Asr1000-rommon.173-1r.spa.pkg

Router# copy tftp://192.168.1.100/asr1000-rommon.173-1r.spa.pkg bootflash:

Upgrading ROMmon is not the same as upgrading IOS-XE. It is a more delicate operation because a failure can brick the Route Processor. Follow these steps carefully.

ROMMON version: 17.3(1r)

Older ROMmon versions have known vulnerabilities. For example, a compromised ROMMON could allow an attacker to interrupt boot and load malicious code. Cisco often releases ROMmon updates to patch boot-time vulnerabilities (e.g., Cisco PSIRT advisory cisco-sa-rommon-privesc).

System Bootstrap, Version 16.8.1r, RELEASE SOFTWARE Copyright (c) 1994-2022 by cisco Systems, Inc. Current image running: Boot ROM0 ROMMON version: 16.8(1r) asr1000-rommon.173-1r.spa.pkg

If the new ROMmon causes issues (e.g., interfaces fail to initialize), you can usually roll back by:

Chassis type: ASR1002-X

This command gives the most direct answer: