{"id":"CVE-2024-20397","state":"PUBLISHED","title":"Cisco NX-OS Software Image Verification Bypass Vulnerability","description":"A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative credentials, to bypass NX-OS image signature verification. \r\n\r\nThis vulnerability is due to insecure bootloader settings. An attacker could exploit this vulnerability by executing a series of bootloader commands. A successful exploit could allow the attacker to bypass NX-OS image signature verification and load unverified software.","publishedAt":"2024-12-04T16:13:13.890Z","updatedAt":"2025-04-08T14:29:18.430Z","severity":{"score":5.2,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","source":"cisco"},"assigner":"cisco","products":["Cisco Cisco NX-OS Software","Cisco Cisco NX-OS System Software in ACI Mode","Cisco Cisco Unified Computing System (Managed)"],"affected":[{"vendor":"Cisco","product":"Cisco NX-OS Software","defaultStatus":"unknown","versions":[{"version":"8.2(5)","status":"affected"},{"version":"7.3(5)D1(1)","status":"affected"},{"version":"8.4(2)","status":"affected"},{"version":"8.4(3)","status":"affected"},{"version":"9.2(3)","status":"affected"},{"version":"7.0(3)I5(2)","status":"affected"},{"version":"8.2(1)","status":"affected"},{"version":"6.0(2)A8(7a)","status":"affected"},{"version":"7.0(3)I4(5)","status":"affected"},{"version":"7.3(1)D1(1)","status":"affected"},{"version":"7.0(3)I4(6)","status":"affected"},{"version":"7.0(3)I4(3)","status":"affected"},{"version":"9.2(2v)","status":"affected"},{"version":"7.3(0)D1(1)","status":"affected"},{"version":"7.0(3)I4(7)","status":"affected"},{"version":"7.0(3)I4(1)","status":"affected"},{"version":"7.0(3)I4(8)","status":"affected"},{"version":"7.0(3)I4(2)","status":"affected"},{"version":"6.0(2)A8(11)","status":"affected"},{"version":"7.3(4)D1(1)","status":"affected"},{"version":"9.2(1)","status":"affected"},{"version":"9.2(2t)","status":"affected"},{"version":"9.2(3y)","status":"affected"},{"version":"7.0(3)I4(1t)","status":"affected"},{"version":"7.0(3)I7(6z)","status":"affected"},{"version":"9.3(2)","status":"affected"},{"version":"7.3(1)DY(1)","status":"affected"},{"version":"7.0(3)F3(3)","status":"affected"},{"version":"7.0(3)I7(3z)","status":"affected"},{"version":"7.0(3)IM7(2)","status":"affected"},{"version":"6.0(2)A8(11b)","status":"affected"},{"version":"7.0(3)I7(5a)","status":"affected"},{"version":"8.1(1)","status":"affected"},{"version":"7.0(3)I6(1)","status":"affected"},{"version":"8.2(2)","status":"affected"},{"version":"7.0(3)I5(3b)","status":"affected"},{"version":"8.3(2)","status":"affected"},{"version":"7.3(2)D1(3a)","status":"affected"},{"version":"9.2(4)","status":"affected"},{"version":"6.0(2)A8(10)","status":"affected"},{"version":"6.0(2)A8(2)","status":"affected"},{"version":"7.0(3)IC4(4)","status":"affected"},{"version":"8.1(2)","status":"affected"},{"version":"7.0(3)F3(3c)","status":"affected"},{"version":"7.3(3)D1(1)","status":"affected"},{"version":"7.0(3)F3(1)","status":"affected"},{"version":"7.0(3)F3(5)","status":"affected"},{"version":"8.2(3)","status":"affected"},{"version":"7.0(3)I7(2)","status":"affected"},{"version":"7.0(3)I5(3)","status":"affected"},{"version":"7.0(3)I7(3)","status":"affected"},{"version":"6.0(2)A8(6)","status":"affected"},{"version":"7.0(3)I6(2)","status":"affected"},{"version":"8.3(1)","status":"affected"},{"version":"8.4(1)","status":"affected"},{"version":"8.1(1b)","status":"affected"},{"version":"6.0(2)A8(5)","status":"affected"},{"version":"7.3(0)DX(1)","status":"affected"},{"version":"7.3(2)D1(1)","status":"affected"},{"version":"9.3(1)","status":"affected"},{"version":"6.0(2)A8(7)","status":"affected"},{"version":"7.0(3)I7(6)","status":"affected"},{"version":"7.3(2)D1(2)","status":"affected"},{"version":"6.0(2)A8(11a)","status":"affected"},{"version":"7.0(3)I4(8z)","status":"affected"},{"version":"7.0(3)I4(9)","status":"affected"},{"version":"8.2(4)","status":"affected"},{"version":"7.0(3)I7(4)","status":"affected"},{"version":"7.0(3)I7(7)","status":"affected"},{"version":"7.3(0)DY(1)","status":"affected"},{"version":"6.0(2)A8(9)","status":"affected"},{"version":"6.0(2)A8(1)","status":"affected"},{"version":"6.0(2)A8(10a)","status":"affected"},{"version":"7.0(3)I5(1)","status":"affected"},{"version":"9.3(1z)","status":"affected"},{"version":"9.2(2)","status":"affected"},{"version":"7.0(3)F3(4)","status":"affected"},{"version":"7.0(3)I4(8b)","status":"affected"},{"version":"8.1(2a)","status":"affected"},{"version":"7.3(2)D1(3)","status":"affected"},{"version