CVE-2025-20177

🗓️ 12 Mar 2025 16:15:22Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 8 Views

Vulnerability in Cisco IOS XR allows local attackers to bypass image signature verification.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2025-20177	12 Mar 202516:15	–	attackerkb
BDU FSTEC	The vulnerability of Cisco IOS XR operating systems arises from the lack of control over public write permissions for installed application files. This allows attackers to circumvent existing security restrictions.	14 Apr 202500:00	–	bdu_fstec
Circl	CVE-2025-20177	12 Mar 202516:41	–	circl
Cisco	Cisco IOS XR Software Image Verification Bypass Vulnerability	12 Mar 202516:00	–	cisco
CNNVD	Cisco IOS XR 安全漏洞	12 Mar 202500:00	–	cnnvd
CVE	CVE-2025-20177	12 Mar 202516:13	–	cve
Cvelist	CVE-2025-20177 Cisco IOS XR Software Image Verification Bypass Vulnerability	12 Mar 202516:13	–	cvelist
EUVD	EUVD-2025-6451	3 Oct 202520:07	–	euvd
Positive Technologies	PT-2025-11103 · Cisco · Cisco Ios Xr	12 Mar 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-20177	14 Mar 202522:23	–	redhatcve

NVD

Node

cisco ios_xrRange<7.11.21

OR

cisco ios_xrRange24.2–24.2.2

OR

cisco ios_xrRange24.3–24.3.2

OR

cisco ios_xrMatch24.4

AND

cisco 8011-4g24y4h-iMatch-

OR

cisco 8101-32fhMatch-

OR

cisco 8101-32fh-oMatch-

OR

cisco 8101-32h-oMatch-

OR

cisco 8102-28fh-dpu-oMatch-

OR

cisco 8102-64hMatch-

OR

cisco 8102-64h-oMatch-

OR

cisco 8111-32eh-oMatch-

OR

cisco 8122-64eh-oMatch-

OR

cisco 8122-64ehf-oMatch-

OR

cisco 8201Match-

OR

cisco 8201-24h8fhMatch-

OR

cisco 8201-32fhMatch-

OR

cisco 8201-32fh-oMatch-

OR

cisco 8202Match-

OR

cisco 8202-32fh-mMatch-

OR

cisco 8212-48fh-mMatch-

OR

cisco 8404Match-

OR

cisco 8501-sys-mtMatch-

OR

cisco 8608Match-

OR

cisco 8700Match-

OR

cisco 8711-32fh-mMatch-

OR

cisco 8712-mod-mMatch-

OR

cisco 8804Match-

OR

cisco 8808Match-

OR

cisco 8812Match-

OR

cisco 8818Match-

OR

cisco ncs_1010Match-

OR

cisco ncs_1014Match-

OR

cisco ncs_540-12z20g-sys-aMatch-

OR

cisco ncs_540-12z20g-sys-dMatch-

OR

cisco ncs_540-24q2c2dd-sysMatch-

OR

cisco ncs_540-24q8l2dd-sysMatch-

OR

cisco ncs_540-24z8q2c-sysMatch-

OR

cisco ncs_540-28z4c-sys-aMatch-

OR

cisco ncs_540-28z4c-sys-dMatch-

OR

cisco ncs_540-6z14s-sys-dMatch-

OR

cisco ncs_540-6z18g-sys-aMatch-

OR

cisco ncs_540-6z18g-sys-dMatch-

OR

cisco ncs_540-acc-sysMatch-

OR

cisco ncs_540-fh-aggMatch-

OR

cisco ncs_540-fh-csr-sysMatch-

OR

cisco ncs_540x-12z16g-sys-aMatch-

OR

cisco ncs_540x-12z16g-sys-dMatch-

OR

cisco ncs_540x-16z4g8q2c-aMatch-

OR

cisco ncs_540x-16z4g8q2c-dMatch-

OR

cisco ncs_540x-16z8q2c-dMatch-

OR

cisco ncs_540x-4z14g2q-aMatch-

OR

cisco ncs_540x-4z14g2q-dMatch-

OR

cisco ncs_540x-6z18g-sys-aMatch-

OR

cisco ncs_540x-6z18g-sys-dMatch-

OR

cisco ncs_540x-8z16g-sys-aMatch-

OR

cisco ncs_540x-8z16g-sys-dMatch-

OR

cisco ncs_540x-acc-sysMatch-

OR

cisco ncs_57b1-5dse-sysMatch-

OR

cisco ncs_57b1-6d24-sysMatch-

OR

cisco ncs_57c1-48q6-sysMatch-

OR

cisco ncs_57c3-mod-sysMatch-

OR

cisco ncs_57d2-18dd-sysMatch-

Source	Link
blog	www.blog.apnic.net/2024/09/02/crafting-endless-as-paths-in-bgp/
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xr-verii-bypass-HhPwQRvx

06 Aug 2025 17:04Current

CVSS 3.16.7

EPSS0.00005

cve 2025 20177 cisco ios xr local attacker image signature verification security impact rating.