BDU:2025-11353
Уязвимость установщика операционной системы Cisco IOS XR, позволяющая нарушителю обойти существующие ограничения безопасности и выполнить произвольный код
📄 Описание
Уязвимость установщика операционной системы Cisco IOS XR связана с ошибками проверки криптографической подписи. Эксплуатация уязвимости может позволить нарушителю обойти существующие ограничения безопасности и выполнить произвольный код
🖥️ Уязвимое ПО
Cisco Systems Inc.
Наименование ПО: Cisco IOS XR
Версия ПО: до 7.10 включительно (Cisco IOS XR), 7.11 (Cisco IOS XR), до 24.2.21 (Cisco IOS XR), 24.3 (Cisco IOS XR), до 24.4.2 (Cisco IOS XR)
Тип ПО: Операционная система
ОС / платформа: Cisco Systems Inc. Cisco IOS XR до 7.10 включительно NCS 5700 Series Routers, Cisco Systems Inc. Cisco IOS XR до 7.10 включительно ASR 9000 Series Aggregation Services Routers (64-bit), Cisco Systems Inc. Cisco IOS XR 7.11 ASR 9000 Series Aggregation Services Routers (64-bit), Cisco Systems Inc. Cisco IOS XR до 24.2.21 ASR 9000 Series Aggregation Services Routers (64-bit), Cisco Systems Inc. Cisco IOS XR 24.3 ASR 9000 Series Aggregation Services Routers (64-bit), Cisco Systems Inc. Cisco IOS XR до 24.4.2 ASR 9000 Series Aggregation Services Routers (64-bit), Cisco Systems Inc. Cisco IOS XR до 7.10 включительно IOS XR White box (IOSXRWBD), Cisco Systems Inc. Cisco IOS XR 7.11 IOS XR White box (IOSXRWBD), Cisco Systems Inc. Cisco IOS XR до 24.2.21 IOS XR White box (IOSXRWBD), Cisco Systems Inc. Cisco IOS XR 24.3 IOS XR White box (IOSXRWBD), Cisco Systems Inc. Cisco IOS XR до 24.4.2 IOS XR White box (IOSXRWBD), Cisco Systems Inc. Cisco IOS XR до 7.10 включительно IOS XRv 9000 Router, Cisco Systems Inc. Cisco IOS XR 7.11 IOS XRv 9000 Router, Cisco Systems Inc. Cisco IOS XR до 24.2.21 IOS XRv 9000 Router, Cisco Systems Inc. Cisco IOS XR 24.3 IOS XRv 9000 Router, Cisco Systems Inc. Cisco IOS XR до 24.4.2 IOS XRv 9000 Router, Cisco Systems Inc. Cisco IOS XR до 7.10 включительно Network Convergence System (NCS) 540 Series Routers, Cisco Systems Inc. Cisco IOS XR 7.11 Network Convergence System (NCS) 540 Series Routers, Cisco Systems Inc. Cisco IOS XR до 24.2.21 Network Convergence System (NCS) 540 Series Routers, Cisco Systems Inc. Cisco IOS XR 24.3 Network Convergence System (NCS) 540 Series Routers, Cisco Systems Inc. Cisco IOS XR до 24.4.2 Network Convergence System (NCS) 540 Series Routers, Cisco Systems Inc. Cisco IOS XR до 7.10 включительно NCS 560 Series Routers, Cisco Systems Inc. Cisco IOS XR 7.11 NCS 560 Series Routers, Cisco Systems Inc. Cisco IOS XR до 24.2.21 NCS 560 Series Routers, Cisco Systems Inc. Cisco IOS XR 24.3 NCS 560 Series Routers, Cisco Systems Inc. Cisco IOS XR до 24.4.2 NCS 560 Series Routers, Cisco Systems Inc. Cisco IOS XR до 7.10 включительно NCS 1000 