCF8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "1098FCEA-6A9F-4634-A0EF-EC55ABCCEA3E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "53B97B06-206B-42F0-B68F-5C5136EAD2B1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "6281EB0F-EE0E-4B06-A7A1-29460A98A8CA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4a:*:*:*:*:*:*:*",
                "matchCriteriaId": "07650346-67D7-4805-BF81-BB145304CC87",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9C6C0D21-ABD5-42F1-B04B-745CA6115D07",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "99810E61-9C5F-4B26-8DFD-75C971593386",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "B25CC70F-42ED-42EF-8CC6-50FF1F809F60",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5b:*:*:*:*:*:*:*",
                "matchCriteriaId": "DB60F2D0-B9D2-42A8-85EC-433BCE5BEC24",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5c:*:*:*:*:*:*:*",
                "matchCriteriaId": "FB757B3D-14A1-4997-AA51-9870FD81763C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.13.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "8577AF01-F2C7-48D3-AB0B-78BD63A60029",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.13.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "CD0D2D94-6470-4E4B-A1B1-0124F92AA793",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.14.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "31789E98-7C8D-4C5A-8A3F-FC9AFE9A248C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.14.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "7A62648B-3273-4D75-8533-A5CBE1B1BCE0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "0174C08C-8846-45AE-83ED-E9964348FA28",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "E73D685D-A002-4D82-9B4C-1D6B5C0B0320",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "1ED4E436-D338-4014-967D-9FE449518191",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "D66E9FE8-DD32-4D0A-BB80-E690F5299F45",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "D4F9C74B-113E-4808-B979-7738E3A52B00",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "1C482977-8384-4A57-B251-39BC01E4F7EC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "A18E50D1-BAF5-4C0F-9253-774089BAA2EE",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "8FDCA684-FF44-49EB-93B5-ED6778E437BA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2b:*:*:*:*:*:*:*",
                "matchCriteriaId": "3E0FD5B7-69E7-43CB-A658-E05557AC2D77",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2c:*:*:*:*:*:*:*",
                "matchCriteriaId": "3CBDBD9B-7122-413B-8671-17AEBE56C2F7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "2855BC9A-3F17-48FF-AE97-46ADB30AD0AD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "E12CD6C1-1441-48E1-89BF-0C9C735B94E5",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.3b:*:*:*:*:*:*:*",
                "matchCriteriaId": "0298ACD6-BAC6-4E0E-9962-3882F90700AD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.16.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "88707E5B-2040-40AB-A8D2-39D6B97E40B1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.16.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "F04A22BF-A461-4B5F-BB30-5F5C2FE56134",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.17.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "A9F98075-6210-4332-B76E-ECDFF1D55D33",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\r\n\r These vulnerabilities are due path traversal and improper image integrity validation.  A successful exploit could allow the attacker to execute persistent code on the underlying operating system.\r\n\r Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.\r\n\r For more information about these vulnerabilities, see the Details [\"#details\"] section of this advisory.\r\n\r   \r\n\r  \r\n\r  \r\n\r ERP"
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades en el software Cisco IOS XE podrían permitir a un atacante local autenticado con privilegios de nivel 15 o a un atacante no autenticado con acceso físico al dispositivo ejecutar código persistente en el momento del arranque y romper la cadena de confianza.\n Estas vulnerabilidades se deben a salto de ruta y a una validación incorrecta de la integridad de la imagen. Un exploit exitoso podría permitir al atacante ejecutar código persistente en el sistema operativo subyacente.\n Debido a que esto permite al atacante eludir una característica de seguridad importante del dispositivo, Cisco ha elevado la Calificación de Impacto de Seguridad (SIR) de este aviso de Media a Alta.\n Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles [“#details”] de este aviso.\n\nERP"
      }
    ],
    "id": "CVE-2025-20313",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 0.8,
          "impactScore": 5.9,
          "source": "psirt@cisco.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-20313",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-09-25T03:56:01.811658Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-09-24T18:15:35.530",
    "references": [
      {
        "source": "psirt@cisco.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secboot-UqFD8AvC"
      }
    ],
    "sourceIdentifier": "psirt@cisco.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-35"
          }
        ],
        "source": "psirt@cisco.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Status
status
NVDAnalyzed
receipt
Source
NVD
Its words
Analyzed
Read by
field:cve.vulnStatus
Said since
2026-09-29 09:45 UTC
Last answered
2026-10-04 18:16 UTC
Original
open at the source
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "Cisco IOS XE Software",
            "vendor": "Cisco",
            "versions": [
              {
                "status": "affected",
                "version": "17.3.1"
              },
              {
                "status": "affected",
                "version": "17.3.2"
              },
              {
                "status": "affected",
                "version": "17.3.3"
              },
              {
                "status": "affected",
                "version": "17.3.1a"
              },
              {
                "status": "affected",
                "version": "17.3.1w"
              },
              {
                "status": "affected",
                "version": "17.3.2a"
              },
              {
                "status": "affected",
                "version": "17.3.1x"
              },
              {
                "status": "affected",
                "version": "17.3.1z"
              },
              {
                "status": "affected",
                "version": "17.3.4"
              },
              {
                "status": "affected",
                "version": "17.3.5"
              },
              {
                "status": "affected",
                "version": "17.3.4a"
              },
              {
                "status": "affected",
                "version": "17.3.6"
              },
              {
                "status": "affected",
                "version": "17.3.4b"
              },
              {
                "status": "affected",
                "version": "17.3.4c"
              },
              {
                "status": "affected",
                "version": "17.3.5a"
              },
              {
                "status": "affected",
                "version": "17.3.5b"
              },
              {
                "status": "affected",
                "version": "17.3.7"
              },
              {
                "status": "affected",
                "version": "17.3.8"
              },
              {
                "status": "affected",
                "version": "17.3.8a"
              },
              {
                "status": "affected",
                "version": "17.4.1"
              },
              {
                "status": "affected",
                "version": "17.4.2"
              },
              {
                "status": "affected",
                "version": "17.4.1a"
              },
              {
                "status": "affected",
                "version": "17.4.1b"
              },
              {
                "status": "affected",
                "version": "17.4.2a"
              },
              {
                "status": "affected",
                "version": "17.5.1"
              },
              {
                "status": "affected",
                "version": "17.5.1a"
              },
              {
                "status": "affected",
                "version": "17.6.1"
              },
              {
                "status": "affected",
                "version": "17.6.2"
              },
              {
                "status": "affected",
                "version": "17.6.1w"
              },
              {
                "status": "affected",
                "version": "17.6.1a"
              },
              {
                "status": "affected",
                "version": "17.6.1x"
              },
              {
                "status": "affected",
                "version": "17.6.3"
              },
              {
                "status": "affected",
                "version": "17.6.1y"
              },
              {
                "status": "affected",
                "version": "17.6.1z"
              },
              {
                "status": "affected",
                "version": "17.6.3a"
              },
              {
                "status": "affected",
                "version": "17.6.4"
              },
              {
                "status": "affected",
                "version": "17.6.1z1"
              },
              {
                "status": "affected",
                "version": "17.6.5"
              },
              {
                "status": "affected",
                "version": "17.6.6"
              },
              {
                "status": "affected",
                "version": "17.6.6a"
              },
              {
                "status": "affected",
                "version": "17.6.5a"
              },
              {
                "status": "affected",
                "version": "17.6.7"
              },
              {
                "status": "affected",
                "version": "17.6.8"
              },
              {
                "status": "affected",
                "version": "17.6.8a"
              },
              {
                "status": "affected",
                "version": "17.7.1"
              },
              {
                "status": "affected",
                "version": "17.7.1a"
              },
              {
                "status": "affected",
                "version": "17.7.1b"
              },
              {
                "status": "affected",
                "version": "17.7.2"
              },
              {
                "status": "affected",
                "version": "17.10.1"
              },
              {
                "status": "affected",
                "version": "17.10.1a"
              },
              {
                "status": "affected",
                "version": "17.10.1b"
              },
              {
                "status": "affected",
                "version": "17.8.1"
              },
              {
                "status": "affected",
                "version": "17.8.1a"
              },
              {
                "status": "affected",
                "version": "17.9.1"
              },
              {
                "status": "affected",
                "version": "17.9.1w"
              },
              {
                "status": "affected",
                "version": "17.9.2"
              },
              {
                "status": "affected",
                "version": "17.9.1a"
              },
              {
                "status": "affected",
                "version": "17.9.1x"
              },
              {
                "status": "affected",
                "version": "17.9.1y"
              },
              {
                "status": "affected",
                "version": "17.9.3"
              },
              {
                "status": "affected",
                "version": "17.9.2a"
              },
              {
                "status": "affected",
                "version": "17.9.1x1"
              },
              {
                "status": "affected",
                "version": "17.9.3a"
              },
              {
                "status": "affected",
                "version": "17.9.4"
              },
              {
                "status": "affected",
                "version": "17.9.1y1"
              },
              {
                "status": "affected",
                "version": "17.9.5"
              },
              {
                "status": "affected",
                "version": "17.9.4a"
              },
              {
                "status": "affected",
                "version": "17.9.5a"
              },
              {
                "status": "affected",
                "version": "17.9.5b"
              },
              {
                "status": "affected",
                "version": "17.9.6"
              },
              {
                "status": "affected",
                "version": "17.9.6a"
              },
              {
                "status": "affected",
                "version": "17.9.7"
              },
              {
                "status": "affected",
                "version": "17.9.5e"
              },
              {
                "status": "affected",
                "version": "17.9.5f"
              },
              {
                "status": "affected",
                "version": "17.9.7a"
              },
              {
                "status": "affected",
                "version": "17.9.7b"
              },
              {
                "status": "affected",
                "version": "17.11.1"
              },
              {
                "status": "affected",
                "version": "17.11.1a"
              },
              {
                "status": "affected",
                "version": "17.12.1"
              },
              {
                "status": "affected",
                "version": "17.12.1w"
              },
              {
                "status": "affected",
                "version": "17.12.1a"
              },
              {
                "status": "affected",
                "version": "17.12.1x"
              },
              {
                "status": "affected",
                "version": "17.12.2"
              },
              {
                "status": "affected",
                "version": "17.12.3"
              },
              {
                "status": "affected",
                "version": "17.12.2a"
              },
              {
                "status": "affected",
                "version": "17.12.1y"
              },
              {
                "status": "affected",
                "version": "17.12.1z"
              },
              {
                "status": "affected",
                "version": "17.12.4"
              },
              {
                "status": "affected",
                "version": "17.12.3a"
              },
              {
                "status": "affected",
                "version": "17.12.1z1"
              },
              {
                "status": "affected",
                "version": "17.12.1z2"
              },
              {
                "status": "affected",
                "version": "17.12.4a"
              },
              {
                "status": "affected",
                "version": "17.12.5"
              },
              {
                "status": "affected",
                "version": "17.12.4b"
              },
              {
                "status": "affected",
                "version": "17.12.1z3"
              },
              {
                "status": "affected",
                "version": "17.12.5a"
              },
              {
                "status": "affected",
                "version": "17.12.1z4"
              },
              {
                "status": "affected",
                "version": "17.12.5b"
              },
              {
                "status": "affected",
                "version": "17.12.5c"
              },
              {
                "status": "affected",
                "version": "17.13.1"
              },
              {
                "status": "affected",
                "version": "17.13.1a"
              },
              {
                "status": "affected",
                "version": "17.14.1"
              },
              {
                "status": "affected",
                "version": "17.14.1a"
              },
              {
                "status": "affected",
                "version": "17.15.1"
              },
              {
                "status": "affected",
                "version": "17.15.1w"
              },
              {
                "status": "affected",
                "version": "17.15.1a"
              },
              {
                "status": "affected",
                "version": "17.15.2"
              },
              {
                "status": "affected",
                "version": "17.15.1b"
              },
              {
                "status": "affected",
                "version": "17.15.1x"
              },
              {
                "status": "affected",
                "version": "17.15.3"
              },
              {
                "status": "affected",
                "version": "17.15.2c"
              },
              {
                "status": "affected",
                "version": "17.15.2a"
              },
              {
                "status": "affected",
                "version": "17.15.1y"
              },
              {
                "status": "affected",
                "version": "17.15.2b"
              },
              {
                "status": "affected",
                "version": "17.15.3a"
              },
              {
                "status": "affected",
                "version": "17.15.3b"
              },
              {
                "status": "affected",
                "version": "17.16.1"
              },
              {
                "status": "affected",
                "version": "17.16.1a"
              },
              {
                "status": "affected",
                "version": "17.17.1"
              }
            ]
          }
        ],
        "source": "psirt@cisco.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "128F95D7-E49F-4B36-8F47-823C0298449E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "E21B3881-37E9-4C00-9336-12C9C28D1B61",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "E54599DB-A85E-4EEA-9985-2CBF90E28A08",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "4046C325-7EDB-4C95-AA98-541BEC8F9E0F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1z:*:*:*:*:*:*:*",
                "matchCriteriaId": "E5B70A3D-CBE1-4218-A7B4-F85741A57BD7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "2B270A04-9961-4E99-806B-441CD674AFBD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1360069D-0358-4746-8C3F-44C2A40988D7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "C5DD2403-113B-4100-8BD4-90E1927E6648",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "DAF73937-BCE2-4BEF-B4B0-83212DA4A6C8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4a:*:*:*:*:*:*:*",
                "matchCriteriaId": "2DDB1E60-C2A9-4570-BE80-F3D478A53738",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9841799A-87E2-46AE-807A-824981EAB35A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4c:*:*:*:*:*:*:*",
                "matchCriteriaId": "0CEF022B-271F-4017-B74B-82748D5EBA01",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "6B2902D8-3A7B-4C47-9BC6-8CA4C580A346",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "8871B890-78F4-4D9D-AEFF-6A393493C51E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9E489AC5-A445-44FF-AA85-F0915577384E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.6:*:*:*:*:*:*:*",
                "matchCriteriaId": "917BA05C-2A18-4C68-B508-85C2B5A94416",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "06337791-7D8D-4EAA-BACC-4E270F377B3E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.8:*:*:*:*:*:*:*",
                "matchCriteriaId": "336A8630-653C-4E28-8DE1-76CDD8573980",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.8a:*:*:*:*:*:*:*",
                "matchCriteriaId": "0A1767AE-7D9F-4BAA-90E1-CF8314CD0B53",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "5A6B707B-4543-41F1-83DF-49A93BF56FB1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "DC8F611B-D347-4A21-90E6-56CF4D8A35A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "D9A92CE4-B4B0-4C14-AE11-8DFE511406F3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "274E3E6F-4280-4EAE-B102-1BE57FE1F1D2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "46B52A51-51DB-4A12-AB1D-8D9605226599",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "938B0720-8CA7-43BA-9708-5CE9EC7A565A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "D4BE7166-DBD3-4CE6-A14A-725FE896B85E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "4DE62C4B-7C06-4907-BADE-416C1618D2D9",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "0C60DF3F-DBD9-4BBF-812E-4BB0C47BDF3C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "26FEE2E2-DD85-4006-8895-0BDA04E8EE4C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "A0CD237B-2843-4D37-87D7-AE6D1A53458A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "1B80614B-6362-45F0-B305-2F137B053DCF",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1z:*:*:*:*:*:*:*",
                "matchCriteriaId": "47B20C7E-1C9C-4EF4-91E4-388643C4B9C0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1z1:*:*:*:*:*:*:*",
                "matchCriteriaId": "EB7966A0-D84D-47F7-AED9-D041BCDA6703",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "04D19D8C-FACF-49B4-BA99-CC3A3FDADAFB",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "0B78942C-BEE1-4D18-9075-8E1D991BF621",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "5B306D35-4A13-4D23-8EC2-D000E8ADCDA5",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "9F21093D-1036-4F6B-B90F-ACE1EF99EA33",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "280D24C6-A2BF-46E8-B512-6A3FA7833922",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1F903F51-ABF4-49B0-A5BA-A6B51F79666F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.6:*:*:*:*:*:*:*",
                "matchCriteriaId": "E3F244E7-8EE9-4E58-83FA-EEDD3C8F792D",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.6a:*:*:*:*:*:*:*",
                "matchCriteriaId": "5238B1D1-740D-4B37-A0CB-1B3343E55D05",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "27E0750C-A622-49D6-A8EF-B59E2F8F1912",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.8:*:*:*:*:*:*:*",
                "matchCriteriaId": "2258D93E-71AA-4964-A5DF-008E3479F2A4",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.8a:*:*:*:*:*:*:*",
                "matchCriteriaId": "608ACC60-143B-4835-B6AC-E6C3111B4078",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "38B87B17-C653-40AC-8AE4-066BB1123C88",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "9012A66E-82C4-4ACF-A4BB-37EC54B87B50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9C945710-7DC3-43D9-9FBE-F2A1B8666C73",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "849C6FF1-F7C0-4021-BCA2-A791C87E4F37",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "7592C7E3-3735-425F-A276-9EE03224CD5E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1103BE75-EB64-4A9A-801E-EDE6A1F861F5",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "5B0C2129-8149-4362-827C-A5494C9D398B",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "7452C7E9-6241-42C5-9A7F-13C0BD38A2B4",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "38C48FC4-5362-4B61-8B8C-7CAFFB81045E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "2BC43383-DF99-4D38-A220-0A202623B36A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1x1:*:*:*:*:*:*:*",
