Is CVE-2025-20313 being actively exploited?

CVE-2025-20313 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2025-20313?

CVE-2025-20313 has a CVSS 3.1 base score of 6.7 (MEDIUM).

CVE-2025-20313

MEDIUM · CVSS 6.7EPSS 0.2%EU EUVD

Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due path traversal and improper image integrity validation. A successful exploit could allow the attacker to execute persistent code on the underlying operating system. Because this allows the attacker to bypass a major security feature of the device, Cisco has raised the Security Impact Rating (SIR) of this advisory from Medium to High. For more information about these vulnerabilities, see the Details ["#details"] section of this advisory. ERP

Key facts

CVSS score: 6.7 (v3.1)
Severity: MEDIUM
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-35
EPSS score: 0.2% (7th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2025-31029)
Published: September 24, 2025
NVD last modified: September 26, 2026
Status: Analyzed

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2025-31029 in the EU Vulnerability Database. Last updated in EUVD on February 26, 2026.

View on the EU Vulnerability Database

Affected products

cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe
cisco / ios xe

and 69 more…

Certified products that may be affected

11 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Cisco Embedded Services 9300 and 3300 Series Switches (ESS9300 & ESS3300) running IOS-XE 17.15 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11662-2026 - active
Cisco Catalyst 8000V Edge (C8000V) running IOS-XE 17.15 - Cisco Systems, Inc. - Common Criteria Certificate Number: 2025/161 - active
Cisco 1000 Series Integrated Services Routers (C1100), Cisco Catalyst IR1800 Rugged Series Routers (IR1800), Cisco Catalyst IR8300 Rugged Series Routers (IR8300) running IOS-XE 17.15 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11643-2025 - active
Cisco Catalyst Industrial Ethernet 9300 Rugged Series Switches running IOS-XE 17.15 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11603-2025 - active
Cisco Aggregation Services Router 1000 Series (ASR1K), Cisco Catalyst 8200, 8300, 8500 Series Edge Routers (Cat8K) running IOS-XE version 17.15 - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-11642-2025 - active

See all 11 in the Security Certifications Explorer.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secboot-UqFD8AvC(Vendor Advisory)

Last updated September 27, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain