CVE-2024-20397 — Cisco NX-OS Software Image Verification Bypass Vulnerability

Back Back to CVE browser

MEDIUM

Cisco NX-OS Software Image Verification Bypass Vulnerability

Published Dec 4, 2024

5.2

MEDIUM

CVSS 3.1

EPSS 0.30%

Description

A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative credentials, to bypass NX-OS image signature verification.  This vulnerability is due to insecure bootloader settings. An attacker could exploit this vulnerability by executing a series of bootloader commands. A successful exploit could allow the attacker to bypass NX-OS image signature verification and load unverified software.

Affected products

Vendor Cisco Product Cisco NX-OS Software Default
n/a
- Version
  10.1(1)
  Status
  affected
  Constraints
  -
- Version
  10.1(2)
  Status
  affected
  Constraints
  -
- Version
  10.1(2t)
  Status
  affected
  Constraints
  -
- Version
  10.2(1)
  Status
  affected
  Constraints
  -
- Version
  10.2(1q)
  Status
  affected
  Constraints
  -
- Version
  10.2(2)
  Status
  affected
  Constraints
  -
- Version
  10.2(2a)
  Status
  affected
  Constraints
  -
- Version
  10.2(3)
  Status
  affected
  Constraints
  -
- Version
  10.2(3t)
  Status
  affected
  Constraints
  -
- Version
  10.2(3v)
  Status
  affected
  Constraints
  -
- Version
  10.2(4)
  Status
  affected
  Constraints
  -
- Version
  10.2(5)
  Status
  affected
  Constraints
  -
- Version
  10.2(6)
  Status
  affected
  Constraints
  -
- Version
  10.2(7)
  Status
  affected
  Constraints
  -
- Version
  10.2(8)
  Status
  affected
  Constraints
  -
- Version
  10.3(1)
  Status
  affected
  Constraints
  -
- Version
  10.3(2)
  Status
  affected
  Constraints
  -
- Version
  10.3(3)
  Status
  affected
  Constraints
  -
- Version
  10.3(3o)
  Status
  affected
  Constraints
  -
- Version
  10.3(3p)
  Status
  affected
  Constraints
  -
- Version
  10.3(3q)
  Status
  affected
  Constraints
  -
- Version
  10.3(3r)
  Status
  affected
  Constraints
  -
- Version
  10.3(3w)
  Status
  affected
  Constraints
  -
- Version
  10.3(3x)
  Status
  affected
  Constraints
  -
- Version
  10.3(4)
  Status
  affected
  Constraints
  -
- Version
  10.3(4a)
  Status
  affected
  Constraints
  -
- Version
  10.3(4g)
  Status
  affected
  Constraints
  -
- Version
  10.3(4h)
  Status
  affected
  Constraints
  -
- Version
  10.3(5)
  Status
  affected
  Constraints
  -
- Version
  10.3(6)
  Status
  affected
  Constraints
  -
- Version
  10.3(99w)
  Status
  affected
  Constraints
  -
- Version
  10.3(99x)
  Status
  affected
  Constraints
  -
- Version
  10.4(1)
  Status
  affected
  Constraints
  -
- Version
  10.4(2)
  Status
  affected
  Constraints
  -
- Version
  10.4(3)
  Status
  affected
  Constraints
  -
- Version
  10.4(4)
  Status
  affected
  Constraints
  -
- Version
  10.4(4g)
  Status
  affected
  Constraints
  -
- Version
  10.5(1)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(1)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(10)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(10a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(11)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(11a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(11b)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(2)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(3)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(4)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(4a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(5)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(6)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(7)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(7a)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(7b)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(8)
  Status
  affected
  Constraints
  -
- Version
  6.0(2)A8(9)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(3)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(3a)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(3c)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(4)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)F3(5)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(1t)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(3)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(4)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(5)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(6)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(6t)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(7)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(8)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(8a)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(8b)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(8z)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I4(9)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I5(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I5(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I5(3)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I5(3a)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I5(3b)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I6(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I6(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(10)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(3)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(3z)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(4)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(5)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(5a)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(6)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(6z)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(7)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(8)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(9)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)I7(9w)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IA7(1)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IA7(2)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IC4(4)
  Status
  affected
  Constraints
  -
- Version
  7.0(3)IM7(2)
  Status
  affected
  Constraints
  -
- Version
  7.3(0)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(0)DX(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(0)DY(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(1)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(1)DY(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(2)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(2)D1(1d)
  Status
  affected
  Constraints
  -
- Version
  7.3(2)D1(2)
  Status
  affected
  Constraints
  -
- Version
  7.3(2)D1(3)
  Status
  affected
  Constraints
  -
- Version
  7.3(2)D1(3a)
  Status
  affected
  Constraints
  -
- Version
  7.3(3)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(4)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(5)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(6)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(7)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(8)D1(1)
  Status
  affected
  Constraints
  -
- Version
  7.3(9)D1(1)
  Status
  affected
  Constraints
  -
- Version
  8.1(1)
  Status
  affected
  Constraints
  -
- Version
  8.1(1a)
  Status
  affected
  Constraints
  -
- Version
  8.1(1b)
  Status
  affected
  Constraints
  -
- Version
  8.1(2)
  Status
  affected
  Constraints
  -
- Version
  8.1(2a)
  Status
  affected
  Constraints
  -
- Version
  8.2(1)
  Status
  affected
  Constraints
  -
- Version
  8.2(10)
  Status
  affected
  Constraints
  -
- Version
  8.2(11)
  Status
  affected
  Constraints
  -
- Version
  8.2(2)
  Status
  affected
  Constraints
  -
- Version
  8.2(3)
  Status
  affected
  Constraints
  -
- Version
  8.2(4)
  Status
  affected
  Constraints
  -
- Version
  8.2(5)
  Status
  affected
  Constraints
  -
- Version
  8.2(6)
  Status
  affected
  Constraints
  -
- Version
  8.2(7)
  Status
  affected
  Constraints
  -
- Version
  8.2(7a)
  Status
  affected
  Constraints
  -
- Version
  8.2(8)
  Status
  affected
  Constraints
  -
- Version
  8.2(9)
  Status
  affected
  Constraints
  -
- Version
  8.3(1)
  Status
  affected
  Constraints
  -
- Version
  8.3(2)
  Status
  affected
  Constraints
  -
- Version
  8.4(1)
  Status
  affected
  Constraints
  -
- Version
  8.4(1a)
  Status
  affected
  Constraints
  -
- Version
  8.4(2)
  Status
  affected
  Constraints
  -
- Version
  8.4(2a)
  Status
  affected
  Constraints
  -
- Version
  8.4(2b)
  Status
  affected
  Constraints
  -
- Version
  8.4(2c)
  Status
  affected
  Constraints
  -
- Version
  8.4(2d)
  Status
  affected
  Constraints
  -
- Version
  8.4(2e)
  Status
  affected
  Constraints
  -
- Version
  8.4(2f)
  Status
  affected
  Constraints
  -
- Version
  8.4(3)
  Status
  affected
  Constraints
  -
- Version
  8.4(4)
  Status
  affected
  Constraints
  -
- Version
  8.4(4a)
  Status
  affected
  Constraints
  -
- Version
  8.4(5)
  Status
  affected
  Constraints
  -
- Version
  8.4(6)
  Status
  affected
  Constraints
  -