                "matchCriteriaId": "B7E6CD08-EC7E-42C1-B2C2-CA5E154545A0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "DE62DC68-E882-49E7-AAD2-2F73637FFB4A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1y1:*:*:*:*:*:*:*",
                "matchCriteriaId": "57CD29C9-C629-48B0-ABDD-CEC3DEB6FB11",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "D197445E-EC12-429C-BDD4-F63FA5C1B3E3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "BD27DF50-9E81-4EC5-BA73-513F1DFB972C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "51EA3EAA-A379-467E-AF9A-FCFBACAE49C7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4FC63AAF-758F-4A70-9738-96E75A0A1DDA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "E67BE408-8DCF-491F-9EA9-E368565C1B49",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.4a:*:*:*:*:*:*:*",
                "matchCriteriaId": "D9CFE98A-FBA5-4837-BBD9-3C875ECEBF1B",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "36A5F20F-3F38-4FB9-B49D-28569EB1A763",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4D2264D7-5E89-4F50-B948-FAB41D07C8BA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5b:*:*:*:*:*:*:*",
                "matchCriteriaId": "6BB8368D-B9F9-4679-8154-1174E140CA17",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5e:*:*:*:*:*:*:*",
                "matchCriteriaId": "78EEDF40-2CDA-4147-A9F2-A5F4B8FF35EC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5f:*:*:*:*:*:*:*",
                "matchCriteriaId": "40CEA4FC-B946-4D54-A45B-686FC02D5411",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.6:*:*:*:*:*:*:*",
                "matchCriteriaId": "7BDBE176-04ED-48F0-BA9F-45BECFEDBE2A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.6a:*:*:*:*:*:*:*",
                "matchCriteriaId": "94E52AA0-0A77-47DF-9600-7D5B8A6D09B6",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "DB62FB56-A09A-4BE3-AF4C-180903078C69",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.7a:*:*:*:*:*:*:*",
                "matchCriteriaId": "0627B380-B8E7-4BA4-BC1B-ADBCC3A6018B",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.7b:*:*:*:*:*:*:*",
                "matchCriteriaId": "03F75200-396B-43BB-A529-9A3A45B9EBAF",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "42FAEC29-D754-49D6-85F1-F5DDFAF6E80F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "CCE76032-948F-444F-BA5D-72A34D1CD382",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9A965A2A-129C-45C3-BCB1-2860F583D020",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "F313F2EC-F3D6-4639-934C-402DDA3DA806",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4AFB2CA6-8332-4E4D-BDB4-C3B770D3AD6C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "1BF0778B-015D-481B-BAC0-40667F3453D3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1EEBC0EB-0DBB-4530-AFC4-AA0036469656",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "66D0DB87-6BB7-4FCF-BF20-6D4D48D72B79",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "E0A766E7-CF3C-4529-AFA4-D780059A66BC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "46B7F7EA-6512-433F-B1E4-B2F889427464",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z:*:*:*:*:*:*:*",
                "matchCriteriaId": "63527910-7F55-4D40-BFE7-D497C91C334D",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z1:*:*:*:*:*:*:*",
                "matchCriteriaId": "6EACA43F-64DB-496B-A6B1-DB9FAF6606EB",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z2:*:*:*:*:*:*:*",
                "matchCriteriaId": "7E147E53-B047-429F-9E3B-04FB5F777B85",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z3:*:*:*:*:*:*:*",
                "matchCriteriaId": "0656EA0A-3BB6-49AD-A6BB-922C2BC5B075",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z4:*:*:*:*:*:*:*",
                "matchCriteriaId": "9EDBECC5-25B6-461F-BE21-F4EA569DAEA4",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "EE165207-A066-44C1-B78A-6EFD80023204",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4AF792BC-C270-4294-8E4E-71FAC3ACFCF8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "1098FCEA-6A9F-4634-A0EF-EC55ABCCEA3E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "53B97B06-206B-42F0-B68F-5C5136EAD2B1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "6281EB0F-EE0E-4B06-A7A1-29460A98A8CA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4a:*:*:*:*:*:*:*",
                "matchCriteriaId": "07650346-67D7-4805-BF81-BB145304CC87",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9C6C0D21-ABD5-42F1-B04B-745CA6115D07",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "99810E61-9C5F-4B26-8DFD-75C971593386",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "B25CC70F-42ED-42EF-8CC6-50FF1F809F60",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5b:*:*:*:*:*:*:*",
                "matchCriteriaId": "DB60F2D0-B9D2-42A8-85EC-433BCE5BEC24",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5c:*:*:*:*:*:*:*",
                "matchCriteriaId": "FB757B3D-14A1-4997-AA51-9870FD81763C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.13.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "8577AF01-F2C7-48D3-AB0B-78BD63A60029",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.13.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "CD0D2D94-6470-4E4B-A1B1-0124F92AA793",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.14.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "31789E98-7C8D-4C5A-8A3F-FC9AFE9A248C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.14.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "7A62648B-3273-4D75-8533-A5CBE1B1BCE0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "0174C08C-8846-45AE-83ED-E9964348FA28",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "E73D685D-A002-4D82-9B4C-1D6B5C0B0320",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "1ED4E436-D338-4014-967D-9FE449518191",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "D66E9FE8-DD32-4D0A-BB80-E690F5299F45",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "D4F9C74B-113E-4808-B979-7738E3A52B00",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "1C482977-8384-4A57-B251-39BC01E4F7EC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "A18E50D1-BAF5-4C0F-9253-774089BAA2EE",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "8FDCA684-FF44-49EB-93B5-ED6778E437BA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2b:*:*:*:*:*:*:*",
                "matchCriteriaId": "3E0FD5B7-69E7-43CB-A658-E05557AC2D77",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2c:*:*:*:*:*:*:*",
                "matchCriteriaId": "3CBDBD9B-7122-413B-8671-17AEBE56C2F7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "2855BC9A-3F17-48FF-AE97-46ADB30AD0AD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "E12CD6C1-1441-48E1-89BF-0C9C735B94E5",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.3b:*:*:*:*:*:*:*",
                "matchCriteriaId": "0298ACD6-BAC6-4E0E-9962-3882F90700AD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.16.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "88707E5B-2040-40AB-A8D2-39D6B97E40B1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.16.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "F04A22BF-A461-4B5F-BB30-5F5C2FE56134",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.17.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "A9F98075-6210-4332-B76E-ECDFF1D55D33",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\r\n\r These vulnerabilities are due path traversal and improper image integrity validation.  A successful exploit could allow the attacker to execute persistent code on the underlying operating system.\r\n\r Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.\r\n\r For more information about these vulnerabilities, see the Details [\"#details\"] section of this advisory.\r\n\r   \r\n\r  \r\n\r  \r\n\r ERP"