":"6.0(2)A8(3)","status":"affected"},{"version":"7.0(3)I4(6t)","status":"affected"},{"version":"7.0(3)I5(3a)","status":"affected"},{"version":"8.1(1a)","status":"affected"},{"version":"6.0(2)A8(8)","status":"affected"},{"version":"7.0(3)I7(5)","status":"affected"},{"version":"7.0(3)F3(3a)","status":"affected"},{"version":"6.0(2)A8(4)","status":"affected"},{"version":"7.0(3)I4(8a)","status":"affected"},{"version":"7.0(3)F3(2)","status":"affected"},{"version":"7.0(3)I4(4)","status":"affected"},{"version":"7.0(3)I7(1)","status":"affected"},{"version":"7.0(3)IA7(2)","status":"affected"},{"version":"7.0(3)IA7(1)","status":"affected"},{"version":"6.0(2)A8(7b)","status":"affected"},{"version":"6.0(2)A8(4a)","status":"affected"},{"version":"8.4(1a)","status":"affected"},{"version":"9.3(3)","status":"affected"},{"version":"7.3(2)D1(1d)","status":"affected"},{"version":"7.0(3)I7(8)","status":"affected"},{"version":"9.3(4)","status":"affected"},{"version":"7.3(6)D1(1)","status":"affected"},{"version":"8.2(6)","status":"affected"},{"version":"9.3(5)","status":"affected"},{"version":"8.4(2a)","status":"affected"},{"version":"8.4(2b)","status":"affected"},{"version":"7.0(3)I7(9)","status":"affected"},{"version":"8.5(1)","status":"affected"},{"version":"9.3(6)","status":"affected"},{"version":"10.1(2)","status":"affected"},{"version":"10.1(1)","status":"affected"},{"version":"8.4(4)","status":"affected"},{"version":"7.3(7)D1(1)","status":"affected"},{"version":"8.4(2c)","status":"affected"},{"version":"9.3(5w)","status":"affected"},{"version":"8.2(7)","status":"affected"},{"version":"9.3(7)","status":"affected"},{"version":"9.3(7k)","status":"affected"},{"version":"7.0(3)I7(9w)","status":"affected"},{"version":"10.2(1)","status":"affected"},{"version":"7.3(8)D1(1)","status":"affected"},{"version":"9.3(7a)","status":"affected"},{"version":"8.2(7a)","status":"affected"},{"version":"9.3(8)","status":"affected"},{"version":"8.4(4a)","status":"affected"},{"version":"8.4(2d)","status":"affected"},{"version":"8.4(5)","status":"affected"},{"version":"7.0(3)I7(10)","status":"affected"},{"version":"8.2(8)","status":"affected"},{"version":"10.2(1q)","status":"affected"},{"version":"10.2(2)","status":"affected"},{"version":"9.3(9)","status":"affected"},{"version":"10.1(2t)","status":"affected"},{"version":"7.3(9)D1(1)","status":"affected"},{"version":"10.2(3)","status":"affected"},{"version":"8.4(6)","status":"affected"},{"version":"10.2(3t)","status":"affected"},{"version":"8.4(2e)","status":"affected"},{"version":"9.3(10)","status":"affected"},{"version":"10.2(2a)","status":"affected"},{"version":"9.2(1a)","status":"affected"},{"version":"8.2(9)","status":"affected"},{"version":"10.3(1)","status":"affected"},{"version":"10.2(4)","status":"affected"},{"version":"8.4(7)","status":"affected"},{"version":"10.3(2)","status":"affected"},{"version":"8.4(6a)","status":"affected"},{"version":"9.3(11)","status":"affected"},{"version":"10.3(3)","status":"affected"},{"version":"10.2(5)","status":"affected"},{"version":"9.4(1)","status":"affected"},{"version":"9.3(2a)","status":"affected"},{"version":"8.4(2f)","status":"affected"},{"version":"8.2(10)","status":"affected"},{"version":"9.3(12)","status":"affected"},{"version":"10.2(3v)","status":"affected"},{"version":"10.4(1)","status":"affected"},{"version":"8.4(8)","status":"affected"},{"version":"10.3(99w)","status":"affected"},{"version":"10.2(6)","status":"affected"},{"version":"10.3(3w)","status":"affected"},{"version":"10.3(99x)","status":"affected"},{"version":"10.3(3o)","status":"affected"},{"version":"8.4(9)","status":"affected"},{"version":"10.3(4)","status":"affected"},{"version":"10.3(3p)","status":"affected"},{"version":"10.3(4a)","status":"affected"},{"version":"9.4(1a)","status":"affected"},{"version":"10.4(2)","status":"affected"},{"version":"10.3(3q)","status":"affected"},{"version":"9.3(13)","status":"affected"},{"version":"8.2(11)","status":"affected"},{"version":"10.3(5)","status":"affected"},{"version":"10.2(7)","status":"affected"},{"version":"10.4(3)","status":"affected"},{"version":"10.3(3x)","status":"affected"},{"version":"10.3(4g)","status":"affected"},{"version":"10.5(1)","status":"affected"},{"version":"10.2(8)","status":"affected"},{"version":"10.3(3r)","status":"affected"},{"version":"10.3(6)","status":"affected"},{"version":"9.3(14)","status":"affected"},{"version":"10.4(4)","status":"affected"},{"version":"10.3(4h)","status":"affected"},{"version":"10.4(4g)","status":"affected"}]},{"vendor":"Cisco","product":"Cisco NX-OS