- Version
  8.4(6a)
  Status
  affected
  Constraints
  -
- Version
  8.4(7)
  Status
  affected
  Constraints
  -
- Version
  8.4(8)
  Status
  affected
  Constraints
  -
- Version
  8.4(9)
  Status
  affected
  Constraints
  -
- Version
  8.5(1)
  Status
  affected
  Constraints
  -
- Version
  9.2(1)
  Status
  affected
  Constraints
  -
- Version
  9.2(1a)
  Status
  affected
  Constraints
  -
- Version
  9.2(2)
  Status
  affected
  Constraints
  -
- Version
  9.2(2t)
  Status
  affected
  Constraints
  -
- Version
  9.2(2v)
  Status
  affected
  Constraints
  -
- Version
  9.2(3)
  Status
  affected
  Constraints
  -
- Version
  9.2(3y)
  Status
  affected
  Constraints
  -
- Version
  9.2(4)
  Status
  affected
  Constraints
  -
- Version
  9.3(1)
  Status
  affected
  Constraints
  -
- Version
  9.3(10)
  Status
  affected
  Constraints
  -
- Version
  9.3(11)
  Status
  affected
  Constraints
  -
- Version
  9.3(12)
  Status
  affected
  Constraints
  -
- Version
  9.3(13)
  Status
  affected
  Constraints
  -
- Version
  9.3(14)
  Status
  affected
  Constraints
  -
- Version
  9.3(1z)
  Status
  affected
  Constraints
  -
- Version
  9.3(2)
  Status
  affected
  Constraints
  -
- Version
  9.3(2a)
  Status
  affected
  Constraints
  -
- Version
  9.3(3)
  Status
  affected
  Constraints
  -
- Version
  9.3(4)
  Status
  affected
  Constraints
  -
- Version
  9.3(5)
  Status
  affected
  Constraints
  -
- Version
  9.3(5w)
  Status
  affected
  Constraints
  -
- Version
  9.3(6)
  Status
  affected
  Constraints
  -
- Version
  9.3(7)
  Status
  affected
  Constraints
  -
- Version
  9.3(7a)
  Status
  affected
  Constraints
  -
- Version
  9.3(7k)
  Status
  affected
  Constraints
  -
- Version
  9.3(8)
  Status
  affected
  Constraints
  -
- Version
  9.3(9)
  Status
  affected
  Constraints
  -
- Version
  9.4(1)
  Status
  affected
  Constraints
  -
- Version
  9.4(1a)
  Status
  affected
  Constraints
  -
Vendor Cisco Product Cisco NX-OS System Software in ACI Mode Default
n/a
- Version
  13.2(10e)
  Status
  affected
  Constraints
  -
- Version
  13.2(10f)
  Status
  affected
  Constraints
  -
- Version
  13.2(10g)
  Status
  affected
  Constraints
  -
- Version
  13.2(1l)
  Status
  affected
  Constraints
  -
- Version
  13.2(1m)
  Status
  affected
  Constraints
  -
- Version
  13.2(2l)
  Status
  affected
  Constraints
  -
- Version
  13.2(2o)
  Status
  affected
  Constraints
  -
- Version
  13.2(3i)
  Status
  affected
  Constraints
  -
- Version
  13.2(3j)
  Status
  affected
  Constraints
  -
- Version
  13.2(3n)
  Status
  affected
  Constraints
  -
- Version
  13.2(3o)
  Status
  affected
  Constraints
  -
- Version
  13.2(3r)
  Status
  affected
  Constraints
  -
- Version
  13.2(3s)
  Status
  affected
  Constraints
  -
- Version
  13.2(41d)
  Status
  affected
  Constraints
  -
- Version
  13.2(4d)
  Status
  affected
  Constraints
  -
- Version
  13.2(4e)
  Status
  affected
  Constraints
  -
- Version
  13.2(5d)
  Status
  affected
  Constraints
  -
- Version
  13.2(5e)
  Status
  affected
  Constraints
  -
- Version
  13.2(5f)
  Status
  affected
  Constraints
  -
- Version
  13.2(6i)
  Status
  affected
  Constraints
  -
- Version
  13.2(7f)
  Status
  affected
  Constraints
  -
- Version
  13.2(7k)
  Status
  affected
  Constraints
  -
- Version
  13.2(8d)
  Status
  affected
  Constraints
  -
- Version
  13.2(9b)
  Status
  affected
  Constraints
  -
- Version
  13.2(9f)
  Status
  affected
  Constraints
  -
- Version
  13.2(9h)
  Status
  affected
  Constraints
  -
- Version
  14.0(1h)
  Status
  affected
  Constraints
  -
- Version
  14.0(2c)
  Status
  affected
  Constraints
  -
- Version
  14.0(3c)
  Status
  affected
  Constraints
  -
- Version
  14.0(3d)
  Status
  affected
  Constraints
  -
- Version
  14.1(1i)
  Status
  affected
  Constraints
  -
- Version
  14.1(1j)
  Status
  affected
  Constraints
  -
- Version
  14.1(1k)
  Status
  affected
  Constraints
  -
- Version
  14.1(1l)
  Status
  affected
  Constraints
  -
- Version
  14.1(2g)
  Status
  affected
  Constraints
  -
- Version
  14.1(2m)
  Status
  affected
  Constraints
  -
- Version
  14.1(2o)
  Status
  affected
  Constraints
  -
- Version
  14.1(2s)
  Status
  affected
  Constraints
  -
- Version
  14.1(2u)
  Status
  affected
  Constraints
  -
- Version
  14.1(2w)
  Status
  affected
  Constraints
  -
- Version
  14.1(2x)
  Status
  affected
  Constraints
  -
- Version
  14.2(1i)
  Status
  affected
  Constraints
  -
- Version
  14.2(1j)
  Status