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades en el software Cisco IOS XE podrían permitir a un atacante local autenticado con privilegios de nivel 15 o a un atacante no autenticado con acceso físico al dispositivo ejecutar código persistente en el momento del arranque y romper la cadena de confianza.\n Estas vulnerabilidades se deben a salto de ruta y a una validación incorrecta de la integridad de la imagen. Un exploit exitoso podría permitir al atacante ejecutar código persistente en el sistema operativo subyacente.\n Debido a que esto permite al atacante eludir una característica de seguridad importante del dispositivo, Cisco ha elevado la Calificación de Impacto de Seguridad (SIR) de este aviso de Media a Alta.\n Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles [“#details”] de este aviso.\n\nERP"
      }
    ],
    "id": "CVE-2025-20313",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 0.8,
          "impactScore": 5.9,
          "source": "psirt@cisco.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-20313",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-09-25T03:56:01.811658Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-09-24T18:15:35.530",
    "references": [
      {
        "source": "psirt@cisco.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secboot-UqFD8AvC"
      }
    ],
    "sourceIdentifier": "psirt@cisco.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-35"
          }
        ],
        "source": "psirt@cisco.com",
        "type": "Secondary"
      }
    ]
  }
}
—
Vendor
vendor
NVDCisco
receipt
Source
NVD
Its words
Cisco
Read by
field:cve.affected[].affectedData[].vendor
Said since
2026-09-29 17:49 UTC
Last answered
2026-10-04 18:16 UTC
Original
open at the source
2026-09-29 17:49 UTCCisco
2026-09-29 09:45 UTC—
What the source handed over
{
  "cve": {
    "affected": [
      {
        "affectedData": [
          {
            "product": "Cisco IOS XE Software",
            "vendor": "Cisco",
            "versions": [
              {
                "status": "affected",
                "version": "17.3.1"
              },
              {
                "status": "affected",
                "version": "17.3.2"
              },
              {
                "status": "affected",
                "version": "17.3.3"
              },
              {
                "status": "affected",
                "version": "17.3.1a"
              },
              {
                "status": "affected",
                "version": "17.3.1w"
              },
              {
                "status": "affected",
                "version": "17.3.2a"
              },
              {
                "status": "affected",
                "version": "17.3.1x"
              },
              {
                "status": "affected",
                "version": "17.3.1z"
              },
              {
                "status": "affected",
                "version": "17.3.4"
              },
              {
                "status": "affected",
                "version": "17.3.5"
              },
              {
                "status": "affected",
                "version": "17.3.4a"
              },
              {
                "status": "affected",
                "version": "17.3.6"
              },
              {
                "status": "affected",
                "version": "17.3.4b"
              },
              {
                "status": "affected",
                "version": "17.3.4c"
              },
              {
                "status": "affected",
                "version": "17.3.5a"
              },
              {
                "status": "affected",
                "version": "17.3.5b"
              },
              {
                "status": "affected",
                "version": "17.3.7"
              },
              {
                "status": "affected",
                "version": "17.3.8"
              },
              {
                "status": "affected",
                "version": "17.3.8a"
              },
              {
                "status": "affected",
                "version": "17.4.1"
              },
              {
                "status": "affected",
                "version": "17.4.2"
              },
              {
                "status": "affected",
                "version": "17.4.1a"
              },
              {
                "status": "affected",
                "version": "17.4.1b"
              },
              {
                "status": "affected",
                "version": "17.4.2a"
              },
              {
                "status": "affected",
                "version": "17.5.1"
              },
              {
                "status": "affected",
                "version": "17.5.1a"
              },
              {
                "status": "affected",
                "version": "17.6.1"
              },
              {
                "status": "affected",
                "version": "17.6.2"
              },
              {
                "status": "affected",
                "version": "17.6.1w"
              },
              {
                "status": "affected",
                "version": "17.6.1a"
              },
              {
                "status": "affected",
                "version": "17.6.1x"
              },
              {
                "status": "affected",
                "version": "17.6.3"
              },
              {
                "status": "affected",
                "version": "17.6.1y"
              },
              {
                "status": "affected",
                "version": "17.6.1z"
              },
              {
                "status": "affected",
                "version": "17.6.3a"
              },
              {
                "status": "affected",
                "version": "17.6.4"
              },
              {
                "status": "affected",
                "version": "17.6.1z1"
              },
              {
                "status": "affected",
                "version": "17.6.5"
              },
              {
                "status": "affected",
                "version": "17.6.6"
              },
              {
                "status": "affected",
                "version": "17.6.6a"
              },
              {
                "status": "affected",
                "version": "17.6.5a"
              },
              {
                "status": "affected",
                "version": "17.6.7"
              },
              {
                "status": "affected",
                "version": "17.6.8"
              },
              {
                "status": "affected",
                "version": "17.6.8a"
              },
              {
                "status": "affected",
                "version": "17.7.1"
              },
              {
                "status": "affected",
                "version": "17.7.1a"
              },
              {
                "status": "affected",
                "version": "17.7.1b"
              },
              {
                "status": "affected",
                "version": "17.7.2"
              },
              {
                "status": "affected",
                "version": "17.10.1"
              },
              {
                "status": "affected",
                "version": "17.10.1a"
              },
              {
                "status": "affected",
                "version": "17.10.1b"
              },
              {
                "status": "affected",
                "version": "17.8.1"
              },
              {
                "status": "affected",
                "version": "17.8.1a"
              },
              {
                "status": "affected",
                "version": "17.9.1"
              },
              {
                "status": "affected",
                "version": "17.9.1w"
              },
              {
                "status": "affected",
                "version": "17.9.2"
              },
              {
                "status": "affected",
                "version": "17.9.1a"
