CVE-2025-20221
5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Summary
A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters. This vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by sending a crafted packet to the affected device. A successful exploit could allow the attacker to bypass the Layer 3 and Layer 4 traffic filters and inject a crafted packet into the network.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco IOS XE Software | 16.12.13 | affected |
| Cisco | Cisco IOS XE Software | 17.1.1 | affected |
| Cisco | Cisco IOS XE Software | 17.1.1s | affected |
| Cisco | Cisco IOS XE Software | 17.1.1t | affected |
| Cisco | Cisco IOS XE Software | 17.1.3 | affected |
| Cisco | Cisco IOS XE Software | 17.2.1 | affected |
| Cisco | Cisco IOS XE Software | 17.2.1r | affected |
| Cisco | Cisco IOS XE Software | 17.2.1a | affected |
| Cisco | Cisco IOS XE Software | 17.2.1v | affected |
| Cisco | Cisco IOS XE Software | 17.2.2 | affected |
| Cisco | Cisco IOS XE Software | 17.2.3 | affected |
| Cisco | Cisco IOS XE Software | 17.3.1 | affected |
| Cisco | Cisco IOS XE Software | 17.3.2 | affected |
| Cisco | Cisco IOS XE Software | 17.3.3 | affected |
| Cisco | Cisco IOS XE Software | 17.3.1a | affected |
| Cisco | Cisco IOS XE Software | 17.3.2a | affected |
| Cisco | Cisco IOS XE Software | 17.3.4 | affected |
| Cisco | Cisco IOS XE Software | 17.3.5 | affected |
| Cisco | Cisco IOS XE Software | 17.3.4a | affected |
| Cisco | Cisco IOS XE Software | 17.3.6 | affected |
| Cisco | Cisco IOS XE Software | 17.3.7 | affected |
| Cisco | Cisco IOS XE Software | 17.3.8 | affected |
| Cisco | Cisco IOS XE Software | 17.3.8a | affected |
| Cisco | Cisco IOS XE Software | 17.4.1 | affected |
| Cisco | Cisco IOS XE Software | 17.4.2 | affected |
| Cisco | Cisco IOS XE Software | 17.4.1a | affected |
| Cisco | Cisco IOS XE Software | 17.4.1b | affected |
| Cisco | Cisco IOS XE Software | 17.5.1 | affected |
| Cisco | Cisco IOS XE Software | 17.5.1a | affected |
| Cisco | Cisco IOS XE Software | 17.6.1 | affected |
| Cisco | Cisco IOS XE Software | 17.6.2 | affected |
| Cisco | Cisco IOS XE Software | 17.6.1a | affected |
| Cisco | Cisco IOS XE Software | 17.6.3 | affected |
| Cisco | Cisco IOS XE Software | 17.6.1y | affected |
| Cisco | Cisco IOS XE Software | 17.6.3a | affected |
| Cisco | Cisco IOS XE Software | 17.6.4 | affected |
| Cisco | Cisco IOS XE Software | 17.6.5 | affected |
| Cisco | Cisco IOS XE Software | 17.6.6 | affected |
| Cisco | Cisco IOS XE Software | 17.6.6a | affected |
| Cisco | Cisco IOS XE Software | 17.6.5a | affected |
| Cisco | Cisco IOS XE Software | 17.6.7 | affected |
| Cisco | Cisco IOS XE Software | 17.6.8 | affected |
| Cisco | Cisco IOS XE Software | 17.6.8a | affected |
| Cisco | Cisco IOS XE Software | 17.7.1 | affected |
| Cisco | Cisco IOS XE Software | 17.7.1a | affected |
| Cisco | Cisco IOS XE Software | 17.7.2 | affected |
| Cisco | Cisco IOS XE Software | 17.10.1 | affected |
| Cisco | Cisco IOS XE Software | 17.10.1a | affected |
| Cisco | Cisco IOS XE Software | 17.10.1b | affected |
| Cisco | Cisco IOS XE Software | 17.8.1 | affected |
| Cisco | Cisco IOS XE Software | 17.8.1a | affected |
| Cisco | Cisco IOS XE Software | 17.9.1 | affected |
| Cisco | Cisco IOS XE Software | 17.9.2 | affected |
| Cisco | Cisco IOS XE Software | 17.9.1a | affected |
| Cisco | Cisco IOS XE Software | 17.9.3 | affected |
| Cisco | Cisco IOS XE Software | 17.9.2a | affected |
| Cisco | Cisco IOS XE Software | 17.9.3a | affected |
| Cisco | Cisco IOS XE Software | 17.9.4 | affected |
| Cisco | Cisco IOS XE Software | 17.9.5 | affected |
| Cisco | Cisco IOS XE Software | 17.9.4a | affected |
| Cisco | Cisco IOS XE Software | 17.9.5a | affected |
| Cisco | Cisco IOS XE Software | 17.9.5b | affected |
| Cisco | Cisco IOS XE Software | 17.9.6 | affected |
| Cisco | Cisco IOS XE Software | 17.9.6a | affected |
| Cisco | Cisco IOS XE Software | 17.9.5e | affected |
| Cisco | Cisco IOS XE Software | 17.9.5f | affected |
| Cisco | Cisco IOS XE Software | 17.11.1 | affected |
| Cisco | Cisco IOS XE Software | 17.11.1a | affected |
| Cisco | Cisco IOS XE Software | 17.12.1 | affected |
| Cisco | Cisco IOS XE Software | 17.12.1a | affected |
| Cisco | Cisco IOS XE Software | 17.12.2 | affected |
| Cisco | Cisco IOS XE Software | 17.12.3 | affected |
| Cisco | Cisco IOS XE Software | 17.12.4 | affected |
| Cisco | Cisco IOS XE Software | 17.12.3a | affected |
| Cisco | Cisco IOS XE Software | 17.12.1z2 | affected |
| Cisco | Cisco IOS XE Software | 17.12.4a | affected |
| Cisco | Cisco IOS XE Software | 17.12.4b | affected |
| Cisco | Cisco IOS XE Software | 17.13.1 | affected |
| Cisco | Cisco IOS XE Software | 17.13.1a | affected |
| Cisco | Cisco IOS XE Software | 17.14.1 | affected |
| Cisco | Cisco IOS XE Software | 17.14.1a | affected |
| Cisco | Cisco IOS XE Software | 17.15.1 | affected |
| Cisco | Cisco IOS XE Software | 17.15.1a | affected |
| Cisco | Cisco IOS XE Software | 17.15.2 | affected |
| Cisco | Cisco IOS XE Software | 17.15.1x | affected |
| Cisco | Cisco IOS XE Software | 17.15.2c | affected |
| Cisco | Cisco IOS XE Software | 17.15.2b | affected |
| Cisco | Cisco IOS XE Software | 17.16.1 | affected |
| Cisco | Cisco IOS XE Software | 17.16.1a | affected |
Weaknesses
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: yes
- Technical Impact: total
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.