CVE-2023-20236

A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device. This vulnerability is due to insufficient image verification. An attacker could exploit this vulnerability by manipulating the boot parameters for image verification during the iPXE boot process on an affected device. A successful exploit could allow the attacker to boot an unverified software image on the affected device.

• CWE-347
• CWE-345

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgBVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-ipxe-sigbypass-pymfyqgBVendor Advisory

Published

Sep 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20230A vulnerability in the restricted security domain implementa…5.4
• CVE-2023-20231A vulnerability in the web UI of Cisco IOS XE Software could…8.8
• CVE-2023-20232A vulnerability in the Tomcat implementation for Cisco Unifi…5.3
• CVE-2023-20233A vulnerability in the Connectivity Fault Management (CFM) f…6.5
• CVE-2023-20234A vulnerability in the CLI of Cisco FXOS Software could allo…6
• CVE-2023-20235A vulnerability in the on-device application development wor…8.8
• CVE-2023-20237A vulnerability in Cisco Intersight Virtual Appliance could …4.3
• CVE-2023-20238A vulnerability in the single sign-on (SSO) implementation o…9.8
• CVE-2023-20239Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-2024Improper authentication in OpenBlue Enterprise Manager Data …7.5
• CVE-2023-20240Multiple vulnerabilities in Cisco Secure Client Software, fo…5.5
• CVE-2023-20241Multiple vulnerabilities in Cisco Secure Client Software, fo…5.5