System Software in ACI Mode","defaultStatus":"unknown","versions":[{"version":"14.1(1j)","status":"affected"},{"version":"14.0(3d)","status":"affected"},{"version":"14.1(1k)","status":"affected"},{"version":"13.2(1m)","status":"affected"},{"version":"14.0(3c)","status":"affected"},{"version":"13.2(2l)","status":"affected"},{"version":"13.2(7k)","status":"affected"},{"version":"14.1(1l)","status":"affected"},{"version":"14.2(2f)","status":"affected"},{"version":"13.2(3s)","status":"affected"},{"version":"13.2(2o)","status":"affected"},{"version":"14.0(2c)","status":"affected"},{"version":"14.1(2m)","status":"affected"},{"version":"13.2(5e)","status":"affected"},{"version":"14.1(2o)","status":"affected"},{"version":"13.2(7f)","status":"affected"},{"version":"13.2(41d)","status":"affected"},{"version":"13.2(4d)","status":"affected"},{"version":"13.2(3o)","status":"affected"},{"version":"13.2(1l)","status":"affected"},{"version":"14.0(1h)","status":"affected"},{"version":"13.2(3n)","status":"affected"},{"version":"14.2(1l)","status":"affected"},{"version":"14.2(2e)","status":"affected"},{"version":"13.2(4e)","status":"affected"},{"version":"14.2(1i)","status":"affected"},{"version":"13.2(9b)","status":"affected"},{"version":"14.1(2s)","status":"affected"},{"version":"14.1(1i)","status":"affected"},{"version":"14.1(2g)","status":"affected"},{"version":"13.2(3j)","status":"affected"},{"version":"13.2(5d)","status":"affected"},{"version":"13.2(6i)","status":"affected"},{"version":"14.1(2u)","status":"affected"},{"version":"13.2(3i)","status":"affected"},{"version":"13.2(3r)","status":"affected"},{"version":"13.2(5f)","status":"affected"},{"version":"14.2(1j)","status":"affected"},{"version":"14.1(2w)","status":"affected"},{"version":"14.2(3n)","status":"affected"},{"version":"14.2(3l)","status":"affected"},{"version":"14.2(3j)","status":"affected"},{"version":"14.2(2g)","status":"affected"},{"version":"13.2(8d)","status":"affected"},{"version":"14.1(2x)","status":"affected"},{"version":"13.2(9f)","status":"affected"},{"version":"14.2(3q)","status":"affected"},{"version":"14.2(4i)","status":"affected"},{"version":"13.2(9h)","status":"affected"},{"version":"15.0(1k)","status":"affected"},{"version":"14.2(4k)","status":"affected"},{"version":"15.0(1l)","status":"affected"},{"version":"15.0(2e)","status":"affected"},{"version":"14.2(4o)","status":"affected"},{"version":"14.2(4p)","status":"affected"},{"version":"15.0(2h)","status":"affected"},{"version":"14.2(5k)","status":"affected"},{"version":"14.2(5l)","status":"affected"},{"version":"14.2(5n)","status":"affected"},{"version":"15.1(1h)","status":"affected"},{"version":"14.2(6d)","status":"affected"},{"version":"15.1(2e)","status":"affected"},{"version":"14.2(6g)","status":"affected"},{"version":"14.2(6h)","status":"affected"},{"version":"15.1(3e)","status":"affected"},{"version":"13.2(10e)","status":"affected"},{"version":"14.2(6l)","status":"affected"},{"version":"14.2(7f)","status":"affected"},{"version":"15.1(4c)","status":"affected"},{"version":"14.2(6o)","status":"affected"},{"version":"15.2(1g)","status":"affected"},{"version":"15.2(2e)","status":"affected"},{"version":"14.2(7l)","status":"affected"},{"version":"13.2(10f)","status":"affected"},{"version":"15.2(2f)","status":"affected"},{"version":"15.2(2g)","status":"affected"},{"version":"14.2(7q)","status":"affected"},{"version":"15.2(2h)","status":"affected"},{"version":"15.2(3f)","status":"affected"},{"version":"15.2(3e)","status":"affected"},{"version":"15.2(3g)","status":"affected"},{"version":"14.2(7r)","status":"affected"},{"version":"14.2(7s)","status":"affected"},{"version":"15.2(4d)","status":"affected"},{"version":"15.2(4e)","status":"affected"},{"version":"14.2(7t)","status":"affected"},{"version":"15.2(5c)","status":"affected"},{"version":"15.2(5d)","status":"affected"},{"version":"13.2(10g)","status":"affected"},{"version":"16.0(1g)","status":"affected"},{"version":"14.2(7u)","status":"affected"},{"version":"15.2(5e)","status":"affected"},{"version":"15.2(4f)","status":"affected"},{"version":"15.2(6e)","status":"affected"},{"version":"15.2(6h)","status":"affected"},{"version":"16.0(1j)","status":"affected"},{"version":"15.2(6g)","status":"affected"},{"version":"15.2(7f)","status":"affected"},{"version":"14.2(7v)","status":"affected"},{"version":"15.2(7g)","status":"affected"},{"version":"16.0(2h)","status":"affected"},{"version":"14.2(7w)","status":"affected"},{"version":"15.2(8d)","status":"affected"},{"version":"16.0(2j)","status":"affected"},{"version":"15