9.1

CVE-2025-20221

A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters. 

 This vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by sending a crafted packet to the affected device. A successful exploit could allow the attacker to bypass the Layer 3 and Layer 4 traffic filters and inject a crafted packet into the network.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version16.12.13
Cisco ≫ Ios Xe Version17.1.1
Cisco ≫ Ios Xe Version17.1.1s
Cisco ≫ Ios Xe Version17.1.1t
Cisco ≫ Ios Xe Version17.1.3
Cisco ≫ Ios Xe Version17.2.1
Cisco ≫ Ios Xe Version17.2.1a
Cisco ≫ Ios Xe Version17.2.1r
Cisco ≫ Ios Xe Version17.2.1v
Cisco ≫ Ios Xe Version17.2.2
Cisco ≫ Ios Xe Version17.2.3
Cisco ≫ Ios Xe Version17.3.1
Cisco ≫ Ios Xe Version17.3.1a
Cisco ≫ Ios Xe Version17.3.2
Cisco ≫ Ios Xe Version17.3.2a
Cisco ≫ Ios Xe Version17.3.3
Cisco ≫ Ios Xe Version17.3.4
Cisco ≫ Ios Xe Version17.3.4a
Cisco ≫ Ios Xe Version17.3.5
Cisco ≫ Ios Xe Version17.3.6
Cisco ≫ Ios Xe Version17.3.7
Cisco ≫ Ios Xe Version17.3.8
Cisco ≫ Ios Xe Version17.3.8a
Cisco ≫ Ios Xe Version17.4.1
Cisco ≫ Ios Xe Version17.4.1a
Cisco ≫ Ios Xe Version17.4.1b
Cisco ≫ Ios Xe Version17.4.2
Cisco ≫ Ios Xe Version17.5.1
Cisco ≫ Ios Xe Version17.5.1a
Cisco ≫ Ios Xe Version17.6.1
Cisco ≫ Ios Xe Version17.6.1a
Cisco ≫ Ios Xe Version17.6.1y
Cisco ≫ Ios Xe Version17.6.2
Cisco ≫ Ios Xe Version17.6.3
Cisco ≫ Ios Xe Version17.6.3a
Cisco ≫ Ios Xe Version17.6.4
Cisco ≫ Ios Xe Version17.6.5
Cisco ≫ Ios Xe Version17.6.5a
Cisco ≫ Ios Xe Version17.6.6
Cisco ≫ Ios Xe Version17.6.6a
Cisco ≫ Ios Xe Version17.6.7
Cisco ≫ Ios Xe Version17.6.8
Cisco ≫ Ios Xe Version17.6.8a
Cisco ≫ Ios Xe Version17.7.1
Cisco ≫ Ios Xe Version17.7.1a
Cisco ≫ Ios Xe Version17.7.2
Cisco ≫ Ios Xe Version17.8.1
Cisco ≫ Ios Xe Version17.8.1a
Cisco ≫ Ios Xe Version17.9.1
Cisco ≫ Ios Xe Version17.9.1a
Cisco ≫ Ios Xe Version17.9.2
Cisco ≫ Ios Xe Version17.9.2a
Cisco ≫ Ios Xe Version17.9.3
Cisco ≫ Ios Xe Version17.9.3a
Cisco ≫ Ios Xe Version17.9.4
Cisco ≫ Ios Xe Version17.9.4a
Cisco ≫ Ios Xe Version17.9.5
Cisco ≫ Ios Xe Version17.9.5a
Cisco ≫ Ios Xe Version17.9.5b
Cisco ≫ Ios Xe Version17.9.5e
Cisco ≫ Ios Xe Version17.9.5f
Cisco ≫ Ios Xe Version17.9.6
Cisco ≫ Ios Xe Version17.9.6a
Cisco ≫ Ios Xe Version17.10.1
Cisco ≫ Ios Xe Version17.10.1a
Cisco ≫ Ios Xe Version17.10.1b
Cisco ≫ Ios Xe Version17.11.1
Cisco ≫ Ios Xe Version17.11.1a
Cisco ≫ Ios Xe Version17.12.1
Cisco ≫ Ios Xe Version17.12.1a
Cisco ≫ Ios Xe Version17.12.1z2
Cisco ≫ Ios Xe Version17.12.2
Cisco ≫ Ios Xe Version17.12.3
Cisco ≫ Ios Xe Version17.12.3a
Cisco ≫ Ios Xe Version17.12.4
Cisco ≫ Ios Xe Version17.12.4a
Cisco ≫ Ios Xe Version17.12.4b
Cisco ≫ Ios Xe Version17.13.1
Cisco ≫ Ios Xe Version17.13.1a
Cisco ≫ Ios Xe Version17.14.1
Cisco ≫ Ios Xe Version17.14.1a
Cisco ≫ Ios Xe Version17.15.1
Cisco ≫ Ios Xe Version17.15.1a
Cisco ≫ Ios Xe Version17.15.1x
Cisco ≫ Ios Xe Version17.15.2
Cisco ≫ Ios Xe Version17.15.2b
Cisco ≫ Ios Xe Version17.15.2c
Cisco ≫ Ios Xe Version17.16.1
Cisco ≫ Ios Xe Version17.16.1a
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.02% 0.032
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
psirt@cisco.com 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.