QID 316906

Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850,
Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could allow an authenticated,
local attacker to either execute arbitrary code on the underlying operating system,
install and boot a malicious software image, or execute unsigned binaries on an affected device.

Affected Products Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches
if they are running a vulnerable release of Cisco IOS XE Software.

QID Detection Logic (Authenticated):
The check matches Cisco IOS XE version retrieved via Unix Auth using "show version" command.
QID Detection Logic (Unauthenticated):
The check matches Cisco IOS XE version retrieved via SNMP or TCP/IP Fingerprint or NTP or Telnet.

A successful exploit could allow the attacker to either execute arbitrary code on the underlying operating system
or execute unsigned code and bypass the image verification check part of the secure boot process.