CVE-2025-20155

A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system. This vulnerability is due to insufficient input validation of the bootstrap file that is read by the system software when a device is first deployed in SD-WAN mode or when an administrator configures SD-Routing on the device. An attacker could exploit this vulnerability by modifying a bootstrap file generated by Cisco Catalyst SD-WAN Manager, loading it into the device flash, and then either reloading the device in a green field deployment in SD-WAN mode or configuring the device with SD-Routing. A successful exploit could allow the attacker to perform arbitrary file writes to the underlying operating system.

• CWE-1287

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bootstrap-KfgxYgdhVendor Advisory

Published

May 7, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-2015Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote C…7.8
• CVE-2025-20150A vulnerability in Cisco Nexus Dashboard could allow an unau…5.3
• CVE-2025-20151A vulnerability in the implementation of the Simple Network …4.3
• CVE-2025-20152A vulnerability in the RADIUS message processing feature of …8.6
• CVE-2025-20153A vulnerability in the email filtering mechanism of Cisco Se…5.3
• CVE-2025-20154A vulnerability in the Two-Way Active Measurement Protocol (…8.6
• CVE-2025-20156A vulnerability in the REST API of Cisco Meeting Management …9.9
• CVE-2025-20157A vulnerability in certificate validation processing of Cisc…5.9
• CVE-2025-20158A vulnerability in the debug shell of Cisco Video Phone 8875…4.4
• CVE-2025-20159A vulnerability in the management interface access control l…5.3
• CVE-2025-2016Ashlar-Vellum Cobalt VC6 File Parsing Type Confusion Remote …7.8
• CVE-2025-20160A vulnerability in the implementation of the TACACS+ protoco…8.1