Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-20192 (GCVE-0-2025-20192)
Vulnerability from cvelistv5 – Published: 2025-05-07 17:36 – Updated: 2025-05-07 19:43
VLAI?
EPSS
Summary
A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.
This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.
Severity ?
7.7 (High)
CWE
- CWE-232 - Improper Handling of Undefined Values
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco IOS XE Software |
Affected:
3.13.0S
Affected: 3.13.1S Affected: 3.13.2S Affected: 3.13.3S Affected: 3.13.4S Affected: 3.13.5S Affected: 3.13.6S Affected: 3.13.7S Affected: 3.13.6aS Affected: 3.13.8S Affected: 3.13.9S Affected: 3.13.10S Affected: 3.14.0S Affected: 3.14.1S Affected: 3.14.2S Affected: 3.14.3S Affected: 3.14.4S Affected: 3.15.0S Affected: 3.15.1S Affected: 3.15.2S Affected: 3.15.1cS Affected: 3.15.3S Affected: 3.15.4S Affected: 3.16.0S Affected: 3.16.1aS Affected: 3.16.2S Affected: 3.16.0cS Affected: 3.16.3S Affected: 3.16.4aS Affected: 3.16.4bS Affected: 3.16.5S Affected: 3.16.4dS Affected: 3.16.6S Affected: 3.16.7S Affected: 3.16.6bS Affected: 3.16.7aS Affected: 3.16.7bS Affected: 3.16.8S Affected: 3.16.9S Affected: 3.16.10S Affected: 3.17.0S Affected: 3.17.1S Affected: 3.17.2S Affected: 3.17.3S Affected: 3.17.4S Affected: 16.2.1 Affected: 16.2.2 Affected: 16.3.1 Affected: 16.3.2 Affected: 16.3.3 Affected: 16.3.1a Affected: 16.3.4 Affected: 16.3.5 Affected: 16.3.6 Affected: 16.3.7 Affected: 16.3.8 Affected: 16.3.9 Affected: 16.3.10 Affected: 16.3.11 Affected: 16.4.1 Affected: 16.4.2 Affected: 16.4.3 Affected: 16.5.1 Affected: 16.5.1b Affected: 16.5.2 Affected: 16.5.3 Affected: 3.18.2aSP Affected: 16.6.1 Affected: 16.6.2 Affected: 16.6.3 Affected: 16.6.4 Affected: 16.6.5 Affected: 16.6.6 Affected: 16.6.7 Affected: 16.6.8 Affected: 16.6.9 Affected: 16.6.10 Affected: 16.7.1 Affected: 16.7.2 Affected: 16.7.3 Affected: 16.8.1 Affected: 16.8.1s Affected: 16.8.2 Affected: 16.8.3 Affected: 16.9.1 Affected: 16.9.2 Affected: 16.9.1s Affected: 16.9.3 Affected: 16.9.4 Affected: 16.9.5 Affected: 16.9.6 Affected: 16.9.7 Affected: 16.9.8 Affected: 16.10.1 Affected: 16.10.1a Affected: 16.10.1b Affected: 16.10.1s Affected: 16.10.1e Affected: 16.10.2 Affected: 16.10.3 Affected: 16.11.1 Affected: 16.11.1a Affected: 16.11.2 Affected: 16.11.1s Affected: 16.12.1 Affected: 16.12.1s Affected: 16.12.1a Affected: 16.12.1c Affected: 16.12.2 Affected: 16.12.3 Affected: 16.12.8 Affected: 16.12.2s Affected: 16.12.4 Affected: 16.12.3s Affected: 16.12.5 Affected: 16.12.6 Affected: 16.12.7 Affected: 17.1.1 Affected: 17.1.1s Affected: 17.1.1t Affected: 17.1.3 Affected: 17.2.1 Affected: 17.2.1r Affected: 17.2.1v Affected: 17.2.2 Affected: 17.2.3 Affected: 17.3.1 Affected: 17.3.2 Affected: 17.3.3 Affected: 17.3.1a Affected: 17.3.4 Affected: 17.3.5 Affected: 17.3.4a Affected: 17.3.6 Affected: 17.3.7 Affected: 17.3.8 Affected: 17.3.8a Affected: 17.4.1 Affected: 17.4.2 Affected: 17.4.1a Affected: 17.4.1b Affected: 17.5.1 Affected: 17.5.1a Affected: 17.6.1 Affected: 17.6.2 Affected: 17.6.1a Affected: 17.6.3 Affected: 17.6.1y Affected: 17.6.3a Affected: 17.6.4 Affected: 17.6.5 Affected: 17.6.6 Affected: 17.6.6a Affected: 17.6.5a Affected: 17.6.7 Affected: 17.6.8 Affected: 17.6.8a Affected: 17.7.1 Affected: 17.7.1a Affected: 17.7.2 Affected: 17.10.1 Affected: 17.10.1a Affected: 17.8.1 Affected: 17.8.1a Affected: 17.9.1 Affected: 17.9.2 Affected: 17.9.1a Affected: 17.9.3 Affected: 17.9.2a Affected: 17.9.3a Affected: 17.9.4 Affected: 17.9.5 Affected: 17.9.4a Affected: 17.9.5a Affected: 17.9.5b Affected: 17.9.5e Affected: 17.9.5f Affected: 17.11.1 Affected: 17.11.1a Affected: 17.12.1 Affected: 17.12.1a Affected: 17.12.2 Affected: 17.12.3 Affected: 17.12.2a Affected: 17.12.3a Affected: 17.13.1 Affected: 17.13.1a Affected: 17.14.1 Affected: 17.14.1a |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-20192",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-05-07T18:56:00.580521Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-05-07T19:43:26.883Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Cisco IOS XE Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "3.13.0S"
},
{
"status": "affected",
"version": "3.13.1S"
},
{
"status": "affected",
"version": "3.13.2S"
},
{
"status": "affected",
"version": "3.13.3S"
},
{
"status": "affected",
"version": "3.13.4S"
},
{
"status": "affected",
"version": "3.13.5S"
},
{
"status": "affected",
"version": "3.13.6S"
},
{
"status": "affected",
"version": "3.13.7S"
},
{
"status": "affected",
"version": "3.13.6aS"
},
{
"status": "affected",
"version": "3.13.8S"
},
{
"status": "affected",
"version": "3.13.9S"
},
{
"status": "affected",
"version": "3.13.10S"
},
{
"status": "affected",
"version": "3.14.0S"
},
{
"status": "affected",
"version": "3.14.1S"
},
{
"status": "affected",
"version": "3.14.2S"
},
{
"status": "affected",
"version": "3.14.3S"
},
{
"status": "affected",
"version": "3.14.4S"
},
{
"status": "affected",
"version": "3.15.0S"
},
{
"status": "affected",
"version": "3.15.1S"
},
{
"status": "affected",
"version": "3.15.2S"
},
{
"status": "affected",
"version": "3.15.1cS"
},
{
"status": "affected",
"version": "3.15.3S"
},
{
"status": "affected",
"version": "3.15.4S"
},
{
"status": "affected",
"version": "3.16.0S"
},
{
"status": "affected",
"version": "3.16.1aS"
},
{
"status": "affected",
"version": "3.16.2S"
},
{
"status": "affected",
"version": "3.16.0cS"
},
{
"status": "affected",
"version": "3.16.3S"
},
{
"status": "affected",
"version": "3.16.4aS"
},
{
"status": "affected",
"version": "3.16.4bS"
},
{
"status": "affected",
"version": "3.16.5S"
},
{
"status": "affected",
"version": "3.16.4dS"
},
{
"status": "affected",
"version": "3.16.6S"
},
{
"status": "affected",
"version": "3.16.7S"
},
{
"status": "affected",
"version": "3.16.6bS"
},
{
"status": "affected",
"version": "3.16.7aS"
},
{
"status": "affected",
"version": "3.16.7bS"
},
{
"status": "affected",
"version": "3.16.8S"
},
{
"status": "affected",
"version": "3.16.9S"
},
{
"status": "affected",
"version": "3.16.10S"
},
{
"status": "affected",
"version": "3.17.0S"
},
{
"status": "affected",
"version": "3.17.1S"
},
{
"status": "affected",
"version": "3.17.2S"
},
{
"status": "affected",
"version": "3.17.3S"
},
{
"status": "affected",
"version": "3.17.4S"
},
{
"status": "affected",
"version": "16.2.1"
},
{
"status": "affected",
"version": "16.2.2"
},
{
"status": "affected",
"version": "16.3.1"
},
{
"status": "affected",
"version": "16.3.2"
},
{
"status": "affected",
"version": "16.3.3"
},
{
"status": "affected",
"version": "16.3.1a"
},
{
"status": "affected",
"version": "16.3.4"
},
{
"status": "affected",
"version": "16.3.5"
},
{
"status": "affected",
"version": "16.3.6"
},
{
"status": "affected",
"version": "16.3.7"
},
{
"status": "affected",
"version": "16.3.8"
},
{
"status": "affected",
"version": "16.3.9"
},
{
"status": "affected",
"version": "16.3.10"
},
{
"status": "affected",
"version": "16.3.11"
},
{
"status": "affected",
"version": "16.4.1"
},
{
"status": "affected",
"version": "16.4.2"
},
{
"status": "affected",
"version": "16.4.3"
},
{
"status": "affected",
"version": "16.5.1"
},
{
"status": "affected",
"version": "16.5.1b"
},
{
"status": "affected",
"version": "16.5.2"
},
{
"status": "affected",
"version": "16.5.3"
},
{
"status": "affected",
"version": "3.18.2aSP"
},
{
"status": "affected",
"version": "16.6.1"
},
{
"status": "affected",
"version": "16.6.2"
},
{
"status": "affected",
"version": "16.6.3"
},
{
"status": "affected",
"version": "16.6.4"
},
{
"status": "affected",
"version": "16.6.5"
},
{
"status": "affected",
"version": "16.6.6"
},
{
"status": "affected",
"version": "16.6.7"
},
{
"status": "affected",
"version": "16.6.8"
},
{
"status": "affected",
"version": "16.6.9"
},
{
"status": "affected",
"version": "16.6.10"
},
{
"status": "affected",
"version": "16.7.1"
},
{
"status": "affected",
"version": "16.7.2"
},
{
"status": "affected",
"version": "16.7.3"
},
{
"status": "affected",
"version": "16.8.1"
},
{
"status": "affected",
"version": "16.8.1s"
},
{
"status": "affected",
"version": "16.8.2"
},
{
"status": "affected",
"version": "16.8.3"
},
{
"status": "affected",
"version": "16.9.1"
},
{
"status": "affected",
"version": "16.9.2"
},
{
"status": "affected",
"version": "16.9.1s"
},
{
"status": "affected",
"version": "16.9.3"
},
{
"status": "affected",
"version": "16.9.4"
},
{
"status": "affected",
"version": "16.9.5"
},
{
"status": "affected",
"version": "16.9.6"
},
{
"status": "affected",
"version": "16.9.7"
},
{
"status": "affected",
"version": "16.9.8"
},
{
"status": "affected",
"version": "16.10.1"
},
{
"status": "affected",
"version": "16.10.1a"
},
{
"status": "affected",
"version": "16.10.1b"
},
{
"status": "affected",
"version": "16.10.1s"
},
{
"status": "affected",
"version": "16.10.1e"
},
{
"status": "affected",
"version": "16.10.2"
},
{
"status": "affected",
"version": "16.10.3"
},
{
"status": "affected",
"version": "16.11.1"
},
{
"status": "affected",
"version": "16.11.1a"
},
{
"status": "affected",
"version": "16.11.2"
},
{
"status": "affected",
"version": "16.11.1s"
},
{
"status": "affected",
"version": "16.12.1"
},
{
"status": "affected",
"version": "16.12.1s"
},
{
"status": "affected",
"version": "16.12.1a"
},
{
"status": "affected",
"version": "16.12.1c"
},
{
"status": "affected",
"version": "16.12.2"
},
{
"status": "affected",
"version": "16.12.3"
},
{
"status": "affected",
"version": "16.12.8"
},
{
"status": "affected",
"version": "16.12.2s"
},
{
"status": "affected",
"version": "16.12.4"
},
{
"status": "affected",
"version": "16.12.3s"
},
{
"status": "affected",
"version": "16.12.5"
},
{
"status": "affected",
"version": "16.12.6"
},
{
"status": "affected",
"version": "16.12.7"
},
{
"status": "affected",
"version": "17.1.1"
},
{
"status": "affected",
"version": "17.1.1s"
},
{
"status": "affected",
"version": "17.1.1t"
},
{
"status": "affected",
"version": "17.1.3"
},
{
"status": "affected",
"version": "17.2.1"
},
{
"status": "affected",
"version": "17.2.1r"
},
{
"status": "affected",
"version": "17.2.1v"
},
{
"status": "affected",
"version": "17.2.2"
},
{
"status": "affected",
"version": "17.2.3"
},
{
"status": "affected",
"version": "17.3.1"
},
{
"status": "affected",
"version": "17.3.2"
},
{
"status": "affected",
"version": "17.3.3"
},
{
"status": "affected",
"version": "17.3.1a"
},
{
"status": "affected",
"version": "17.3.4"
},
{
"status": "affected",
"version": "17.3.5"
},
{
"status": "affected",
"version": "17.3.4a"
},
{
"status": "affected",
"version": "17.3.6"
},
{
"status": "affected",
"version": "17.3.7"
},
{
"status": "affected",
"version": "17.3.8"
},
{
"status": "affected",
"version": "17.3.8a"
},
{
"status": "affected",
"version": "17.4.1"
},
{
"status": "affected",
"version": "17.4.2"
},
{
"status": "affected",
"version": "17.4.1a"
},
{
"status": "affected",
"version": "17.4.1b"
},
{
"status": "affected",
"version": "17.5.1"
},
{
"status": "affected",
"version": "17.5.1a"
},
{
"status": "affected",
"version": "17.6.1"
},
{
"status": "affected",
"version": "17.6.2"
},
{
"status": "affected",
"version": "17.6.1a"
},
{
"status": "affected",
"version": "17.6.3"
},
{
"status": "affected",
"version": "17.6.1y"
},
{
"status": "affected",
"version": "17.6.3a"
},
{
"status": "affected",
"version": "17.6.4"
},
{
"status": "affected",
"version": "17.6.5"
},
{
"status": "affected",
"version": "17.6.6"
},
{
"status": "affected",
"version": "17.6.6a"
},
{
"status": "affected",
"version": "17.6.5a"
},
{
"status": "affected",
"version": "17.6.7"
},
{
"status": "affected",
"version": "17.6.8"
},
{
"status": "affected",
"version": "17.6.8a"
},
{
"status": "affected",
"version": "17.7.1"
},
{
"status": "affected",
"version": "17.7.1a"
},
{
"status": "affected",
"version": "17.7.2"
},
{
"status": "affected",
"version": "17.10.1"
},
{
"status": "affected",
"version": "17.10.1a"
},
{
"status": "affected",
"version": "17.8.1"
},
{
"status": "affected",
"version": "17.8.1a"
},
{
"status": "affected",
"version": "17.9.1"
},
{
"status": "affected",
"version": "17.9.2"
},
{
"status": "affected",
"version": "17.9.1a"
},
{
"status": "affected",
"version": "17.9.3"
},
{
"status": "affected",
"version": "17.9.2a"
},
{
"status": "affected",
"version": "17.9.3a"
},
{
"status": "affected",
"version": "17.9.4"
},
{
"status": "affected",
"version": "17.9.5"
},
{
"status": "affected",
"version": "17.9.4a"
},
{
"status": "affected",
"version": "17.9.5a"
},
{
"status": "affected",
"version": "17.9.5b"
},
{
"status": "affected",
"version": "17.9.5e"
},
{
"status": "affected",
"version": "17.9.5f"
},
{
"status": "affected",
"version": "17.11.1"
},
{
"status": "affected",
"version": "17.11.1a"
},
{
"status": "affected",
"version": "17.12.1"
},
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.12.2a"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.13.1"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.14.1"
},
{
"status": "affected",
"version": "17.14.1a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.\r\n\r This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-232",
"description": "Improper Handling of Undefined Values",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-07T17:36:16.366Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
}
],
"source": {
"advisory": "cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
"defects": [
"CSCwi26594"
],
"discovery": "INTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2025-20192",
"datePublished": "2025-05-07T17:36:16.366Z",
"dateReserved": "2024-10-10T19:15:13.226Z",
"dateUpdated": "2025-05-07T19:43:26.883Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2025-20192",
"date": "2026-05-25",
"epss": "0.00553",