.2(8e)","status":"affected"},{"version":"16.0(3d)","status":"affected"},{"version":"16.0(3e)","status":"affected"},{"version":"15.2(8f)","status":"affected"},{"version":"15.2(8g)","status":"affected"},{"version":"15.3(1d)","status":"affected"},{"version":"15.2(8h)","status":"affected"},{"version":"16.0(4c)","status":"affected"},{"version":"15.3(2a)","status":"affected"},{"version":"15.2(8i)","status":"affected"},{"version":"16.0(5h)","status":"affected"},{"version":"15.3(2b)","status":"affected"},{"version":"16.0(3g)","status":"affected"},{"version":"16.0(5j)","status":"affected"},{"version":"15.3(2c)","status":"affected"},{"version":"16.0(6c)","status":"affected"},{"version":"15.3(2d)","status":"affected"},{"version":"16.1(1f)","status":"affected"},{"version":"16.0(7e)","status":"affected"},{"version":"16.0(8e)","status":"affected"},{"version":"15.3(2e)","status":"affected"}]},{"vendor":"Cisco","product":"Cisco Unified Computing System (Managed)","defaultStatus":"unknown","versions":[{"version":"4.0(4c)","status":"affected"},{"version":"4.0(2b)","status":"affected"},{"version":"4.1(2a)","status":"affected"},{"version":"4.0(1a)","status":"affected"},{"version":"4.0(2a)","status":"affected"},{"version":"4.0(1b)","status":"affected"},{"version":"4.1(1c)","status":"affected"},{"version":"4.0(4a)","status":"affected"},{"version":"4.0(4b)","status":"affected"},{"version":"4.0(2e)","status":"affected"},{"version":"4.1(1a)","status":"affected"},{"version":"4.0(4d)","status":"affected"},{"version":"4.0(4h)","status":"affected"},{"version":"4.0(4g)","status":"affected"},{"version":"4.0(1d)","status":"affected"},{"version":"4.1(1e)","status":"affected"},{"version":"4.0(4f)","status":"affected"},{"version":"4.0(4e)","status":"affected"},{"version":"4.0(4i)","status":"affected"},{"version":"4.1(1d)","status":"affected"},{"version":"4.0(2d)","status":"affected"},{"version":"4.1(1b)","status":"affected"},{"version":"4.0(1c)","status":"affected"},{"version":"4.1(2b)","status":"affected"},{"version":"4.0(4k)","status":"affected"},{"version":"4.1(3a)","status":"affected"},{"version":"4.1(3b)","status":"affected"},{"version":"4.1(2c)","status":"affected"},{"version":"4.0(4l)","status":"affected"},{"version":"4.1(4a)","status":"affected"},{"version":"4.1(3c)","status":"affected"},{"version":"4.1(3d)","status":"affected"},{"version":"4.2(1c)","status":"affected"},{"version":"4.2(1d)","status":"affected"},{"version":"4.0(4m)","status":"affected"},{"version":"4.1(3e)","status":"affected"},{"version":"4.2(1f)","status":"affected"},{"version":"4.1(3f)","status":"affected"},{"version":"4.2(1i)","status":"affected"},{"version":"4.1(3h)","status":"affected"},{"version":"4.2(1k)","status":"affected"},{"version":"4.2(1l)","status":"affected"},{"version":"4.0(4n)","status":"affected"},{"version":"4.2(1m)","status":"affected"},{"version":"4.1(3i)","status":"affected"},{"version":"4.2(2a)","status":"affected"},{"version":"4.2(1n)","status":"affected"},{"version":"4.1(3j)","status":"affected"},{"version":"4.2(2c)","status":"affected"},{"version":"4.2(2d)","status":"affected"},{"version":"4.2(3b)","status":"affected"},{"version":"4.1(3k)","status":"affected"},{"version":"4.0(4o)","status":"affected"},{"version":"4.2(2e)","status":"affected"},{"version":"4.2(3d)","status":"affected"},{"version":"4.2(3e)","status":"affected"},{"version":"4.2(3g)","status":"affected"},{"version":"4.1(3l)","status":"affected"},{"version":"4.3(2b)","status":"affected"},{"version":"4.2(3h)","status":"affected"},{"version":"4.2(3i)","status":"affected"},{"version":"4.3(2c)","status":"affected"},{"version":"4.1(3m)","status":"affected"},{"version":"4.3(2e)","status":"affected"},{"version":"4.3(3a)","status":"affected"},{"version":"4.2(3j)","status":"affected"},{"version":"4.3(3c)","status":"affected"},{"version":"4.2(3k)","status":"affected"},{"version":"4.2(3l)","status":"affected"},{"version":"4.3(2f)","status":"affected"},{"version":"4.2(3m)","status":"affected"}]}],"references":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-image-sig-bypas-pQDRQvjL"],"weaknesses":["CWE-284"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/20xxx/CVE-2024-20397.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-20397","state":"PUBLISHED","datePublished":"2024-12-04T16:13:13.890Z","dateUpdated":"2025-04-08T14:29:18.430Z","assignerShortName":"cisco","assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","dateReserved":"2023-11-08T15:08:07.660Z"},"containers":{"cna":{"title":"Cisco NX-OS Software Image Verification Bypass Vulnerability","descriptions":[{"lang":"en","value":"A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative credentials, to bypass NX-OS image signature verification. \r\n\r\nThis vulnerability is due to insecure bootloader settings. An attacker could exploit this vulnerability by executing a series of bootloader commands. A successful exploit could allow the attacker to bypass NX-OS image signature verification and load unverified software."}],"affected":[{"vendor":"Cisco","product":"Cisco NX-OS Software","defaultStatus":"unknown","versions":[{"version":"8.2(5)","status":"affected"},{"version":"7.3(5)D1(1)","status":"affected"},{"version":"8.4(2)","status":"affected"},{"version":"8.4(3)","status":"affected"},{"version":"9.2(3)","status":"affected"},{"version":"7.0(3)I5(2)","status":"affected"},{"version":"8.2(1)","status":"affected"},{"version":"6.0(2)A8(7a)","status":"affected"},{"version":"7.0(3)I4(5)","status":"affected"},{"version":"7.3(1)D1(1)","status":"affected"},{"version":"7.0(3)I4(6)","status":"affected"},{"version":"7.0(3)I4(3)","status":"affected"},{"version":"9.2(2v)","status":"affected"},{"version":"7.3(0)D1(1)","status":"affected"},{"version":"7.0(3)I4(7)","status":"affected"},{"version":"7.0(3)I4(1)","status":"affected"},{"version":"7.0(3)I4(8)","status":"affected"},{"version":"7.0(3)I4(2)","status":"affected"},{"version":"6.0(2)A8(11)","status":"affected"},{"version":"7.3(4)D1(1)","status":"affected"},{"version":"9.2(1)","status":"affected"},{"version":"9.2(2t)","status":"affected"},{"version":"9.2(3y)","status":"affected"},{"version":"7.0(3)I4(1t)","status":"affected"},{"version":"7.0(3)I7(6z)","status":"affected"},{"version":"9.3(2)","status":"affected"},{"version":"7.3(1)DY(1)","status":"affected"},{"version":"7.0(3)F3(3)","status":"affected"},{"version":"7.0(3)I7(3z)","status":"affected"},{"version":"7.0(3)IM7(2)","status":"affected"},{"version":"6.0(2)A8(11b)","status":"affected"},{"version":"7.0(3)I7(5a)","status":"affected"},{"version":"8.1(1)","status":"affected"},{"version":"7.0(3)I6(1)","status":"affected"},{"version":"8.2(2)","status":"affected"},{"version":"7.0(3)I5(3b)","status":"affected"},{"version":"8.3(2)","status":"affected"},{"version":"7.3(2)D1(3a)","status":"affected"},{"version":"9.2(4)","status":"affected"},{"version":"6.0(2)A8(10)","status":"affected"},{"version":"6.0(2)A8(2)","status":"affected"},{"version":"7.0(3)IC4(4)","status":"affected"},{"version":"8.1(2)","status":"affected"},{"version":"7.0(3)F3(3c)","status":"affected"},{"version":"7.3(3)D1(1)","status":"affected"},{"version":"7.0(3)F3(1)","status":"affected"},{"version":"7.0(3)F3(5)","status":"affected"},{"version":"8.2(3)","status":"affected"},{"version":"7.0(3)I7(2)","status":"affected"},{"version":"7.0(3)I5(3)","status":"affected"},{"version":"7.0(3)I7(3)","status":"affected"},{"version":"6.0(2)A8(6)","status":"affected"},{"version":"7.0(3)I6(2)","status":"affected"},{"version":"8.3(1)","status":"affected"},{"version":"8.4(1)","status":"affected"},{"version":"8.1(1b)","status":"affected"},{"version":"6.0(2)A8(5)","status":"affected"},{"version":"7.3(0)DX(1)","status":"affected"},{"version":"7.3(2)D1(1)","status":"affected"},{"version":"9.3(1)","status":"affected"},{"version":"6.0(2)A8(7)","status":"affected"},{"version":"7.0(3)I7(6)","status":"affected"},{"version":"7.3(2)D1(2)","status":"affected"},{"version":"6.0(2)A8(11a)","status":"affected"},{"version":"7.0(3)I4(8z)","status":"affected"},{"version":"7.0(3)I4(9)","status":"affected"},{"version":"8.2(4)","status":"affected"},{"version":"7.0(3)I7(4)","status":"affected"},{"version":"7.0(3)I7(7)","status":"affected"},{"version":"7.3(0)DY(1)","status":"affected"},{"version":"6.0(2)A8(9)","status":"affected"},{"version":"6.0(2)A8(1)","status":"affected"},{"version":"6.0(2)A8(10a)","status":"affected"},{"version":"7.0(3)I5(1)","status":"affected"},{"version":"9.3(1z)","status":"affected"},{"version":"9.2(2)","status":"affected"},{"version":"7.0(3)F3(4)","status":"affected"},{"version":"7.0(3)I4(8b)","status":"affected"},{"version":"8.1(2a)","status":"affected"},{"version":"7.3(2)D1(3)","status":"affected"},{"version":"6.0(2)A8(3)","status":"affected"},{"version":"7.0(3)I4(6t)","status":"affected"},{"version":"7.0(3)I5(3a)","status":"affected"},{"version":"8.1(1a)","status":"affected"},{"version":"6.0(2)A8(8)","status":"affected"},{"version":"7.0(3)I7(5)","status":"affected"},{"version":"7.0(3)F3(3a)","status":"affected"},{"version":"6.0(2)A8(4)","status":"affected"},{"version":"7.0(3)I4(8a)","status":"affected"},{"version