Vulnerability in Cisco Catalyst Switches Allows Code Execution During Boot

CVE-2025-20181

What is CVE-2025-20181?

A vulnerability exists in Cisco IOS Software for various Catalyst Switch models, allowing a local authenticated user or an unauthenticated individual with physical access to execute arbitrary code during the boot process. This vulnerability arises from inadequate signature verification for certain files, potentially enabling attackers to manipulate the boot sequence. By placing a crafted file in a designated location, an attacker can disrupt the security mechanisms of the device and execute persistent code, thereby undermining the integrity of the system's security features.

References