6.5
Medium
CVE-2025-41713 During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to…
Description
During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CC100 0751-9301 | Versions not published | |
| CC100 0751-9301 HW rev. <082100 04.08 | earliest → < 04.08.05 | 04.08.05 |
| CC100 0751-9301/K000-0005 | Versions not published | |
| CC100 0751-9301/K000-0005 HW rev. <082100 04.08 | earliest → < 04.08.05 | 04.08.05 |
| CC100 0751-9401 | Versions not published | |
| CC100 0751-9401 HW rev. <052500 04.08 | earliest → < 04.08.05 | 04.08.05 |
| CC100 0751-9402 | Versions not published | |
| CC100 0751-9402/0000-0001 | Versions not published | |
| CC100 0751-9402/0000-0001 HW rev. <052800 04.08 | earliest → < 04.08.05 | 04.08.05 |