QID 316904

A vulnerability in the software image verification functionality of Cisco IOS XE Software
for the Cisco Catalyst 9000 Family of switches could allow
an unauthenticated, physical attacker to execute unsigned code at system boot time.

Affected Products
Cisco devices if they are running a vulnerable release of Cisco IOS XE Software: Catalyst C9500-32C Switch Catalyst C9500-32QC Switch Catalyst C9500-24Y4C Switch Catalyst C9500-48Y4C Switch Catalyst 9400 Series Switches Catalyst 9600 Series Switches

QID Detection Logic (Authenticated):
The check matches Cisco IOS XE version retrieved via Unix Auth using "show version" command.
QID Detection Logic (Unauthenticated):
The check matches Cisco IOS XE version retrieved via SNMP or TCP/IP Fingerprint or NTP or Telnet.

A successful exploit could allow the attacker to boot a malicious software image or
execute unsigned code and bypass the image verification check
part of the secure boot process of an affected device.