":"7.0(3)F3(2)","status":"affected"},{"version":"7.0(3)I4(4)","status":"affected"},{"version":"7.0(3)I7(1)","status":"affected"},{"version":"7.0(3)IA7(2)","status":"affected"},{"version":"7.0(3)IA7(1)","status":"affected"},{"version":"6.0(2)A8(7b)","status":"affected"},{"version":"6.0(2)A8(4a)","status":"affected"},{"version":"8.4(1a)","status":"affected"},{"version":"9.3(3)","status":"affected"},{"version":"7.3(2)D1(1d)","status":"affected"},{"version":"7.0(3)I7(8)","status":"affected"},{"version":"9.3(4)","status":"affected"},{"version":"7.3(6)D1(1)","status":"affected"},{"version":"8.2(6)","status":"affected"},{"version":"9.3(5)","status":"affected"},{"version":"8.4(2a)","status":"affected"},{"version":"8.4(2b)","status":"affected"},{"version":"7.0(3)I7(9)","status":"affected"},{"version":"8.5(1)","status":"affected"},{"version":"9.3(6)","status":"affected"},{"version":"10.1(2)","status":"affected"},{"version":"10.1(1)","status":"affected"},{"version":"8.4(4)","status":"affected"},{"version":"7.3(7)D1(1)","status":"affected"},{"version":"8.4(2c)","status":"affected"},{"version":"9.3(5w)","status":"affected"},{"version":"8.2(7)","status":"affected"},{"version":"9.3(7)","status":"affected"},{"version":"9.3(7k)","status":"affected"},{"version":"7.0(3)I7(9w)","status":"affected"},{"version":"10.2(1)","status":"affected"},{"version":"7.3(8)D1(1)","status":"affected"},{"version":"9.3(7a)","status":"affected"},{"version":"8.2(7a)","status":"affected"},{"version":"9.3(8)","status":"affected"},{"version":"8.4(4a)","status":"affected"},{"version":"8.4(2d)","status":"affected"},{"version":"8.4(5)","status":"affected"},{"version":"7.0(3)I7(10)","status":"affected"},{"version":"8.2(8)","status":"affected"},{"version":"10.2(1q)","status":"affected"},{"version":"10.2(2)","status":"affected"},{"version":"9.3(9)","status":"affected"},{"version":"10.1(2t)","status":"affected"},{"version":"7.3(9)D1(1)","status":"affected"},{"version":"10.2(3)","status":"affected"},{"version":"8.4(6)","status":"affected"},{"version":"10.2(3t)","status":"affected"},{"version":"8.4(2e)","status":"affected"},{"version":"9.3(10)","status":"affected"},{"version":"10.2(2a)","status":"affected"},{"version":"9.2(1a)","status":"affected"},{"version":"8.2(9)","status":"affected"},{"version":"10.3(1)","status":"affected"},{"version":"10.2(4)","status":"affected"},{"version":"8.4(7)","status":"affected"},{"version":"10.3(2)","status":"affected"},{"version":"8.4(6a)","status":"affected"},{"version":"9.3(11)","status":"affected"},{"version":"10.3(3)","status":"affected"},{"version":"10.2(5)","status":"affected"},{"version":"9.4(1)","status":"affected"},{"version":"9.3(2a)","status":"affected"},{"version":"8.4(2f)","status":"affected"},{"version":"8.2(10)","status":"affected"},{"version":"9.3(12)","status":"affected"},{"version":"10.2(3v)","status":"affected"},{"version":"10.4(1)","status":"affected"},{"version":"8.4(8)","status":"affected"},{"version":"10.3(99w)","status":"affected"},{"version":"10.2(6)","status":"affected"},{"version":"10.3(3w)","status":"affected"},{"version":"10.3(99x)","status":"affected"},{"version":"10.3(3o)","status":"affected"},{"version":"8.4(9)","status":"affected"},{"version":"10.3(4)","status":"affected"},{"version":"10.3(3p)","status":"affected"},{"version":"10.3(4a)","status":"affected"},{"version":"9.4(1a)","status":"affected"},{"version":"10.4(2)","status":"affected"},{"version":"10.3(3q)","status":"affected"},{"version":"9.3(13)","status":"affected"},{"version":"8.2(11)","status":"affected"},{"version":"10.3(5)","status":"affected"},{"version":"10.2(7)","status":"affected"},{"version":"10.4(3)","status":"affected"},{"version":"10.3(3x)","status":"affected"},{"version":"10.3(4g)","status":"affected"},{"version":"10.5(1)","status":"affected"},{"version":"10.2(8)","status":"affected"},{"version":"10.3(3r)","status":"affected"},{"version":"10.3(6)","status":"affected"},{"version":"9.3(14)","status":"affected"},{"version":"10.4(4)","status":"affected"},{"version":"10.3(4h)","status":"affected"},{"version":"10.4(4g)","status":"affected"}]},{"vendor":"Cisco","product":"Cisco NX-OS System Software in ACI Mode","defaultStatus":"unknown","versions":[{"version":"14.1(1j)","status":"affected"},{"version":"14.0(3d)","status":"affected"},{"version":"14.1(1k)","status":"affected"},{"version":"13.2(1m)","status":"affected"},{"version":"14.0(3c)","status":"affected"},{"version":"13.2(2l)","status":"affected"},{"version":"13.2(7k)","status":"affected"},{"version":"14.1(1l)","status":"affected"},{"version":"14.2(2f)","status":"affected"},{"version":"13.2(3s)","status":"affected"},{"version":"13.2(2o)","status":"affected"},{"version":"14.0(2c)","status":"affected"},{"version":"14.1(2m)","status":"affected"},{"version":"13.2(5e)","status":"affected"},{"version":"14.1(2o)","status":"affected"},{"version":"13.2(7f)","status":"affected"},{"version":"13.2(41d)","status":"affected"},{"version":"13.2(4d)","status":"affected"},{"version":"13.2(3o)","status":"affected"},{"version":"13.2(1l)","status":"affected"},{"version":"14.0(1h)","status":"affected"},{"version":"13.2(3n)","status":"affected"},{"version":"14.2(1l)","status":"affected"},{"version":"14.2(2e)","status":"affected"},{"version":"13.2(4e)","status":"affected"},{"version":"14.2(1i)","status":"affected"},{"version":"13.2(9b)","status":"affected"},{"version":"14.1(2s)","status":"affected"},{"version":"14.1(1i)","status":"affected"},{"version":"14.1(2g)","status":"affected"},{"version":"13.2(3j)","status":"affected"},{"version":"13.2(5d)","status":"affected"},{"version":"13.2(6i)","status":"affected"},{"version":"14.1(2u)","status":"affected"},{"version":"13.2(3i)","status":"affected"},{"version":"13.2(3r)","status":"affected"},{"version":"13.2(5f)","status":"affected"},{"version":"14.2(1j)","status":"affected"},{"version":"14.1(2w)","status":"affected"},{"version":"14.2(3n)","status":"affected"},{"version":"14.2(3l)","status":"affected"},{"version":"14.2(3j)","status":"affected"},{"version":"14.2(2g)","status":"affected"},{"version":"13.2(8d)","status":"affected"},{"version":"14.1(2x)","status":"affected"},{"version":"13.2(9f)","status":"affected"},{"version":"14.2(3q)","status":"affected"},{"version":"14.2(4i)","status":"affected"},{"version":"13.2(9h)","status":"affected"},{"version":"15.0(1k)","status":"affected"},{"version":"14.2(4k)","status":"affected"},{"version":"15.0(1l)","status":"affected"},{"version":"15.0(2e)","status":"affected"},{"version":"14.2(4o)","status":"affected"},{"version":"14.2(4p)","status":"affected"},{"version":"15.0(2h)","status":"affected"},{"version":"14.2(5k)","status":"affected"},{"version":"14.2(5l)","status":"affected"},{"version":"14.2(5n)","status":"affected"},{"version":"15.1(1h)","status":"affected"},{"version":"14.2(6d)","status":"affected"},{"version":"15.1(2e)","status":"affected"},{"version":"14.2(6g)","status":"affected"},{"version":"14.2(6h)","status":"affected"},{"version":"15.1(3e)","status":"affected"},{"version":"13.2(10e)","status":"affected"},{"version":"14.2(6l)","status":"affected"},{"version":"14.2(7f)","status":"affected"},{"version":"15.1(4c)","status":"affected"},{"version":"14.2(6o)","status":"affected"},{"version":"15.2(1g)","status":"affected"},{"version":"15.2(2e)","status":"affected"},{"version":"14.2(7l)","status":"affected"},{"version":"13.2(10f)","status":"affected"},{"version":"15.2(2f)","status":"affected"},{"version":"15.2(2g)","status":"affected"},{"version":"14.2(7q)","status":"affected"},{"version":"15.2(2h)","status":"affected"},{"version":"15.2(3f)","status":"affected"},{"version":"15.2(3e)","status":"affected"},{"version":"15.2(3g)","status":"affected"},{"version":"14.2(7r)","status":"affected"},{"version":"14.2(7s)","status":"affected"},{"version":"15.2(4d)","status":"affected"},{"version":"15.2(4e)","status":"affected"},{"version":"14.2(7t)","status":"affected"},{"version":"15.2(5c)","status":"affected"},{"version":"15.2(5d)","status":"affected"},{"version":"13.2(10g)","status":"affected"},{"version":"16.0(1g)","status":"affected"},{"version":"14.2(7u)","status":"affected"},{"version":"15.2(5e)","status":"affected"},{"version":"15.2(4f)","status":"affected"},{"version":"15.2(6e)","status":"affected"},{"version":"15.2(6h)","status":"affected"},{"version":"16.0(1j)","status":"affected"},{"version":"15.2(6g)","status":"affected"},{"version":"15.2(7f)","status":"affected"},{"version":"14.2(7v)","status":"affected"},{"version":"15.2(7g)","status":"affected"},{"version":"16.0(2h)","status":"affected"},{"version":"14.2(7w)","status":"affected"},{"version":"15.2(8d)","status":"affected"},{"version":"16.0(2j)","status":"affected"},{"version":"15.2(8e)","status":"affected"},{"version":"16.0(3d)","status":"affected"},{"version":"16.0(3e)","status":"affected"},{"version":"15.2(8f)","status":"affected"},{"version":"15.2(8g)","status":"affected"},{"version":"15.3(1d)","status":"affected"},{"version":"15.2(8h)","status":"affected"},{"version":"16.0(4c)","status":"affected"},{"version":"15.3(2a)","status":"affected"},{"version":"15.2(8i)","status":"affected"},{"version":"16.0(5h)","status":"affected"},{"version":"15.3(2b)","status":"affected"},{"version":"16.0(3g)","status":"affected"},{"version":"16.0(5j)","status":"affected"},{"version":"15.3(2c)","status":"affected"},{"version":"16.0(6c)","status":"affected"},{"version":"15.3(2d)","status":"affected"},{"version":"16.1(1f)","status":"affected"},{"version":"16.0(7e)","status":"affected"},{"version":"16.0(8e)","status":"affected"},{"version":"15.3(2e)","status":"affected"}]},{"vendor":"Cisco","product":"Cisco