Series, Cisco Systems Inc. Cisco IOS XR 7.11 NCS 1000 Series, Cisco Systems Inc. Cisco IOS XR до 24.2.21 NCS 1000 Series, Cisco Systems Inc. Cisco IOS XR 24.3 NCS 1000 Series, Cisco Systems Inc. Cisco IOS XR до 24.4.2 NCS 1000 Series, Cisco Systems Inc. Cisco IOS XR до 7.10 включительно NCS 1001 Series, Cisco Systems Inc. Cisco IOS XR 7.11 NCS 1001 Series, Cisco Systems Inc. Cisco IOS XR до 24.2.21 NCS 1001 Series, Cisco Systems Inc. Cisco IOS XR 24.3 NCS 1001 Series, Cisco Systems Inc. Cisco IOS XR до 24.4.2 NCS 1001 Series, Cisco Systems Inc. Cisco IOS XR до 7.10 включительно NCS 1002 Series, Cisco Systems Inc. Cisco IOS XR 7.11 NCS 1002 Series, Cisco Systems Inc. Cisco IOS XR до 24.2.21 NCS 1002 Series, Cisco Systems Inc. Cisco IOS XR 24.3 NCS 1002 Series, Cisco Systems Inc. Cisco IOS XR до 24.4.2 NCS 1002 Series, Cisco Systems Inc. Cisco IOS XR до 7.10 включительно NCS 1004 Series, Cisco Systems Inc. Cisco IOS XR 7.11 NCS 1004 Series, Cisco Systems Inc. Cisco IOS XR до 24.2.21 NCS 1004 Series, Cisco Systems Inc. Cisco IOS XR 24.3 NCS 1004 Series, Cisco Systems Inc. Cisco IOS XR до 24.4.2 NCS 1004 Series, Cisco Systems Inc. Cisco IOS XR до 7.10 включительно NCS 5000 Series Routers, Cisco Systems Inc. Cisco IOS XR 7.11 NCS 5000 Series Routers, Cisco Systems Inc. Cisco IOS XR до 24.2.21 NCS 5000 Series Routers, Cisco Systems Inc. Cisco IOS XR 24.3 NCS 5000 Series Routers, Cisco Systems Inc. Cisco IOS XR до 24.4.2 NCS 5000 Series Routers, Cisco Systems Inc. Cisco IOS XR до 7.10 включительно NCS 5500 Series Routers, Cisco Systems Inc. Cisco IOS XR 7.11 NCS 5500 Series Routers, Cisco Systems Inc. Cisco IOS XR до 24.2.21 NCS 5500 Series Routers, Cisco Systems Inc. Cisco IOS XR 24.3 NCS 5500 Series Routers, Cisco Systems Inc. Cisco IOS XR до 24.4.2 NCS 5500 Series Routers, Cisco Systems Inc. Cisco IOS XR до 7.10 включительно NCS 6000 Series Routers, Cisco Systems Inc. Cisco IOS XR 7.11 NCS 6000 Series Routers, Cisco Systems Inc. Cisco IOS XR до 24.2.21 NCS 6000 Series Routers, Cisco Systems Inc. Cisco IOS XR 24.3 NCS 6000 Series Routers, Cisco Systems Inc. Cisco IOS XR до 24.4.2 NCS 6000 Series Routers, Cisco Systems Inc. Cisco IOS XR 7.11 NCS 5700 Series Routers, Cisco Systems Inc. Cisco IOS XR до 24.2.21 NCS 5700 Series Routers, Cisco Systems Inc. Cisco IOS XR 24.3 NCS 5700 Series Routers, Cisco Systems Inc. Cisco IOS XR до 24.4.2 NCS 5700 Series Routers
⚙️ Технические сведения
📊 CVSS
CVSS 2.0
AV:L/AC:L/Au:S/C:C/I:C/A:N
CVSS 3.0
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
⚠️ Уровень опасности
Средний уровень опасности (базовая оценка CVSS 2.0 составляет 6,2)
Средний уровень опасности (базовая оценка CVSS 3.1 составляет 6)
Средний уровень опасности (базовая оценка CVSS 3.1 составляет 6)
🔗 Источники и меры
🏷️ Идентификаторы
📅 Даты