"percentile": "0.68277"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2025-20192\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2025-05-07T18:15:39.280\",\"lastModified\":\"2025-05-08T14:39:09.683\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.\\r\\n\\r This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la implementaci\u00f3n de Intercambio de Claves por Internet versi\u00f3n 1 (IKEv1) del software Cisco IOS XE podr\u00eda permitir que un atacante remoto autenticado provoque una denegaci\u00f3n de servicio (DoS). El atacante debe tener credenciales VPN IKEv1 v\u00e1lidas para explotar esta vulnerabilidad. Esta vulnerabilidad se debe a una validaci\u00f3n incorrecta de los par\u00e1metros de fase 2 de IKEv1 antes de que la solicitud de creaci\u00f3n de la asociaci\u00f3n de seguridad IPsec se transfiera al acelerador criptogr\u00e1fico de hardware de un dispositivo afectado. Un atacante podr\u00eda explotar esta vulnerabilidad enviando mensajes IKEv1 manipulados al dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante provocar la recarga del dispositivo.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H\",\"baseScore\":7.7,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.1,\"impactScore\":4.0}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-232\"}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC\",\"source\":\"psirt@cisco.com\"}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-20192\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-05-07T18:56:00.580521Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-07T18:56:02.812Z\"}}], \"cna\": {\"source\": {\"defects\": [\"CSCwi26594\"], \"advisory\": \"cisco-sa-iosxe-ikev1-dos-XHk3HzFC\", \"discovery\": \"INTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 7.7, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco IOS XE Software\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.13.0S\"}, {\"status\": \"affected\", \"version\": \"3.13.1S\"}, {\"status\": \"affected\", \"version\": \"3.13.2S\"}, {\"status\": \"affected\", \"version\": \"3.13.3S\"}, {\"status\": \"affected\", \"version\": \"3.13.4S\"}, {\"status\": \"affected\", \"version\": \"3.13.5S\"}, {\"status\": \"affected\", \"version\": \"3.13.6S\"}, {\"status\": \"affected\", \"version\": \"3.13.7S\"}, {\"status\": \"affected\", \"version\": \"3.13.6aS\"}, {\"status\": \"affected\", \"version\": \"3.13.8S\"}, {\"status\": \"affected\", \"version\": \"3.13.9S\"}, {\"status\": \"affected\", \"version\": \"3.13.10S\"}, {\"status\": \"affected\", \"version\": \"3.14.0S\"}, {\"status\": \"affected\", \"version\": \"3.14.1S\"}, {\"status\": \"affected\", \"version\": \"3.14.2S\"}, {\"status\": \"affected\", \"version\": \"3.14.3S\"}, {\"status\": \"affected\", \"version\": \"3.14.4S\"}, {\"status\": \"affected\", \"version\": \"3.15.0S\"}, {\"status\": \"affected\", \"version\": \"3.15.1S\"}, {\"status\": \"affected\", \"version\": \"3.15.2S\"}, {\"status\": \"affected\", \"version\": \"3.15.1cS\"}, {\"status\": \"affected\", \"version\": \"3.15.3S\"}, {\"status\": \"affected\", \"version\": \"3.15.4S\"}, {\"status\": \"affected\", \"version\": \"3.16.0S\"}, {\"status\": \"affected\", \"version\": \"3.16.1aS\"}, {\"status\": \"affected\", \"version\": \"3.16.2S\"}, {\"status\": \"affected\", \"version\": \"3.16.0cS\"}, {\"status\": \"affected\", \"version\": \"3.16.3S\"}, {\"status\": \"affected\", \"version\": \"3.16.4aS\"}, {\"status\": \"affected\", \"version\": \"3.16.4bS\"}, {\"status\": \"affected\", \"version\": \"3.16.5S\"}, {\"status\": \"affected\", \"version\": \"3.16.4dS\"}, {\"status\": \"affected\", \"version\": \"3.16.6S\"}, {\"status\": \"affected\", \"version\": \"3.16.7S\"}, {\"status\": \"affected\", \"version\": \"3.16.6bS\"}, {\"status\": \"affected\", \"version\": \"3.16.7aS\"}, {\"status\": \"affected\", \"version\": \"3.16.7bS\"}, {\"status\": \"affected\", \"version\": \"3.16.8S\"}, {\"status\": \"affected\", \"version\": \"3.16.9S\"}, {\"status\": \"affected\", \"version\": \"3.16.10S\"}, {\"status\": \"affected\", \"version\": \"3.17.0S\"}, {\"status\": \"affected\", \"version\": \"3.17.1S\"}, {\"status\": \"affected\", \"version\": \"3.17.2S\"}, {\"status\": \"affected\", \"version\": \"3.17.3S\"}, {\"status\": \"affected\", \"version\": \"3.17.4S\"}, {\"status\": \"affected\", \"version\": \"16.2.1\"}, {\"status\": \"affected\", \"version\": \"16.2.2\"}, {\"status\": \"affected\", \"version\": \"16.3.1\"}, {\"status\": \"affected\", \"version\": \"16.3.2\"}, {\"status\": \"affected\", \"version\": \"16.3.3\"}, {\"status\": \"affected\", \"version\": \"16.3.1a\"}, {\"status\": \"affected\", \"version\": \"16.3.4\"}, {\"status\": \"affected\", \"version\": \"16.3.5\"}, {\"status\": \"affected\", \"version\": \"16.3.6\"}, {\"status\": \"affected\", \"version\": \"16.3.7\"}, {\"status\": \"affected\", \"version\": \"16.3.8\"}, {\"status\": \"affected\", \"version\": \"16.3.9\"}, {\"status\": \"affected\", \"version\": \"16.3.10\"}, {\"status\": \"affected\", \"version\": \"16.3.11\"}, {\"status\": \"affected\", \"version\": \"16.4.1\"}, {\"status\": \"affected\", \"version\": \"16.4.2\"}, {\"status\": \"affected\", \"version\": \"16.4.3\"}, {\"status\": \"affected\", \"version\": \"16.5.1\"}, {\"status\": \"affected\", \"version\": \"16.5.1b\"}, {\"status\": \"affected\", \"version\": \"16.5.2\"}, {\"status\": \"affected\", \"version\": \"16.5.3\"}, {\"status\": \"affected\", \"version\": \"3.18.2aSP\"}, {\"status\": \"affected\", \"version\": \"16.6.1\"}, {\"status\": \"affected\", \"version\": \"16.6.2\"}, {\"status\": \"affected\", \"version\": \"16.6.3\"}, {\"status\": \"affected\", \"version\": \"16.6.4\"}, {\"status\": \"affected\", \"version\": \"16.6.5\"}, {\"status\": \"affected\", \"version\": \"16.6.6\"}, {\"status\": \"affected\", \"version\": \"16.6.7\"}, {\"status\": \"affected\", \"version\": \"16.6.8\"}, {\"status\": \"affected\", \"version\": \"16.6.9\"}, {\"status\": \"affected\", \"version\": \"16.6.10\"}, {\"status\": \"affected\", \"version\": \"16.7.1\"}, {\"status\": \"affected\", \"version\": \"16.7.2\"}, {\"status\": \"affected\", \"version\": \"16.7.3\"}, {\"status\": \"affected\", \"version\": \"16.8.1\"}, {\"status\": \"affected\", \"version\": \"16.8.1s\"}, {\"status\": \"affected\", \"version\": \"16.8.2\"}, {\"status\": \"affected\", \"version\": \"16.8.3\"}, {\"status\": \"affected\", \"version\": \"16.9.1\"}, {\"status\": \"affected\", \"version\": \"16.9.2\"}, {\"status\": \"affected\", \"version\": \"16.9.1s\"}, {\"status\": \"affected\", \"version\": \"16.9.3\"}, {\"status\": \"affected\", \"version\": \"16.9.4\"}, {\"status\": \"affected\", \"version\": \"16.9.5\"}, {\"status\": \"affected\", \"version\": \"16.9.6\"}, {\"status\": \"affected\", \"version\": \"16.9.7\"}, {\"status\": \"affected\", \"version\": \"16.9.8\"}, {\"status\": \"affected\", \"version\": \"16.10.1\"}, {\"status\": \"affected\", \"version\": \"16.10.1a\"}, {\"status\": \"affected\", \"version\": \"16.10.1b\"}, {\"status\": \"affected\", \"version\": \"16.10.1s\"}, {\"status\": \"affected\", \"version\": \"16.10.1e\"}, {\"status\": \"affected\", \"version\": \"16.10.2\"}, {\"status\": \"affected\", \"version\": \"16.10.3\"}, {\"status\": \"affected\", \"version\": \"16.11.1\"}, {\"status\": \"affected\", \"version\": \"16.11.1a\"}, {\"status\": \"affected\", \"version\": \"16.11.2\"}, {\"status\": \"affected\", \"version\": \"16.11.1s\"}, {\"status\": \"affected\", \"version\": \"16.12.1\"}, {\"status\": \"affected\", \"version\": \"16.12.1s\"}, {\"status\": \"affected\", \"version\": \"16.12.1a\"}, {\"status\": \"affected\", \"version\": \"16.12.1c\"}, {\"status\": \"affected\", \"version\": \"16.12.2\"}, {\"status\": \"affected\", \"version\": \"16.12.3\"}, {\"status\": \"affected\", \"version\": \"16.12.8\"}, {\"status\": \"affected\", \"version\": \"16.12.2s\"}, {\"status\": \"affected\", \"version\": \"16.12.4\"}, {\"status\": \"affected\", \"version\": \"16.12.3s\"}, {\"status\": \"affected\", \"version\": \"16.12.5\"}, {\"status\": \"affected\", \"version\": \"16.12.6\"}, {\"status\": \"affected\", \"version\": \"16.12.7\"}, {\"status\": \"affected\", \"version\": \"17.1.1\"}, {\"status\": \"affected\", \"version\": \"17.1.1s\"}, {\"status\": \"affected\", \"version\": \"17.1.1t\"}, {\"status\": \"affected\", \"version\": \"17.1.3\"}, {\"status\": \"affected\", \"version\": \"17.2.1\"}, {\"status\": \"affected\", \"version\": \"17.2.1r\"}, {\"status\": \"affected\", \"version\": \"17.2.1v\"}, {\"status\": \"affected\", \"version\": \"17.2.2\"}, {\"status\": \"affected\", \"version\": \"17.2.3\"}, {\"status\": \"affected\", \"version\": \"17.3.1\"}, {\"status\": \"affected\", \"version\": \"17.3.2\"}, {\"status\": \"affected\", \"version\": \"17.3.3\"}, {\"status\": \"affected\", \"version\": \"17.3.1a\"}, {\"status\": \"affected\", \"version\": \"17.3.4\"}, {\"status\": \"affected\", \"version\": \"17.3.5\"}, {\"status\": \"affected\", \"version\": \"17.3.4a\"}, {\"status\": \"affected\", \"version\": \"17.3.6\"}, {\"status\": \"affected\", \"version\": \"17.3.7\"}, {\"status\": \"affected\", \"version\": \"17.3.8\"}, {\"status\": \"affected\", \"version\": \"17.3.8a\"}, {\"status\": \"affected\", \"version\": \"17.4.1\"}, {\"status\": \"affected\", \"version\": \"17.4.2\"}, {\"status\": \"affected\", \"version\": \"17.4.1a\"}, {\"status\": \"affected\", \"version\": \"17.4.1b\"}, {\"status\": \"affected\", \"version\": \"17.5.1\"}, {\"status\": \"affected\", \"version\": \"17.5.1a\"}, {\"status\": \"affected\", \"version\": \"17.6.1\"}, {\"status\": \"affected\", \"version\": \"17.6.2\"}, {\"status\": \"affected\", \"version\": \"17.6.1a\"}, {\"status\": \"affected\", \"version\": \"17.6.3\"}, {\"status\": \"affected\", \"version\": \"17.6.1y\"}, {\"status\": \"affected\", \"version\": \"17.6.3a\"}, {\"status\": \"affected\", \"version\": \"17.6.4\"}, {\"status\": \"affected\", \"version\": \"17.6.5\"}, {\"status\": \"affected\", \"version\": \"17.6.6\"}, {\"status\": \"affected\", \"version\": \"17.6.6a\"}, {\"status\": \"affected\", \"version\": \"17.6.5a\"}, {\"status\": \"affected\", \"version\": \"17.6.7\"}, {\"status\": \"affected\", \"version\": \"17.6.8\"}, {\"status\": \"affected\", \"version\": \"17.6.8a\"}, {\"status\": \"affected\", \"version\": \"17.7.1\"}, {\"status\": \"affected\", \"version\": \"17.7.1a\"}, {\"status\": \"affected\", \"version\": \"17.7.2\"}, {\"status\": \"affected\", \"version\": \"17.10.1\"}, {\"status\": \"affected\", \"version\": \"17.10.1a\"}, {\"status\": \"affected\", \"version\": \"17.8.1\"}, {\"status\": \"affected\", \"version\": \"17.8.1a\"}, {\"status\": \"affected\", \"version\": \"17.9.1\"}, {\"status\": \"affected\", \"version\": \"17.9.2\"}, {\"status\": \"affected\", \"version\": \"17.9.1a\"}, {\"status\": \"affected\", \"version\": \"17.9.3\"}, {\"status\": \"affected\", \"version\": \"17.9.2a\"}, {\"status\": \"affected\", \"version\": \"17.9.3a\"}, {\"status\": \"affected\", \"version\": \"17.9.4\"}, {\"status\": \"affected\", \"version\": \"17.9.5\"}, {\"status\": \"affected\", \"version\": \"17.9.4a\"}, {\"status\": \"affected\", \"version\": \"17.9.5a\"}, {\"status\": \"affected\", \"version\": \"17.9.5b\"}, {\"status\": \"affected\", \"version\": \"17.9.5e\"}, {\"status\": \"affected\", \"version\": \"17.9.5f\"}, {\"status\": \"affected\", \"version\": \"17.11.1\"}, {\"status\": \"affected\", \"version\": \"17.11.1a\"}, {\"status\": \"affected\", \"version\": \"17.12.1\"}, {\"status\": \"affected\", \"version\": \"17.12.1a\"}, {\"status\": \"affected\", \"version\": \"17.12.2\"}, {\"status\": \"affected\", \"version\": \"17.12.3\"}, {\"status\": \"affected\", \"version\": \"17.12.2a\"}, {\"status\": \"affected\", \"version\": \"17.12.3a\"}, {\"status\": \"affected\", \"version\": \"17.13.1\"}, {\"status\": \"affected\", \"version\": \"17.13.1a\"}, {\"status\": \"affected\", \"version\": \"17.14.1\"}, {\"status\": \"affected\", \"version\": \"17.14.1a\"}]}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC\", \"name\": \"cisco-sa-iosxe-ikev1-dos-XHk3HzFC\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.\\r\\n\\r This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-232\", \"description\": \"Improper Handling of Undefined Values\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2025-05-07T17:36:16.366Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-20192\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-07T19:43:26.883Z\", \"dateReserved\": \"2024-10-10T19:15:13.226Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2025-05-07T17:36:16.366Z\", \"assignerShortName\": \"cisco\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2025-AVI-0378
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Cisco | Catalyst Center | Catalyst Center versions antérieures à 2.3.7.9 | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x antérieures à 20.15.2 | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions 20.16.x antérieures à 20.16.1 | ||
| Cisco | IOS XR | IOS XR versions antérieures à 24.3.2 | ||
| Cisco | WLC AireOS | WLC AireOS versions antérieures à 8.10.196.0 | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions antérieures à 20.9.7 | ||
| Cisco | IOS XE | IOS XE : Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des configurations vulnérables des équipements (cf. section Documentation). | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x antérieures à 20.12.5 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Catalyst Center versions ant\u00e9rieures \u00e0 2.3.7.9",
"product": {
"name": "Catalyst Center",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x ant\u00e9rieures \u00e0 20.15.2",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions 20.16.x ant\u00e9rieures \u00e0 20.16.1",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XR versions ant\u00e9rieures \u00e0 24.3.2",
"product": {
"name": "IOS XR",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "WLC AireOS versions ant\u00e9rieures \u00e0 8.10.196.0",
"product": {
"name": "WLC AireOS",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions ant\u00e9rieures \u00e0 20.9.7",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XE : Se r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des configurations vuln\u00e9rables des \u00e9quipements (cf. section Documentation).",
"product": {
"name": "IOS XE",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x ant\u00e9rieures \u00e0 20.12.5",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-20189",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20189"
},
{
"name": "CVE-2025-20192",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20192"
},
{
"name": "CVE-2025-20199",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20199"
},
{
"name": "CVE-2025-20191",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20191"
},
{
"name": "CVE-2025-20188",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20188"
},
{
"name": "CVE-2025-20198",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20198"
},
{
"name": "CVE-2025-20181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20181"
},
{
"name": "CVE-2025-20122",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20122"
},
{
"name": "CVE-2025-20202",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20202"
},
{
"name": "CVE-2025-20210",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20210"
},
{
"name": "CVE-2025-20162",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20162"
},
{
"name": "CVE-2025-20200",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20200"
},
{
"name": "CVE-2025-20154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20154"
},
{
"name": "CVE-2025-20140",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20140"
},
{
"name": "CVE-2025-20201",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20201"
},
{
"name": "CVE-2025-20186",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20186"
},
{
"name": "CVE-2025-20182",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20182"
},
{
"name": "CVE-2025-20197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20197"
},
{
"name": "CVE-2025-20164",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20164"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0378",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-05-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
"vendor_advisories": [
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-twamp-kV4FHugn",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-privesc-su7scvdp",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-privesc-su7scvdp"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sisf-dos-ZGwt4DdY",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sisf-dos-ZGwt4DdY"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-webui-cmdinj-gVn3OKNC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ios-http-privesc-wCRd5e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-http-privesc-wCRd5e3"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ewlc-cdp-dos-fpeks9K",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wlc-wncd-p6Gvt6HL",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-dnac-api-nBPZcJCM",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-api-nBPZcJCM"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-c2960-3560-sboot-ZtqADrHq",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-multiprod-ikev2-dos-gPctUqv2",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multiprod-ikev2-dos-gPctUqv2"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sdwan-priviesc-WCk7bmmt",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-priviesc-WCk7bmmt"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wlc-file-uplpd-rHZG9UfC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-file-uplpd-rHZG9UfC"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
}
]
}
CERTFR-2025-AVI-0378
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Cisco | Catalyst Center | Catalyst Center versions antérieures à 2.3.7.9 | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x antérieures à 20.15.2 | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions 20.16.x antérieures à 20.16.1 | ||
| Cisco | IOS XR | IOS XR versions antérieures à 24.3.2 | ||
| Cisco | WLC AireOS | WLC AireOS versions antérieures à 8.10.196.0 | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions antérieures à 20.9.7 | ||
| Cisco | IOS XE | IOS XE : Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des configurations vulnérables des équipements (cf. section Documentation). | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x antérieures à 20.12.5 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Catalyst Center versions ant\u00e9rieures \u00e0 2.3.7.9",
"product": {
"name": "Catalyst Center",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x ant\u00e9rieures \u00e0 20.15.2",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions 20.16.x ant\u00e9rieures \u00e0 20.16.1",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XR versions ant\u00e9rieures \u00e0 24.3.2",
"product": {
