Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches Vulnerabilities

Vulnerability

Multiple vulnerabilities affect Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches. The flaws could allow an attacker to execute persistent code at boot time or to permanently prevent the device from booting, resulting in a permanent denial of service (DoS) condition. The vulnerabilities reside in the boot process or firmware handling. Affected products include specific models; consult the advisory for a full list [1].

Exploitation

An attacker with physical or privileged network access to the device may exploit these vulnerabilities by manipulating boot-time operations or firmware components. The exact prerequisites are detailed in the advisory [1].

Impact

Successful exploitation allows the attacker to inject persistent code that executes at each boot, potentially taking full control of the device, or to render the device permanently unbootable, causing a permanent denial of service [1].

Mitigation

Cisco has released free software updates that address these vulnerabilities. Customers should upgrade to the fixed versions as indicated in the advisory [1]. No workarounds are available.