Patchfirst: CVEs linked to T1542.004 ROMMONkithttps://patchfirst.co/technique/T1542.004/New and newly exploited CVEs that lead to ATT&CK T1542.004 ROMMONkit, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMTCVE-2020-3416: Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilitieshttps://patchfirst.co/cve/CVE-2020-3416/CVE-2020-3416Thu, 24 Sep 2020 00:00:00 GMTCisco · Cisco IOS XE Software. Not in CISA KEV. EPSS 0.3% (higher than 25.2% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1542.004 ROMMONkit. Priority 9.7 of 100.T1078T1542.004CVE-2020-3513: Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilitieshttps://patchfirst.co/cve/CVE-2020-3513/CVE-2020-3513Thu, 24 Sep 2020 00:00:00 GMTCisco · Cisco IOS XE Software. Not in CISA KEV. EPSS 0.3% (higher than 25.2% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1542.004 ROMMONkit. Priority 9.7 of 100.T1078T1542.004