  affected
  Constraints
  -
- Version
  14.2(1l)
  Status
  affected
  Constraints
  -
- Version
  14.2(2e)
  Status
  affected
  Constraints
  -
- Version
  14.2(2f)
  Status
  affected
  Constraints
  -
- Version
  14.2(2g)
  Status
  affected
  Constraints
  -
- Version
  14.2(3j)
  Status
  affected
  Constraints
  -
- Version
  14.2(3l)
  Status
  affected
  Constraints
  -
- Version
  14.2(3n)
  Status
  affected
  Constraints
  -
- Version
  14.2(3q)
  Status
  affected
  Constraints
  -
- Version
  14.2(4i)
  Status
  affected
  Constraints
  -
- Version
  14.2(4k)
  Status
  affected
  Constraints
  -
- Version
  14.2(4o)
  Status
  affected
  Constraints
  -
- Version
  14.2(4p)
  Status
  affected
  Constraints
  -
- Version
  14.2(5k)
  Status
  affected
  Constraints
  -
- Version
  14.2(5l)
  Status
  affected
  Constraints
  -
- Version
  14.2(5n)
  Status
  affected
  Constraints
  -
- Version
  14.2(6d)
  Status
  affected
  Constraints
  -
- Version
  14.2(6g)
  Status
  affected
  Constraints
  -
- Version
  14.2(6h)
  Status
  affected
  Constraints
  -
- Version
  14.2(6l)
  Status
  affected
  Constraints
  -
- Version
  14.2(6o)
  Status
  affected
  Constraints
  -
- Version
  14.2(7f)
  Status
  affected
  Constraints
  -
- Version
  14.2(7l)
  Status
  affected
  Constraints
  -
- Version
  14.2(7q)
  Status
  affected
  Constraints
  -
- Version
  14.2(7r)
  Status
  affected
  Constraints
  -
- Version
  14.2(7s)
  Status
  affected
  Constraints
  -
- Version
  14.2(7t)
  Status
  affected
  Constraints
  -
- Version
  14.2(7u)
  Status
  affected
  Constraints
  -
- Version
  14.2(7v)
  Status
  affected
  Constraints
  -
- Version
  14.2(7w)
  Status
  affected
  Constraints
  -
- Version
  15.0(1k)
  Status
  affected
  Constraints
  -
- Version
  15.0(1l)
  Status
  affected
  Constraints
  -
- Version
  15.0(2e)
  Status
  affected
  Constraints
  -
- Version
  15.0(2h)
  Status
  affected
  Constraints
  -
- Version
  15.1(1h)
  Status
  affected
  Constraints
  -
- Version
  15.1(2e)
  Status
  affected
  Constraints
  -
- Version
  15.1(3e)
  Status
  affected
  Constraints
  -
- Version
  15.1(4c)
  Status
  affected
  Constraints
  -
- Version
  15.2(1g)
  Status
  affected
  Constraints
  -
- Version
  15.2(2e)
  Status
  affected
  Constraints
  -
- Version
  15.2(2f)
  Status
  affected
  Constraints
  -
- Version
  15.2(2g)
  Status
  affected
  Constraints
  -
- Version
  15.2(2h)
  Status
  affected
  Constraints
  -
- Version
  15.2(3e)
  Status
  affected
  Constraints
  -
- Version
  15.2(3f)
  Status
  affected
  Constraints
  -
- Version
  15.2(3g)
  Status
  affected
  Constraints
  -
- Version
  15.2(4d)
  Status
  affected
  Constraints
  -
- Version
  15.2(4e)
  Status
  affected
  Constraints
  -
- Version
  15.2(4f)
  Status
  affected
  Constraints
  -
- Version
  15.2(5c)
  Status
  affected
  Constraints
  -
- Version
  15.2(5d)
  Status
  affected
  Constraints
  -
- Version
  15.2(5e)
  Status
  affected
  Constraints
  -
- Version
  15.2(6e)
  Status
  affected
  Constraints
  -
- Version
  15.2(6g)
  Status
  affected
  Constraints
  -
- Version
  15.2(6h)
  Status
  affected
  Constraints
  -
- Version
  15.2(7f)
  Status
  affected
  Constraints
  -
- Version
  15.2(7g)
  Status
  affected
  Constraints
  -
- Version
  15.2(8d)
  Status
  affected
  Constraints
  -
- Version
  15.2(8e)
  Status
  affected
  Constraints
  -
- Version
  15.2(8f)
  Status
  affected
  Constraints
  -
- Version
  15.2(8g)
  Status
  affected
  Constraints
  -
- Version
  15.2(8h)
  Status
  affected
  Constraints
  -
- Version
  15.2(8i)
  Status
  affected
  Constraints
  -
- Version
  15.3(1d)
  Status
  affected
  Constraints
  -
- Version
  15.3(2a)
  Status
  affected
  Constraints
  -
- Version
  15.3(2b)
  Status
  affected
  Constraints
  -
- Version
  15.3(2c)
  Status
  affected
  Constraints
  -
- Version
  15.3(2d)
  Status
  affected
  Constraints
  -
- Version
  15.3(2e)
  Status
  affected
  Constraints
  -
- Version
  16.0(1g)
  Status
  affected
  Constraints
  -
- Version
  16.0(1j)
  Status
  affected
  Constraints
  -
- Version
  16.0(2h)
  Status
  affected
  Constraints
  -
- Version
  16.0(2j)
  Status
  affected
  Constraints
  -
- Version
  16.0(3d)
  Status
  affected
  Constraints
  -
- Version
  16.0(3e)
  Status
  affected
  Constraints
  -
- Version
  16.0(3g)
  Status
  affected
  Constraints
  -
- Version
  16.0(4c)
  Status
  affected
  Constraints
  -
- Version
  16.0(5h)
  Status
  affected
  Constraints
  -
- Version
  16.0(5j)
  Status
  affected
  Constraints
  -
- Version
  16.0(6c)
  Status
  affected
  Constraints
  -
- Version
  16.0(7e)
  Status
  affected
  Constraints
  -
- Version
  16.0(8e)
  Status
  affected
  Constraints
  -
- Version
  16.1(1f)
  Status
  affected
  Constraints
  -
Vendor Cisco Product Cisco Unified Computing System (Managed) Default
n/a
- Version
  4.0(1a)
  Status
  affected
  Constraints
  -
- Version
  4.0(1b)
  Status
  affected
  Constraints
  -
- Version
  4.0(1c)
  Status
  affected
  Constraints
  -
- Version
  4.0(1d)
  Status
  affected
  Constraints
  -
- Version
  4.0(2a)
  Status
  affected
  Constraints
  -
- Version
  4.0(2b)
  Status
  affected
  Constraints
  -
- Version
  4.0(2d)
  Status
  affected
  Constraints
  -
- Version
  4.0(2e)
  Status
  affected
  Constraints
  -
- Version
  4.0(4a)
  Status
  affected
  Constraints
  -
- Version
  4.0(4b)
  Status
  affected
  Constraints
  -
- Version
  4.0(4c)
  Status
  affected
  Constraints
  -
- Version
  4.0(4d)
  Status
  affected
  Constraints
  -
- Version
  4.0(4e)
  Status
  affected
  Constraints
  -
- Version
  4.0(4f)
  Status
  affected
  Constraints
  -
- Version
  4.0(4g)
  Status
  affected
  Constraints
  -
- Version
  4.0(4h)
  Status
  affected
  Constraints
  -
- Version
  4.0(4i)
  Status
  affected
  Constraints
  -
- Version
  4.0(4k)
  Status
  affected
  Constraints
  -
- Version
  4.0(4l)
  Status
  affected
  Constraints
  -
- Version
  4.0(4m)
  Status
  affected
  Constraints
  -
- Version
  4.0(4n)
  Status
  affected
  Constraints
  -
- Version
  4.0(4o)
  Status
  affected
  Constraints
  -
- Version
  4.1(1a)
  Status
  affected
  Constraints
  -
- Version
  4.1(1b)
  Status
  affected
  Constraints
  -
- Version
  4.1(1c)
  Status
  affected
  Constraints
  -
- Version
  4.1(1d)
  Status
  affected
  Constraints
  -
- Version
  4.1(1e)
  Status
  affected
  Constraints
  -
- Version
  4.1(2a)
  Status
  affected
  Constraints
  -
- Version
  4.1(2b)
  Status
  affected
  Constraints
  -
- Version
  4.1(2c)
  Status
  affected
  Constraints
  -
- Version
  4.1(3a)
  Status
  affected
  Constraints
  -
- Version
  4.1(3b)
  Status
  affected
  Constraints
  -
- Version
  4.1(3c)
  Status
  affected
  Constraints
  -
- Version
  4.1(3d)
  Status
  affected
  Constraints
  -
- Version
  4.1(3e)
  Status
  affected
  Constraints
  -
- Version
  4.1(3f)
  Status
  affected
  Constraints
  -
- Version
  4.1(3h)
  Status
  affected
  Constraints
  -
- Version
  4.1(3i)
  Status
  affected
  Constraints
  -
- Version
  4.1(3j)
  Status
  affected
  Constraints
  -
- Version
  4.1(3k)
  Status
  affected
  Constraints
  -
- Version
  4.1(3l)
  Status
  affected
  Constraints
  -
- Version
  4.1(3m)
  Status
  affected
  Constraints
  -
- Version
  4.1(4a)
  Status
  affected
  Constraints
  -
- Version
  4.2(1c)
  Status
  affected
  Constraints
  -
- Version
  4.2(1d)
  Status
  affected
  Constraints
  -
- Version
  4.2(1f)
  Status
  affected
  Constraints
  -
- Version
  4.2(1i)
  Status
  affected
  Constraints
  -
- Version
  4.2(1k)
  Status
  affected
  Constraints
  -
- Version
  4.2(1l)
  Status
  affected
  Constraints
  -
- Version
  4.2(1m)
  Status
  affected
  Constraints
  -
- Version
  4.2(1n)
  Status
  affected
  Constraints
  -
- Version
  4.2(2a)
  Status
  affected
  Constraints
  -
- Version
  4.2(2c)
  Status
  affected
  Constraints
  -
- Version
  4.2(2d)
  Status
  affected
  Constraints
  -
- Version
  4.2(2e)
  Status
  affected
  Constraints
  -
- Version
  4.2(3b)
  Status
  affected
  Constraints
  -
- Version
  4.2(3d)
  Status
  affected
  Constraints
  -
- Version
  4.2(3e)
  Status
  affected
  Constraints
  -
- Version
  4.2(3g)
  Status
  affected
  Constraints
  -
- Version
  4.2(3h)
  Status
  affected
  Constraints
  -
- Version
  4.2(3i)
  Status
  affected
  Constraints
  -
- Version
  4.2(3j)
  Status
  affected
  Constraints
  -
- Version
  4.2(3k)
  Status
  affected
  Constraints
  -
- Version
  4.2(3l)
  Status
  affected
  Constraints
  -
- Version
  4.2(3m)
  Status
  affected
  Constraints
  -
- Version
  4.3(2b)
  Status
  affected
  Constraints
  -
- Version
  4.3(2c)
  Status
  affected
  Constraints
  -
- Version
  4.3(2e)
  Status
  affected
  Constraints
  -
- Version
  4.3(2f)
  Status
  affected
  Constraints
  -
- Version
  4.3(3a)
  Status
  affected
  Constraints
  -
- Version
  4.3(3c)
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cisco

Cisco NX-OS Software

n/a

Version	Status	Constraints
10.1(1)	affected	-
10.1(2)	affected	-
10.1(2t)	affected	-
10.2(1)	affected	-
10.2(1q)	affected	-
10.2(2)	affected	-
10.2(2a)	affected	-
10.2(3)	affected	-
10.2(3t)	affected	-
10.2(3v)	affected	-
10.2(4)	affected	-
10.2(5)	affected	-
10.2(6)	affected	-
10.2(7)	affected	-
10.2(8)	affected	-
10.3(1)	affected	-
10.3(2)	affected	-
10.3(3)	affected	-
10.3(3o)	affected	-
10.3(3p)	affected	-
10.3(3q)	affected	-
10.3(3r)	affected	-
10.3(3w)	affected	-
10.3(3x)	affected	-
10.3(4)	affected	-
10.3(4a)	affected	-
10.3(4g)	affected	-
10.3(4h)	affected	-
10.3(5)	affected	-
10.3(6)	affected	-
10.3(99w)	affected	-
10.3(99x)	affected	-
10.4(1)	affected	-
10.4(2)	affected	-
10.4(3)	affected	-
10.4(4)	affected	-
10.4(4g)	affected	-
10.5(1)	affected	-
6.0(2)A8(1)	affected	-
6.0(2)A8(10)	affected	-
6.0(2)A8(10a)	affected	-
6.0(2)A8(11)	affected	-
6.0(2)A8(11a)	affected	-
6.0(2)A8(11b)	affected	-
6.0(2)A8(2)	affected	-
6.0(2)A8(3)	affected	-
6.0(2)A8(4)	affected	-
6.0(2)A8(4a)	affected	-
6.0(2)A8(5)	affected	-
6.0(2)A8(6)	affected	-
6.0(2)A8(7)	affected	-
6.0(2)A8(7a)	affected	-
6.0(2)A8(7b)	affected	-
6.0(2)A8(8)	affected	-
6.0(2)A8(9)	affected	-
7.0(3)F3(1)	affected	-
7.0(3)F3(2)	affected	-
7.0(3)F3(3)	affected	-
7.0(3)F3(3a)	affected	-
7.0(3)F3(3c)	affected	-
7.0(3)F3(4)	affected	-
7.0(3)F3(5)	affected	-
7.0(3)I4(1)	affected	-
7.0(3)I4(1t)	affected	-
7.0(3)I4(2)	affected	-
7.0(3)I4(3)	affected	-
7.0(3)I4(4)	affected	-
7.0(3)I4(5)	affected	-
7.0(3)I4(6)	affected	-
7.0(3)I4(6t)	affected	-
7.0(3)I4(7)	affected	-
7.0(3)I4(8)	affected	-
7.0(3)I4(8a)	affected	-
7.0(3)I4(8b)	affected	-
7.0(3)I4(8z)	affected	-
7.0(3)I4(9)	affected	-
7.0(3)I5(1)	affected	-
7.0(3)I5(2)	affected	-
7.0(3)I5(3)	affected	-
7.0(3)I5(3a)	affected	-
7.0(3)I5(3b)	affected	-
7.0(3)I6(1)	affected	-
7.0(3)I6(2)	affected	-
7.0(3)I7(1)	affected	-
7.0(3)I7(10)	affected	-
7.0(3)I7(2)	affected	-
7.0(3)I7(3)	affected	-
7.0(3)I7(3z)	affected	-
7.0(3)I7(4)	affected	-
7.0(3)I7(5)	affected	-
7.0(3)I7(5a)	affected	-
7.0(3)I7(6)	affected	-
7.0(3)I7(6z)	affected	-
7.0(3)I7(7)	affected	-
7.0(3)I7(8)	affected	-
7.0(3)I7(9)	affected	-
7.0(3)I7(9w)	affected	-
7.0(3)IA7(1)	affected	-
7.0(3)IA7(2)	affected	-
7.0(3)IC4(4)	affected	-
7.0(3)IM7(2)	affected	-
7.3(0)D1(1)	affected	-
7.3(0)DX(1)	affected	-
7.3(0)DY(1)	affected	-
7.3(1)D1(1)	affected	-
7.3(1)DY(1)	affected	-
7.3(2)D1(1)	affected	-
7.3(2)D1(1d)	affected	-
7.3(2)D1(2)	affected	-
7.3(2)D1(3)	affected	-
7.3(2)D1(3a)	affected	-
7.3(3)D1(1)	affected	-
7.3(4)D1(1)	affected	-
7.3(5)D1(1)	affected	-
7.3(6)D1(1)	affected	-
7.3(7)D1(1)	affected	-
7.3(8)D1(1)	affected	-
7.3(9)D1(1)	affected	-
8.1(1)	affected	-
8.1(1a)	affected	-
8.1(1b)	affected	-
8.1(2)	affected	-
8.1(2a)	affected	-
8.2(1)	affected	-
8.2(10)	affected	-
8.2(11)	affected	-
8.2(2)	affected	-
8.2(3)	affected	-
8.2(4)	affected	-
8.2(5)	affected	-
8.2(6)	affected	-
8.2(7)	affected	-
8.2(7a)	affected	-
8.2(8)	affected	-
8.2(9)	affected	-
8.3(1)	affected	-
8.3(2)	affected	-
8.4(1)	affected	-
8.4(1a)	affected	-
8.4(2)	affected	-
8.4(2a)	affected	-
8.4(2b)	affected	-
8.4(2c)	affected	-
8.4(2d)	affected	-
8.4(2e)	affected	-
8.4(2f)	affected	-
8.4(3)	affected	-
8.4(4)	affected	-
8.4(4a)	affected	-
8.4(5)	affected	-
8.4(6)	affected	-
8.4(6a)	affected	-
8.4(7)	affected	-
8.4(8)	affected	-
8.4(9)	affected	-
8.5(1)	affected	-
9.2(1)	affected	-
9.2(1a)	affected	-
9.2(2)	affected	-
9.2(2t)	affected	-
9.2(2v)	affected	-
9.2(3)	affected	-
9.2(3y)	affected	-
9.2(4)	affected	-
9.3(1)	affected	-
9.3(10)	affected	-
9.3(11)	affected	-
9.3(12)	affected	-
9.3(13)	affected	-
9.3(14)	affected	-
9.3(1z)	affected	-
9.3(2)	affected	-
9.3(2a)	affected	-
9.3(3)	affected	-
9.3(4)	affected	-
9.3(5)	affected	-
9.3(5w)	affected	-
9.3(6)	affected	-
9.3(7)	affected	-
9.3(7a)	affected	-
9.3(7k)	affected	-
9.3(8)	affected	-
9.3(9)	affected	-
9.4(1)	affected	-
9.4(1a)	affected	-

Cisco

Cisco NX-OS System Software in ACI Mode

n/a

Version	Status	Constraints
13.2(10e)	affected	-
13.2(10f)	affected	-
13.2(10g)	affected	-
13.2(1l)	affected	-
13.2(1m)	affected	-
13.2(2l)	affected	-
13.2(2o)	affected	-
13.2(3i)	affected	-
13.2(3j)	affected	-
13.2(3n)	affected	-
13.2(3o)	affected	-
13.2(3r)	affected	-
13.2(3s)	affected	-
13.2(41d)	affected	-
13.2(4d)	affected	-
13.2(4e)	affected	-
13.2(5d)	affected	-
13.2(5e)	affected	-
13.2(5f)	affected	-
13.2(6i)	affected	-
13.2(7f)	affected	-
13.2(7k)	affected	-
13.2(8d)	affected	-
13.2(9b)	affected	-
13.2(9f)	affected	-
13.2(9h)	affected	-
14.0(1h)	affected	-
14.0(2c)	affected	-
14.0(3c)	affected	-
14.0(3d)	affected	-
14.1(1i)	affected	-
14.1(1j)	affected	-
14.1(1k)	affected	-
14.1(1l)	affected	-
14.1(2g)	affected	-
14.1(2m)	affected	-
14.1(2o)	affected	-
14.1(2s)	affected	-
14.1(2u)	affected	-
14.1(2w)	affected	-
14.1(2x)	affected	-
14.2(1i)	affected	-
14.2(1j)	affected	-
14.2(1l)	affected	-
14.2(2e)	affected	-
14.2(2f)	affected	-
14.2(2g)	affected	-
14.2(3j)	affected	-
14.2(3l)	affected	-
14.2(3n)	affected	-
14.2(3q)	affected	-
14.2(4i)	affected	-
14.2(4k)	affected	-
14.2(4o)	affected	-
14.2(4p)	affected	-
14.2(5k)	affected	-
14.2(5l)	affected	-
14.2(5n)	affected	-
14.2(6d)	affected	-
14.2(6g)	affected	-
14.2(6h)	affected	-
14.2(6l)	affected	-
14.2(6o)	affected	-
14.2(7f)	affected	-
14.2(7l)	affected	-
14.2(7q)	affected	-
14.2(7r)	affected	-
14.2(7s)	affected	-
14.2(7t)	affected	-
14.2(7u)	affected	-
14.2(7v)	affected	-
14.2(7w)	affected	-
15.0(1k)	affected	-
15.0(1l)	affected	-
15.0(2e)	affected	-
15.0(2h)	affected	-
15.1(1h)	affected	-
15.1(2e)	affected	-
15.1(3e)	affected	-
15.1(4c)	affected	-
15.2(1g)	affected	-
15.2(2e)	affected	-
15.2(2f)	affected	-
15.2(2g)	affected	-
15.2(2h)	affected	-
15.2(3e)	affected	-
15.2(3f)	affected	-
15.2(3g)	affected	-
15.2(4d)	affected	-
15.2(4e)	affected	-
15.2(4f)	affected	-
15.2(5c)	affected	-
15.2(5d)	affected	-
15.2(5e)	affected	-
15.2(6e)	affected	-
15.2(6g)	affected	-
15.2(6h)	affected	-
15.2(7f)	affected	-
15.2(7g)	affected	-
15.2(8d)	affected	-
15.2(8e)	affected	-
15.2(8f)	affected	-
15.2(8g)	affected	-
15.2(8h)	affected	-
15.2(8i)	affected	-
15.3(1d)	affected	-
15.3(2a)	affected	-
15.3(2b)	affected	-
15.3(2c)	affected	-
15.3(2d)	affected	-
15.3(2e)	affected	-
16.0(1g)	affected	-
16.0(1j)	affected	-
16.0(2h)	affected	-
16.0(2j)	affected	-
16.0(3d)	affected	-
16.0(3e)	affected	-
16.0(3g)	affected	-
16.0(4c)	affected	-
16.0(5h)	affected	-
16.0(5j)	affected	-
16.0(6c)	affected	-
16.0(7e)	affected	-
16.0(8e)	affected	-
16.1(1f)	affected	-

