CVE-2025-20248
Last modified
CVE-2025-20248 is a medium-severity vulnerability rated 6/10 on the CVSS scale. A vulnerability in the installation process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR Software image signature verification and load unsigned software on an affected device. To exploit this vulnerability, the attacker must have root-system privileges on the affected device. This vulnerability is due to incomplete validation of files during the installation of an .iso file. EPSS estimates a 0.10% chance of exploitation in the next 30 days.
Description
A vulnerability in the installation process of Cisco IOS XR Software could allow an authenticated, local attacker to bypass Cisco IOS XR Software image signature verification and load unsigned software on an affected device. To exploit this vulnerability, the attacker must have root-system privileges on the affected device. This vulnerability is due to incomplete validation of files during the installation of an .iso file. An attacker could exploit this vulnerability by modifying contents of the .iso image and then installing and activating it on the device. A successful exploit could allow the attacker to load an unsigned file as part of the image activation process.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-20248?
How severe is CVE-2025-20248?
How do I fix CVE-2025-20248?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-20241A vulnerability in the Intermediate System-to-Intermediate S…7.4
- CVE-2025-20242A vulnerability in the Cloud Connect component of Cisco Unif…9.1
- CVE-2025-20243A vulnerability in the management and VPN web servers of Cis…8.6
- CVE-2025-20244A vulnerability in the Remote Access SSL VPN service for Cis…7.7
- CVE-2025-20246A vulnerability in Cisco Webex could allow an unauthenticate…6.1
- CVE-2025-20247A vulnerability in Cisco Webex could allow an unauthenticate…6.1
- CVE-2025-2025The GiveWP – Donation Plugin and Fundraising Platform plugin…7.5
- CVE-2025-20250A vulnerability in Cisco Webex could allow an unauthenticate…6.1
- CVE-2025-20251A vulnerability in the Remote Access SSL VPN service for Cis…8.5
- CVE-2025-20252A vulnerability in the Internet Key Exchange Version 2 (IKEv…5.8
- CVE-2025-20253A vulnerability in the IKEv2 feature of Cisco IOS Software, …8.6
- CVE-2025-20254A vulnerability in the Internet Key Exchange Version 2 (IKEv…5.8
Are you affected by CVE-2025-20248?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST