Cisco NX-OS Software Image Verification Bypass Vulnerability

Summary

A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative credentials, to bypass NX-OS image signature verification.  This vulnerability is due to insecure bootloader settings. An attacker could exploit this vulnerability by executing a series of bootloader commands. A successful exploit could allow the attacker to bypass NX-OS image signature verification and load unverified software.

Timeline

1. Dec 4, 2024, 4:13 PM UTCCVE published
2. Dec 4, 2024, 7:27 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: partial

3. Apr 8, 2025, 2:29 PM UTCRecord last updated

Affected versions

• Cisco Cisco NX-OS Software

  8.2(5), 7.3(5)D1(1), 8.4(2), 8.4(3), 9.2(3), 7.0(3)I5(2), 8.2(1), 6.0(2)A8(7a), 7.0(3)I4(5), 7.3(1)D1(1), 7.0(3)I4(6), 7.0(3)I4(3), 9.2(2v), 7.3(0)D1(1), 7.0(3)I4(7), 7.0(3)I4(1), 7.0(3)I4(8), 7.0(3)I4(2), 6.0(2)A8(11), 7.3(4)D1(1), 9.2(1), 9.2(2t), 9.2(3y), 7.0(3)I4(1t), 7.0(3)I7(6z), 9.3(2), 7.3(1)DY(1), 7.0(3)F3(3), 7.0(3)I7(3z), 7.0(3)IM7(2), and 155 more

• Cisco Cisco NX-OS System Software in ACI Mode

  14.1(1j), 14.0(3d), 14.1(1k), 13.2(1m), 14.0(3c), 13.2(2l), 13.2(7k), 14.1(1l), 14.2(2f), 13.2(3s), 13.2(2o), 14.0(2c), 14.1(2m), 13.2(5e), 14.1(2o), 13.2(7f), 13.2(41d), 13.2(4d), 13.2(3o), 13.2(1l), 14.0(1h), 13.2(3n), 14.2(1l), 14.2(2e), 13.2(4e), 14.2(1i), 13.2(9b), 14.1(2s), 14.1(1i), 14.1(2g), and 95 more

• Cisco Cisco Unified Computing System (Managed)

  4.0(4c), 4.0(2b), 4.1(2a), 4.0(1a), 4.0(2a), 4.0(1b), 4.1(1c), 4.0(4a), 4.0(4b), 4.0(2e), 4.1(1a), 4.0(4d), 4.0(4h), 4.0(4g), 4.0(1d), 4.1(1e), 4.0(4f), 4.0(4e), 4.0(4i), 4.1(1d), 4.0(2d), 4.1(1b), 4.0(1c), 4.1(2b), 4.0(4k), 4.1(3a), 4.1(3b), 4.1(2c), 4.0(4l), 4.1(4a), and 41 more

References 1