Cisco

Cisco Unified Computing System (Managed)

n/a

Version	Status	Constraints
4.0(1a)	affected	-
4.0(1b)	affected	-
4.0(1c)	affected	-
4.0(1d)	affected	-
4.0(2a)	affected	-
4.0(2b)	affected	-
4.0(2d)	affected	-
4.0(2e)	affected	-
4.0(4a)	affected	-
4.0(4b)	affected	-
4.0(4c)	affected	-
4.0(4d)	affected	-
4.0(4e)	affected	-
4.0(4f)	affected	-
4.0(4g)	affected	-
4.0(4h)	affected	-
4.0(4i)	affected	-
4.0(4k)	affected	-
4.0(4l)	affected	-
4.0(4m)	affected	-
4.0(4n)	affected	-
4.0(4o)	affected	-
4.1(1a)	affected	-
4.1(1b)	affected	-
4.1(1c)	affected	-
4.1(1d)	affected	-
4.1(1e)	affected	-
4.1(2a)	affected	-
4.1(2b)	affected	-
4.1(2c)	affected	-
4.1(3a)	affected	-
4.1(3b)	affected	-
4.1(3c)	affected	-
4.1(3d)	affected	-
4.1(3e)	affected	-
4.1(3f)	affected	-
4.1(3h)	affected	-
4.1(3i)	affected	-
4.1(3j)	affected	-
4.1(3k)	affected	-
4.1(3l)	affected	-
4.1(3m)	affected	-
4.1(4a)	affected	-
4.2(1c)	affected	-
4.2(1d)	affected	-
4.2(1f)	affected	-
4.2(1i)	affected	-
4.2(1k)	affected	-
4.2(1l)	affected	-
4.2(1m)	affected	-
4.2(1n)	affected	-
4.2(2a)	affected	-
4.2(2c)	affected	-
4.2(2d)	affected	-
4.2(2e)	affected	-
4.2(3b)	affected	-
4.2(3d)	affected	-
4.2(3e)	affected	-
4.2(3g)	affected	-
4.2(3h)	affected	-
4.2(3i)	affected	-
4.2(3j)	affected	-
4.2(3k)	affected	-
4.2(3l)	affected	-
4.2(3m)	affected	-
4.3(2b)	affected	-
4.3(2c)	affected	-
4.3(2e)	affected	-
4.3(2f)	affected	-
4.3(3a)	affected	-
4.3(3c)	affected	-

Remediation

No remediation recorded yet.

Metrics

0.30% 0.00298

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.00298

Score over time

2024–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	0.30% (0.00298)	20.33th	v5 (v2026.06.15)
Jun 15, 2026	0.30% (0.00299)	21.29th	v5 (v2026.06.15)
Mar 17, 2025	0.03% (0.00030)	5.35th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00043)	10.81th	v3 (v2023.03.01)
Dec 5, 2024	0.04% (0.00043)	10.53th	v3 (v2023.03.01)

Weaknesses (1)

CWE-284

References (1)

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-image-sig-bypas-pQDRQvjL

Link	Providers	Tags
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-image-sig-bypas-pQDRQvjL

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Dec 4, 2024

Updated Apr 8, 2025

Reserved Nov 8, 2023

Link CVE-2024-20397

CISA Vulnrichment

Updated Dec 4, 2024

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2024-20397

Red Hat

Severity n/a

Public date n/a

Links CVE-2024-20397