Unified Computing System (Managed)","defaultStatus":"unknown","versions":[{"version":"4.0(4c)","status":"affected"},{"version":"4.0(2b)","status":"affected"},{"version":"4.1(2a)","status":"affected"},{"version":"4.0(1a)","status":"affected"},{"version":"4.0(2a)","status":"affected"},{"version":"4.0(1b)","status":"affected"},{"version":"4.1(1c)","status":"affected"},{"version":"4.0(4a)","status":"affected"},{"version":"4.0(4b)","status":"affected"},{"version":"4.0(2e)","status":"affected"},{"version":"4.1(1a)","status":"affected"},{"version":"4.0(4d)","status":"affected"},{"version":"4.0(4h)","status":"affected"},{"version":"4.0(4g)","status":"affected"},{"version":"4.0(1d)","status":"affected"},{"version":"4.1(1e)","status":"affected"},{"version":"4.0(4f)","status":"affected"},{"version":"4.0(4e)","status":"affected"},{"version":"4.0(4i)","status":"affected"},{"version":"4.1(1d)","status":"affected"},{"version":"4.0(2d)","status":"affected"},{"version":"4.1(1b)","status":"affected"},{"version":"4.0(1c)","status":"affected"},{"version":"4.1(2b)","status":"affected"},{"version":"4.0(4k)","status":"affected"},{"version":"4.1(3a)","status":"affected"},{"version":"4.1(3b)","status":"affected"},{"version":"4.1(2c)","status":"affected"},{"version":"4.0(4l)","status":"affected"},{"version":"4.1(4a)","status":"affected"},{"version":"4.1(3c)","status":"affected"},{"version":"4.1(3d)","status":"affected"},{"version":"4.2(1c)","status":"affected"},{"version":"4.2(1d)","status":"affected"},{"version":"4.0(4m)","status":"affected"},{"version":"4.1(3e)","status":"affected"},{"version":"4.2(1f)","status":"affected"},{"version":"4.1(3f)","status":"affected"},{"version":"4.2(1i)","status":"affected"},{"version":"4.1(3h)","status":"affected"},{"version":"4.2(1k)","status":"affected"},{"version":"4.2(1l)","status":"affected"},{"version":"4.0(4n)","status":"affected"},{"version":"4.2(1m)","status":"affected"},{"version":"4.1(3i)","status":"affected"},{"version":"4.2(2a)","status":"affected"},{"version":"4.2(1n)","status":"affected"},{"version":"4.1(3j)","status":"affected"},{"version":"4.2(2c)","status":"affected"},{"version":"4.2(2d)","status":"affected"},{"version":"4.2(3b)","status":"affected"},{"version":"4.1(3k)","status":"affected"},{"version":"4.0(4o)","status":"affected"},{"version":"4.2(2e)","status":"affected"},{"version":"4.2(3d)","status":"affected"},{"version":"4.2(3e)","status":"affected"},{"version":"4.2(3g)","status":"affected"},{"version":"4.1(3l)","status":"affected"},{"version":"4.3(2b)","status":"affected"},{"version":"4.2(3h)","status":"affected"},{"version":"4.2(3i)","status":"affected"},{"version":"4.3(2c)","status":"affected"},{"version":"4.1(3m)","status":"affected"},{"version":"4.3(2e)","status":"affected"},{"version":"4.3(3a)","status":"affected"},{"version":"4.2(3j)","status":"affected"},{"version":"4.3(3c)","status":"affected"},{"version":"4.2(3k)","status":"affected"},{"version":"4.2(3l)","status":"affected"},{"version":"4.3(2f)","status":"affected"},{"version":"4.2(3m)","status":"affected"}]}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-image-sig-bypas-pQDRQvjL","name":"cisco-sa-nxos-image-sig-bypas-pQDRQvjL"}],"metrics":[{"format":"cvssV3_1","cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N","baseScore":5.2,"baseSeverity":"MEDIUM","attackVector":"PHYSICAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"NONE"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-284","lang":"en","description":"Improper Access Control","type":"cwe"}]}],"providerMetadata":{"shortName":"cisco","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","dateUpdated":"2025-04-08T14:29:18.430Z"},"exploits":[{"lang":"en","value":"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}],"source":{"advisory":"cisco-sa-nxos-image-sig-bypas-pQDRQvjL","discovery":"EXTERNAL","defects":["CSCwm47438"]}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-12-04T19:27:41.534598Z","id":"CVE-2024-20397","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-12-04T21:39:35.478Z"}}]}}}