              },
              {
                "status": "affected",
                "version": "17.9.1x"
              },
              {
                "status": "affected",
                "version": "17.9.1y"
              },
              {
                "status": "affected",
                "version": "17.9.3"
              },
              {
                "status": "affected",
                "version": "17.9.2a"
              },
              {
                "status": "affected",
                "version": "17.9.1x1"
              },
              {
                "status": "affected",
                "version": "17.9.3a"
              },
              {
                "status": "affected",
                "version": "17.9.4"
              },
              {
                "status": "affected",
                "version": "17.9.1y1"
              },
              {
                "status": "affected",
                "version": "17.9.5"
              },
              {
                "status": "affected",
                "version": "17.9.4a"
              },
              {
                "status": "affected",
                "version": "17.9.5a"
              },
              {
                "status": "affected",
                "version": "17.9.5b"
              },
              {
                "status": "affected",
                "version": "17.9.6"
              },
              {
                "status": "affected",
                "version": "17.9.6a"
              },
              {
                "status": "affected",
                "version": "17.9.7"
              },
              {
                "status": "affected",
                "version": "17.9.5e"
              },
              {
                "status": "affected",
                "version": "17.9.5f"
              },
              {
                "status": "affected",
                "version": "17.9.7a"
              },
              {
                "status": "affected",
                "version": "17.9.7b"
              },
              {
                "status": "affected",
                "version": "17.11.1"
              },
              {
                "status": "affected",
                "version": "17.11.1a"
              },
              {
                "status": "affected",
                "version": "17.12.1"
              },
              {
                "status": "affected",
                "version": "17.12.1w"
              },
              {
                "status": "affected",
                "version": "17.12.1a"
              },
              {
                "status": "affected",
                "version": "17.12.1x"
              },
              {
                "status": "affected",
                "version": "17.12.2"
              },
              {
                "status": "affected",
                "version": "17.12.3"
              },
              {
                "status": "affected",
                "version": "17.12.2a"
              },
              {
                "status": "affected",
                "version": "17.12.1y"
              },
              {
                "status": "affected",
                "version": "17.12.1z"
              },
              {
                "status": "affected",
                "version": "17.12.4"
              },
              {
                "status": "affected",
                "version": "17.12.3a"
              },
              {
                "status": "affected",
                "version": "17.12.1z1"
              },
              {
                "status": "affected",
                "version": "17.12.1z2"
              },
              {
                "status": "affected",
                "version": "17.12.4a"
              },
              {
                "status": "affected",
                "version": "17.12.5"
              },
              {
                "status": "affected",
                "version": "17.12.4b"
              },
              {
                "status": "affected",
                "version": "17.12.1z3"
              },
              {
                "status": "affected",
                "version": "17.12.5a"
              },
              {
                "status": "affected",
                "version": "17.12.1z4"
              },
              {
                "status": "affected",
                "version": "17.12.5b"
              },
              {
                "status": "affected",
                "version": "17.12.5c"
              },
              {
                "status": "affected",
                "version": "17.13.1"
              },
              {
                "status": "affected",
                "version": "17.13.1a"
              },
              {
                "status": "affected",
                "version": "17.14.1"
              },
              {
                "status": "affected",
                "version": "17.14.1a"
              },
              {
                "status": "affected",
                "version": "17.15.1"
              },
              {
                "status": "affected",
                "version": "17.15.1w"
              },
              {
                "status": "affected",
                "version": "17.15.1a"
              },
              {
                "status": "affected",
                "version": "17.15.2"
              },
              {
                "status": "affected",
                "version": "17.15.1b"
              },
              {
                "status": "affected",
                "version": "17.15.1x"
              },
              {
                "status": "affected",
                "version": "17.15.3"
              },
              {
                "status": "affected",
                "version": "17.15.2c"
              },
              {
                "status": "affected",
                "version": "17.15.2a"
              },
              {
                "status": "affected",
                "version": "17.15.1y"
              },
              {
                "status": "affected",
                "version": "17.15.2b"
              },
              {
                "status": "affected",
                "version": "17.15.3a"
              },
              {
                "status": "affected",
                "version": "17.15.3b"
              },
              {
                "status": "affected",
                "version": "17.16.1"
              },
              {
                "status": "affected",
                "version": "17.16.1a"
              },
              {
                "status": "affected",
                "version": "17.17.1"
              }
            ]
          }
        ],
        "source": "psirt@cisco.com"
      }
    ],
    "configurations": [
      {
        "nodes": [
          {
            "cpeMatch": [
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "128F95D7-E49F-4B36-8F47-823C0298449E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "E21B3881-37E9-4C00-9336-12C9C28D1B61",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "E54599DB-A85E-4EEA-9985-2CBF90E28A08",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "4046C325-7EDB-4C95-AA98-541BEC8F9E0F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1z:*:*:*:*:*:*:*",
                "matchCriteriaId": "E5B70A3D-CBE1-4218-A7B4-F85741A57BD7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "2B270A04-9961-4E99-806B-441CD674AFBD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1360069D-0358-4746-8C3F-44C2A40988D7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "C5DD2403-113B-4100-8BD4-90E1927E6648",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "DAF73937-BCE2-4BEF-B4B0-83212DA4A6C8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4a:*:*:*:*:*:*:*",
                "matchCriteriaId": "2DDB1E60-C2A9-4570-BE80-F3D478A53738",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9841799A-87E2-46AE-807A-824981EAB35A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4c:*:*:*:*:*:*:*",
