{"schemaVersion":3,"id":"CVE-2020-3284","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability in the enhanced Preboot eXecution Environment (PXE) boot loader for Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to execute unsigned code during the PXE boot process on an affected device. The PXE boot loader is part of the BIOS and runs over the management interface of hardware platforms that are running Cisco IOS XR Software only. The vulnerability exists because internal commands that are issued when the PXE network boot process is loading a software image are not properly verified. An attacker could exploit this vulnerability by compromising the PXE boot server and replacing a valid software image with a malicious one. Alternatively, the attacker could impersonate the PXE boot server and send a PXE boot reply with a malicious file. A successful exploit could allow the attacker to execute unsigned code on the affected device. Note: To fix this vulnerability, both the Cisco IOS XR Software and the BIOS must be upgraded. The BIOS code is included in Cisco IOS XR Software but might require additional installation steps. For further information, see the Fixed Software section of this advisory.","dates":{"published":"2020-11-06T18:16:03.841Z","modified":"2024-11-13T17:43:58.908Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":8.1,"severity":"high","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":8.1,"severity":"high","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":9.3,"severity":"high","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02887,"percentile":0.86681,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02887},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02887,"percentile":0.86681}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02887,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02887,"percentile":0.86681}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-284","name":"Improper Access Control","description":"The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","type":"weakness","status":"Incomplete","abstraction":"Pillar","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/284.html"}],"affected":[{"vendor":"cisco","product":"a99-rp2-se_firmware","name":"a99-rp2-se firmware","label":"a99-rp2-se_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 14.35","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.35","eol":null,"hubHref":"/vendor/cisco/a99-rp2-se"},{"vendor":"cisco","product":"a99-rp2-tr_firmware","name":"a99-rp2-tr firmware","label":"a99-rp2-tr_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 14.35","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.35","eol":null,"hubHref":"/vendor/cisco/a99-rp2-tr"},{"vendor":"cisco","product":"a99-rp3-se_firmware","name":"a99-rp3-se firmware","label":"a99-rp3-se_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 30.23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 30.23","eol":null,"hubHref":"/vendor/cisco/a99-rp3-se"},{"vendor":"cisco","product":"a99-rp3-tr_firmware","name":"a99-rp3-tr firmware","label":"a99-rp3-tr_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 30.23","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 30.23","eol":null,"hubHref":"/vendor/cisco/a99-rp3-tr"},{"vendor":"cisco","product":"a99-rsp-se_firmware","name":"a99-rsp-se firmware","label":"a99-rsp-se_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 16.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.14","eol":null,"hubHref":"/vendor/cisco/a99-rsp-se"},{"vendor":"cisco","product":"a99-rsp-tr_firmware","name":"a99-rsp-tr firmware","label":"a99-rsp-tr_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 16.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 16.14","eol":null,"hubHref":"/vendor/cisco/a99-rsp-tr"},{"vendor":"cisco","product":"a9k-rsp5-se_firmware","name":"a9k-rsp5-se firmware","label":"a9k-rsp5-se_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 31.20","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 31.20","eol":null,"hubHref":"/vendor/cisco/a9k-rsp5-se"},{"vendor":"cisco","product":"a9k-rsp5-tr_firmware","name":"a9k-rsp5-tr firmware","label":"a9k-rsp5-tr_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 31.20","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 31.20","eol":null,"hubHref":"/vendor/cisco/a9k-rsp5-tr"},{"vendor":"cisco","product":"a9k-rsp880-lt-se_firmware","name":"a9k-rsp880-lt-se firmware","label":"a9k-rsp880-lt-se_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 17.34","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.34","eol":null,"hubHref":"/vendor/cisco/a9k-rsp880-lt-se"},{"vendor":"cisco","product":"a9k-rsp880-lt-tr_firmware","name":"a9k-rsp880-lt-tr firmware","label":"a9k-rsp880-lt-tr_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 17.34","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 17.34","eol":null,"hubHref":"/vendor/cisco/a9k-rsp880-lt-tr"},{"vendor":"cisco","product":"a9k-rsp880-se_firmware","name":"a9k-rsp880-se firmware","label":"a9k-rsp880-se_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 10.65","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.65","eol":null,"hubHref":"/vendor/cisco/a9k-rsp880-se"},{"vendor":"cisco","product":"a9k-rsp880-tr_firmware","name":"a9k-rsp880-tr firmware","label":"a9k-rsp880-tr_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 10.65","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.65","eol":null,"hubHref":"/vendor/cisco/a9k-rsp880-tr"},{"vendor":"cisco","product":"asr-9901-rp_firmware","name":"asr-9901-rp firmware","label":"asr-9901-rp_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 22.20","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 22.20","eol":null,"hubHref":"/vendor/cisco/asr-9901-rp"},{"vendor":"cisco","product":"cisco ios xr software","name":"Cisco IOS XR Software","label":"cisco ios xr software","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"n/a","noFixRecorded":false,"fixedIn":null}],"versionsText":"n/a","eol":null,"hubHref":"/vendor/cisco/cisco_ios_xr_software"},{"vendor":"cisco","product":"ios_xr","name":"ios xr","label":"ios_xr","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 6.5.2","noFixRecorded":false,"fixedIn":null},{"text":"< 7.2.1","noFixRecorded":false,"fixedIn":null},{"text":"≥ 7.0.0, < 7.0.2","noFixRecorded":false,"fixedIn":null},{"text":"< 6.6.25","noFixRecorded":false,"fixedIn":null},{"text":"< 1.21","noFixRecorded":false,"fixedIn":null},{"text":"< 1.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.5.2 | < 7.2.1 | ≥ 7.0.0, < 7.0.2 | < 6.6.25 | < 1.21 | < 1.12","eol":null,"hubHref":"/vendor/cisco/ios_xr"},{"vendor":"cisco","product":"n540-12z20g-sys-a\\/d_firmware","name":"n540-12z20g-sys-a\\/d firmware","label":"n540-12z20g-sys-a\\/d_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15","eol":null,"hubHref":"/vendor/cisco/n540-12z20g-sys-ad"},{"vendor":"cisco","product":"n540-24z8q2c-m_firmware","name":"n540-24z8q2c-m firmware","label":"n540-24z8q2c-m_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15","eol":null,"hubHref":"/vendor/cisco/n540-24z8q2c-m"},{"vendor":"cisco","product":"n540-28z4c-sys-a\\/d_firmware","name":"n540-28z4c-sys-a\\/d firmware","label":"n540-28z4c-sys-a\\/d_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15","eol":null,"hubHref":"/vendor/cisco/n540-28z4c-sys-ad"},{"vendor":"cisco","product":"n540-acc-sys_firmware","name":"n540-acc-sys firmware","label":"n540-acc-sys_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15","eol":null,"hubHref":"/vendor/cisco/n540-acc-sys"},{"vendor":"cisco","product":"n540x-12z16g-sys-a\\/d_firmware","name":"n540x-12z16g-sys-a\\/d firmware","label":"n540x-12z16g-sys-a\\/d_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15","eol":null,"hubHref":"/vendor/cisco/n540x-12z16g-sys-ad"},{"vendor":"cisco","product":"n540x-16z4g8q2c-a\\/d_firmware","name":"n540x-16z4g8q2c-a\\/d firmware","label":"n540x-16z4g8q2c-a\\/d_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.15","eol":null,"hubHref":"/vendor/cisco/n540x-16z4g8q2c-ad"},{"vendor":"cisco","product":"n560-4-sys_firmware","name":"n560-4-sys firmware","label":"n560-4-sys_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14","eol":null,"hubHref":"/vendor/cisco/n560-4-sys"},{"vendor":"cisco","product":"n560-7-sys_firmware","name":"n560-7-sys firmware","label":"n560-7-sys_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 0.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.14","eol":null,"hubHref":"/vendor/cisco/n560-7-sys"},{"vendor":"cisco","product":"nc55-rp_firmware","name":"nc55-rp firmware","label":"nc55-rp_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 9.30","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.30","eol":null,"hubHref":"/vendor/cisco/nc55-rp"},{"vendor":"cisco","product":"nc55-rp-e_firmware","name":"nc55-rp-e firmware","label":"nc55-rp-e_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21","eol":null,"hubHref":"/vendor/cisco/nc55-rp-e"},{"vendor":"cisco","product":"ncs-5501_firmware","name":"ncs-5501 firmware","label":"ncs-5501_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 6.6.25","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.6.25","eol":null,"hubHref":"/vendor/cisco/ncs-5501"},{"vendor":"cisco","product":"ncs-5501-se_firmware","name":"ncs-5501-se firmware","label":"ncs-5501-se_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21","eol":null,"hubHref":"/vendor/cisco/ncs-5501-se"},{"vendor":"cisco","product":"ncs-5502_firmware","name":"ncs-5502 firmware","label":"ncs-5502_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21","eol":null,"hubHref":"/vendor/cisco/ncs-5502"},{"vendor":"cisco","product":"ncs-5502-se_firmware","name":"ncs-5502-se firmware","label":"ncs-5502-se_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.21","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.21","eol":null,"hubHref":"/vendor/cisco/ncs-5502-se"},{"vendor":"cisco","product":"ncs-55a1-24h_firmware","name":"ncs-55a1-24h firmware","label":"ncs-55a1-24h_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12","eol":null,"hubHref":"/vendor/cisco/ncs-55a1-24h"},{"vendor":"cisco","product":"ncs-55a1-24q6h-s_firmware","name":"ncs-55a1-24q6h-s firmware","label":"ncs-55a1-24q6h-s_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 6.6.25","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.6.25","eol":null,"hubHref":"/vendor/cisco/ncs-55a1-24q6h-s"},{"vendor":"cisco","product":"ncs-55a1-36h-s_firmware","name":"ncs-55a1-36h-s firmware","label":"ncs-55a1-36h-s_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12","eol":null,"hubHref":"/vendor/cisco/ncs-55a1-36h-s"},{"vendor":"cisco","product":"ncs-55a1-36h-se-s_firmware","name":"ncs-55a1-36h-se-s firmware","label":"ncs-55a1-36h-se-s_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12","eol":null,"hubHref":"/vendor/cisco/ncs-55a1-36h-se-s"},{"vendor":"cisco","product":"ncs-55a2-mod-hd-s_firmware","name":"ncs-55a2-mod-hd-s firmware","label":"ncs-55a2-mod-hd-s_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12","eol":null,"hubHref":"/vendor/cisco/ncs-55a2-mod-hd-s"},{"vendor":"cisco","product":"ncs-55a2-mod-hx-s_firmware","name":"ncs-55a2-mod-hx-s firmware","label":"ncs-55a2-mod-hx-s_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12","eol":null,"hubHref":"/vendor/cisco/ncs-55a2-mod-hx-s"},{"vendor":"cisco","product":"ncs-55a2-mod-s_firmware","name":"ncs-55a2-mod-s firmware","label":"ncs-55a2-mod-s_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12","eol":null,"hubHref":"/vendor/cisco/ncs-55a2-mod-s"},{"vendor":"cisco","product":"ncs-55a2-mod-se-h-s_firmware","name":"ncs-55a2-mod-se-h-s firmware","label":"ncs-55a2-mod-se-h-s_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12","eol":null,"hubHref":"/vendor/cisco/ncs-55a2-mod-se-h-s"},{"vendor":"cisco","product":"ncs-55a2-mod-se-s_firmware","name":"ncs-55a2-mod-se-s firmware","label":"ncs-55a2-mod-se-s_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 6.6.25","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.6.25","eol":null,"hubHref":"/vendor/cisco/ncs-55a2-mod-se-s"},{"vendor":"cisco","product":"ncs1001_firmware","name":"ncs1001 firmware","label":"ncs1001_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 14.60","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.60","eol":null,"hubHref":"/vendor/cisco/ncs1001"},{"vendor":"cisco","product":"ncs1002_firmware","name":"ncs1002 firmware","label":"ncs1002_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 14.60","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.60","eol":null,"hubHref":"/vendor/cisco/ncs1002"},{"vendor":"cisco","product":"ncs1004_firmware","name":"ncs1004 firmware","label":"ncs1004_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 14.60","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 14.60","eol":null,"hubHref":"/vendor/cisco/ncs1004"},{"vendor":"cisco","product":"ncs5001_firmware","name":"ncs5001 firmware","label":"ncs5001_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13","eol":null,"hubHref":"/vendor/cisco/ncs5001"},{"vendor":"cisco","product":"ncs5002_firmware","name":"ncs5002 firmware","label":"ncs5002_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.13","eol":null,"hubHref":"/vendor/cisco/ncs5002"},{"vendor":"cisco","product":"ncs5011_firmware","name":"ncs5011 firmware","label":"ncs5011_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.14","eol":null,"hubHref":"/vendor/cisco/ncs5011"},{"vendor":"cisco","product":"ncs55-a1-48q6h_firmware","name":"ncs55-a1-48q6h firmware","label":"ncs55-a1-48q6h_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12","eol":null,"hubHref":"/vendor/cisco/ncs55-a1-48q6h"}],"affectedCount":45,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-pxe-unsign-code-exec-qAa78fD2","label":"tools.cisco.com/security/…","hostname":"tools.cisco.com","tags":["Vendor Advisory","X Refsource CISCO"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2020-11-06T18:16:03.841Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-11-13T17:43:58.908Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T14:45:36.016Z","stale":false,"partial":false}}