Hundred of CISCO switches impacted by bootloader flaw

Share:

A bootloader vulnerability in Cisco NX-OS affects 100+ switches, allowing attackers to bypass image signature checks.

Cisco released security patches for a vulnerability, tracked as CVE-2024-20397 (CVSS score of 5.2), in the NX-OS software’s bootloader that could be exploited by attackers to bypass image signature verification.

“A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative credentials, to bypass NX-OS image signature verification.” reads the advisory.

The root cause of the vulnerability is insecure bootloader settings. An attacker could execute a series of bootloader commands to trigger the vulnerability.

“A successful exploit could allow the attacker to bypass NX-OS image signature verification and load unverified software.” continues the advisory.

The vulnerability affects the following Cisco products running NX-OS Software with a vulnerable BIOS version, regardless of their configuration:

  • UCS 6500 Series Fabric Interconnects (CSCwj35846)
  • MDS 9000 Series Multilayer Switches (CSCwh76163)
  • Nexus 3000 Series Switches (CSCwm47438)
  • Nexus 7000 Series Switches (CSCwh76166)
  • Nexus 9000 Series Fabric Switches in ACI mode (CSCwn11901)
  • Nexus 9000 Series Switches in standalone NX-OS mode (CSCwm47438)
  • UCS 6400 Series Fabric Interconnects (CSCwj35846)

The IT giant states that there are no workarounds that address this vulnerability.

The company PSIRT is not aware of any attacks in the wild exploiting this vulnerability CVE-2024-20397

Cisco will not address the vulnerability for Nexus 92160YC-X that has reached the End of Vulnerability/Security Support.

Source

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
11:47 pm, Feb 11, 2025
weather icon 4°C
L: 3° | H: 5°
overcast clouds
Humidity: 91 %
Pressure: 1019 mb
Wind: 3 mph NW
Wind Gust: 0 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 100%
Rain Chance: 0%
Visibility: 8 km
Sunrise: 7:21 am
Sunset: 5:07 pm
DailyHourly
Daily ForecastHourly Forecast
Tomorrow 9:00 pm
weather icon
3° | 5°°C 0 mm 0% 5 mph 91 % 1021 mb 0 mm/h
Thu Feb 13 9:00 pm
weather icon
3° | 6°°C 0 mm 0% 8 mph 79 % 1025 mb 0 mm/h
Fri Feb 14 9:00 pm
weather icon
1° | 7°°C 0 mm 0% 8 mph 80 % 1026 mb 0 mm/h
Sat Feb 15 9:00 pm
weather icon
2° | 7°°C 0 mm 0% 7 mph 79 % 1025 mb 0 mm/h
Sun Feb 16 9:00 pm
weather icon
3° | 8°°C 0 mm 0% 7 mph 76 % 1018 mb 0 mm/h
Tomorrow 12:00 am
weather icon
4° | 4°°C 0 mm 0% 3 mph 91 % 1019 mb 0 mm/h
Tomorrow 3:00 am
weather icon
4° | 4°°C 0 mm 0% 3 mph 88 % 1019 mb 0 mm/h
Tomorrow 6:00 am
weather icon
4° | 4°°C 0 mm 0% 3 mph 83 % 1018 mb 0 mm/h
Tomorrow 9:00 am
weather icon
4° | 4°°C 0 mm 0% 3 mph 76 % 1019 mb 0 mm/h
Tomorrow 12:00 pm
weather icon
6° | 6°°C 0 mm 0% 4 mph 64 % 1020 mb 0 mm/h
Tomorrow 3:00 pm
weather icon
6° | 6°°C 0 mm 0% 4 mph 74 % 1019 mb 0 mm/h
Tomorrow 6:00 pm
weather icon
5° | 5°°C 0 mm 0% 4 mph 75 % 1021 mb 0 mm/h
Tomorrow 9:00 pm
weather icon
5° | 5°°C 0 mm 0% 5 mph 71 % 1021 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€92,548.73
-1.50%
Ethereum(ETH)
€2,516.91
-1.80%
Tether(USDT)
€0.96
-0.04%
XRP(XRP)
€2.34
0.37%
Solana(SOL)
€191.23
-0.74%
USDC(USDC)
€0.97
0.00%
Dogecoin(DOGE)
€0.245074
0.12%
Shiba Inu(SHIB)
€0.000015
-0.29%
Pepe(PEPE)
€0.000010
0.79%
Scroll to Top