                "matchCriteriaId": "0CEF022B-271F-4017-B74B-82748D5EBA01",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "6B2902D8-3A7B-4C47-9BC6-8CA4C580A346",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "8871B890-78F4-4D9D-AEFF-6A393493C51E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9E489AC5-A445-44FF-AA85-F0915577384E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.6:*:*:*:*:*:*:*",
                "matchCriteriaId": "917BA05C-2A18-4C68-B508-85C2B5A94416",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "06337791-7D8D-4EAA-BACC-4E270F377B3E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.8:*:*:*:*:*:*:*",
                "matchCriteriaId": "336A8630-653C-4E28-8DE1-76CDD8573980",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.8a:*:*:*:*:*:*:*",
                "matchCriteriaId": "0A1767AE-7D9F-4BAA-90E1-CF8314CD0B53",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "5A6B707B-4543-41F1-83DF-49A93BF56FB1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "DC8F611B-D347-4A21-90E6-56CF4D8A35A3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "D9A92CE4-B4B0-4C14-AE11-8DFE511406F3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "274E3E6F-4280-4EAE-B102-1BE57FE1F1D2",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "46B52A51-51DB-4A12-AB1D-8D9605226599",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "938B0720-8CA7-43BA-9708-5CE9EC7A565A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "D4BE7166-DBD3-4CE6-A14A-725FE896B85E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "4DE62C4B-7C06-4907-BADE-416C1618D2D9",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "0C60DF3F-DBD9-4BBF-812E-4BB0C47BDF3C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "26FEE2E2-DD85-4006-8895-0BDA04E8EE4C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "A0CD237B-2843-4D37-87D7-AE6D1A53458A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "1B80614B-6362-45F0-B305-2F137B053DCF",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1z:*:*:*:*:*:*:*",
                "matchCriteriaId": "47B20C7E-1C9C-4EF4-91E4-388643C4B9C0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1z1:*:*:*:*:*:*:*",
                "matchCriteriaId": "EB7966A0-D84D-47F7-AED9-D041BCDA6703",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "04D19D8C-FACF-49B4-BA99-CC3A3FDADAFB",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "0B78942C-BEE1-4D18-9075-8E1D991BF621",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "5B306D35-4A13-4D23-8EC2-D000E8ADCDA5",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "9F21093D-1036-4F6B-B90F-ACE1EF99EA33",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "280D24C6-A2BF-46E8-B512-6A3FA7833922",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1F903F51-ABF4-49B0-A5BA-A6B51F79666F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.6:*:*:*:*:*:*:*",
                "matchCriteriaId": "E3F244E7-8EE9-4E58-83FA-EEDD3C8F792D",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.6a:*:*:*:*:*:*:*",
                "matchCriteriaId": "5238B1D1-740D-4B37-A0CB-1B3343E55D05",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "27E0750C-A622-49D6-A8EF-B59E2F8F1912",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.8:*:*:*:*:*:*:*",
                "matchCriteriaId": "2258D93E-71AA-4964-A5DF-008E3479F2A4",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.8a:*:*:*:*:*:*:*",
                "matchCriteriaId": "608ACC60-143B-4835-B6AC-E6C3111B4078",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "38B87B17-C653-40AC-8AE4-066BB1123C88",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "9012A66E-82C4-4ACF-A4BB-37EC54B87B50",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9C945710-7DC3-43D9-9FBE-F2A1B8666C73",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "849C6FF1-F7C0-4021-BCA2-A791C87E4F37",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "7592C7E3-3735-425F-A276-9EE03224CD5E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1103BE75-EB64-4A9A-801E-EDE6A1F861F5",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "5B0C2129-8149-4362-827C-A5494C9D398B",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "7452C7E9-6241-42C5-9A7F-13C0BD38A2B4",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "38C48FC4-5362-4B61-8B8C-7CAFFB81045E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "2BC43383-DF99-4D38-A220-0A202623B36A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1x1:*:*:*:*:*:*:*",
                "matchCriteriaId": "B7E6CD08-EC7E-42C1-B2C2-CA5E154545A0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "DE62DC68-E882-49E7-AAD2-2F73637FFB4A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1y1:*:*:*:*:*:*:*",
                "matchCriteriaId": "57CD29C9-C629-48B0-ABDD-CEC3DEB6FB11",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "D197445E-EC12-429C-BDD4-F63FA5C1B3E3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "BD27DF50-9E81-4EC5-BA73-513F1DFB972C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "51EA3EAA-A379-467E-AF9A-FCFBACAE49C7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4FC63AAF-758F-4A70-9738-96E75A0A1DDA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "E67BE408-8DCF-491F-9EA9-E368565C1B49",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.4a:*:*:*:*:*:*:*",
                "matchCriteriaId": "D9CFE98A-FBA5-4837-BBD9-3C875ECEBF1B",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "36A5F20F-3F38-4FB9-B49D-28569EB1A763",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4D2264D7-5E89-4F50-B948-FAB41D07C8BA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5b:*:*:*:*:*:*:*",
                "matchCriteriaId": "6BB8368D-B9F9-4679-8154-1174E140CA17",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5e:*:*:*:*:*:*:*",
                "matchCriteriaId": "78EEDF40-2CDA-4147-A9F2-A5F4B8FF35EC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5f:*:*:*:*:*:*:*",
                "matchCriteriaId": "40CEA4FC-B946-4D54-A45B-686FC02D5411",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.6:*:*:*:*:*:*:*",
                "matchCriteriaId": "7BDBE176-04ED-48F0-BA9F-45BECFEDBE2A",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.6a:*:*:*:*:*:*:*",
                "matchCriteriaId": "94E52AA0-0A77-47DF-9600-7D5B8A6D09B6",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.7:*:*:*:*:*:*:*",
                "matchCriteriaId": "DB62FB56-A09A-4BE3-AF4C-180903078C69",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.7a:*:*:*:*:*:*:*",
                "matchCriteriaId": "0627B380-B8E7-4BA4-BC1B-ADBCC3A6018B",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.7b:*:*:*:*:*:*:*",
                "matchCriteriaId": "03F75200-396B-43BB-A529-9A3A45B9EBAF",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "42FAEC29-D754-49D6-85F1-F5DDFAF6E80F",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "CCE76032-948F-444F-BA5D-72A34D1CD382",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9A965A2A-129C-45C3-BCB1-2860F583D020",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "F313F2EC-F3D6-4639-934C-402DDA3DA806",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4AFB2CA6-8332-4E4D-BDB4-C3B770D3AD6C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "1BF0778B-015D-481B-BAC0-40667F3453D3",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "1EEBC0EB-0DBB-4530-AFC4-AA0036469656",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "66D0DB87-6BB7-4FCF-BF20-6D4D48D72B79",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "E0A766E7-CF3C-4529-AFA4-D780059A66BC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "46B7F7EA-6512-433F-B1E4-B2F889427464",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z:*:*:*:*:*:*:*",
                "matchCriteriaId": "63527910-7F55-4D40-BFE7-D497C91C334D",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z1:*:*:*:*:*:*:*",
                "matchCriteriaId": "6EACA43F-64DB-496B-A6B1-DB9FAF6606EB",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z2:*:*:*:*:*:*:*",
                "matchCriteriaId": "7E147E53-B047-429F-9E3B-04FB5F777B85",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z3:*:*:*:*:*:*:*",
                "matchCriteriaId": "0656EA0A-3BB6-49AD-A6BB-922C2BC5B075",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z4:*:*:*:*:*:*:*",
                "matchCriteriaId": "9EDBECC5-25B6-461F-BE21-F4EA569DAEA4",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "EE165207-A066-44C1-B78A-6EFD80023204",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "4AF792BC-C270-4294-8E4E-71FAC3ACFCF8",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "1098FCEA-6A9F-4634-A0EF-EC55ABCCEA3E",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "53B97B06-206B-42F0-B68F-5C5136EAD2B1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4:*:*:*:*:*:*:*",
                "matchCriteriaId": "6281EB0F-EE0E-4B06-A7A1-29460A98A8CA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4a:*:*:*:*:*:*:*",
                "matchCriteriaId": "07650346-67D7-4805-BF81-BB145304CC87",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4b:*:*:*:*:*:*:*",
                "matchCriteriaId": "9C6C0D21-ABD5-42F1-B04B-745CA6115D07",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5:*:*:*:*:*:*:*",
                "matchCriteriaId": "99810E61-9C5F-4B26-8DFD-75C971593386",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5a:*:*:*:*:*:*:*",
                "matchCriteriaId": "B25CC70F-42ED-42EF-8CC6-50FF1F809F60",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5b:*:*:*:*:*:*:*",
                "matchCriteriaId": "DB60F2D0-B9D2-42A8-85EC-433BCE5BEC24",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.5c:*:*:*:*:*:*:*",
                "matchCriteriaId": "FB757B3D-14A1-4997-AA51-9870FD81763C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.13.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "8577AF01-F2C7-48D3-AB0B-78BD63A60029",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.13.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "CD0D2D94-6470-4E4B-A1B1-0124F92AA793",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.14.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "31789E98-7C8D-4C5A-8A3F-FC9AFE9A248C",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.14.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "7A62648B-3273-4D75-8533-A5CBE1B1BCE0",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "0174C08C-8846-45AE-83ED-E9964348FA28",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "E73D685D-A002-4D82-9B4C-1D6B5C0B0320",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1b:*:*:*:*:*:*:*",
                "matchCriteriaId": "1ED4E436-D338-4014-967D-9FE449518191",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1w:*:*:*:*:*:*:*",
                "matchCriteriaId": "D66E9FE8-DD32-4D0A-BB80-E690F5299F45",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1x:*:*:*:*:*:*:*",
                "matchCriteriaId": "D4F9C74B-113E-4808-B979-7738E3A52B00",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1y:*:*:*:*:*:*:*",
                "matchCriteriaId": "1C482977-8384-4A57-B251-39BC01E4F7EC",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2:*:*:*:*:*:*:*",
                "matchCriteriaId": "A18E50D1-BAF5-4C0F-9253-774089BAA2EE",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2a:*:*:*:*:*:*:*",
                "matchCriteriaId": "8FDCA684-FF44-49EB-93B5-ED6778E437BA",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2b:*:*:*:*:*:*:*",
                "matchCriteriaId": "3E0FD5B7-69E7-43CB-A658-E05557AC2D77",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.2c:*:*:*:*:*:*:*",
                "matchCriteriaId": "3CBDBD9B-7122-413B-8671-17AEBE56C2F7",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.3:*:*:*:*:*:*:*",
                "matchCriteriaId": "2855BC9A-3F17-48FF-AE97-46ADB30AD0AD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.3a:*:*:*:*:*:*:*",
                "matchCriteriaId": "E12CD6C1-1441-48E1-89BF-0C9C735B94E5",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.15.3b:*:*:*:*:*:*:*",
                "matchCriteriaId": "0298ACD6-BAC6-4E0E-9962-3882F90700AD",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.16.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "88707E5B-2040-40AB-A8D2-39D6B97E40B1",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.16.1a:*:*:*:*:*:*:*",
                "matchCriteriaId": "F04A22BF-A461-4B5F-BB30-5F5C2FE56134",
                "vulnerable": true
              },
              {
                "criteria": "cpe:2.3:o:cisco:ios_xe:17.17.1:*:*:*:*:*:*:*",
                "matchCriteriaId": "A9F98075-6210-4332-B76E-ECDFF1D55D33",
                "vulnerable": true
              }
            ],
            "negate": false,
            "operator": "OR"
          }
        ]
      }
    ],
    "cveTags": [],
    "descriptions": [
      {
        "lang": "en",
        "value": "Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust.\r\n\r These vulnerabilities are due path traversal and improper image integrity validation.  A successful exploit could allow the attacker to execute persistent code on the underlying operating system.\r\n\r Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High.\r\n\r For more information about these vulnerabilities, see the Details [\"#details\"] section of this advisory.\r\n\r   \r\n\r  \r\n\r  \r\n\r ERP"
      },
      {
        "lang": "es",
        "value": "Múltiples vulnerabilidades en el software Cisco IOS XE podrían permitir a un atacante local autenticado con privilegios de nivel 15 o a un atacante no autenticado con acceso físico al dispositivo ejecutar código persistente en el momento del arranque y romper la cadena de confianza.\n Estas vulnerabilidades se deben a salto de ruta y a una validación incorrecta de la integridad de la imagen. Un exploit exitoso podría permitir al atacante ejecutar código persistente en el sistema operativo subyacente.\n Debido a que esto permite al atacante eludir una característica de seguridad importante del dispositivo, Cisco ha elevado la Calificación de Impacto de Seguridad (SIR) de este aviso de Media a Alta.\n Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles [“#details”] de este aviso.\n\nERP"
      }
    ],
    "id": "CVE-2025-20313",
    "lastModified": "2026-09-26T00:10:00.127",
    "metrics": {
      "cvssMetricV31": [
        {
          "cvssData": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 0.8,
          "impactScore": 5.9,
          "source": "psirt@cisco.com",
          "type": "Secondary"
        }
      ],
      "ssvcV203": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "ssvcData": {
            "id": "CVE-2025-20313",
            "options": [
              {
                "exploitation": "none"
              },
              {
                "automatable": "no"
              },
              {
                "technicalImpact": "total"
              }
            ],
            "role": "CISA Coordinator",
            "timestamp": "2025-09-25T03:56:01.811658Z",
            "version": "2.0.3"
          }
        }
      ]
    },
    "published": "2025-09-24T18:15:35.530",
    "references": [
      {
        "source": "psirt@cisco.com",
        "tags": [
          "Vendor Advisory"
        ],
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secboot-UqFD8AvC"
      }
    ],
    "sourceIdentifier": "psirt@cisco.com",
    "vulnStatus": "Analyzed",
    "weaknesses": [
      {
        "description": [
          {
            "lang": "en",
            "value": "CWE-35"
          }
        ],
        "source": "psirt@cisco.com",
        "type": "Secondary"
      }
    ]
  }
}
—

vulnerability

Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due path traversal and improper image integrity validation. A successful exploit could allow the attacker to execute persistent code on the underlying operating system. Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. ERP
zetlyn/cve-nvd · 2025-09-24
cvss 6.7 product Cisco IOS XE Software status Analyzed vendor Cisco source