"name": "IOS XR",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "WLC AireOS versions ant\u00e9rieures \u00e0 8.10.196.0",
"product": {
"name": "WLC AireOS",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions ant\u00e9rieures \u00e0 20.9.7",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XE : Se r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des configurations vuln\u00e9rables des \u00e9quipements (cf. section Documentation).",
"product": {
"name": "IOS XE",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x ant\u00e9rieures \u00e0 20.12.5",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-20189",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20189"
},
{
"name": "CVE-2025-20192",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20192"
},
{
"name": "CVE-2025-20199",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20199"
},
{
"name": "CVE-2025-20191",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20191"
},
{
"name": "CVE-2025-20188",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20188"
},
{
"name": "CVE-2025-20198",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20198"
},
{
"name": "CVE-2025-20181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20181"
},
{
"name": "CVE-2025-20122",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20122"
},
{
"name": "CVE-2025-20202",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20202"
},
{
"name": "CVE-2025-20210",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20210"
},
{
"name": "CVE-2025-20162",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20162"
},
{
"name": "CVE-2025-20200",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20200"
},
{
"name": "CVE-2025-20154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20154"
},
{
"name": "CVE-2025-20140",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20140"
},
{
"name": "CVE-2025-20201",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20201"
},
{
"name": "CVE-2025-20186",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20186"
},
{
"name": "CVE-2025-20182",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20182"
},
{
"name": "CVE-2025-20197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20197"
},
{
"name": "CVE-2025-20164",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20164"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0378",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-05-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
"vendor_advisories": [
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-twamp-kV4FHugn",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-privesc-su7scvdp",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-privesc-su7scvdp"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sisf-dos-ZGwt4DdY",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sisf-dos-ZGwt4DdY"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-webui-cmdinj-gVn3OKNC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ios-http-privesc-wCRd5e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-http-privesc-wCRd5e3"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ewlc-cdp-dos-fpeks9K",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wlc-wncd-p6Gvt6HL",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-dnac-api-nBPZcJCM",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-api-nBPZcJCM"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-c2960-3560-sboot-ZtqADrHq",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-multiprod-ikev2-dos-gPctUqv2",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multiprod-ikev2-dos-gPctUqv2"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sdwan-priviesc-WCk7bmmt",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-priviesc-WCk7bmmt"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wlc-file-uplpd-rHZG9UfC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-file-uplpd-rHZG9UfC"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
}
]
}
BDU:2025-10325
Vulnerability from fstec - Published: 07.05.2025
VLAI Severity ?
Title
Уязвимость протокола Internet Key Exchange версии 1 (IKEv1) операционных систем Cisco IOS XE, позволяющая нарушителю вызвать отказ в обслуживании
Description
Уязвимость протокола Internet Key Exchange версии 1 (IKEv1) операционных систем Cisco IOS XE связана с неправильной обработкой неопределенных значений. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании
Severity ?
Vendor
Cisco Systems Inc.
Software Name
Cisco IOS XE
Software Version
3.13.1s (Cisco IOS XE), 3.13.2s (Cisco IOS XE), 3.13.4s (Cisco IOS XE), 3.13.5s (Cisco IOS XE), 3.14.0s (Cisco IOS XE), 3.14.1s (Cisco IOS XE), 3.14.2s (Cisco IOS XE), 3.14.3s (Cisco IOS XE), 3.14.4s (Cisco IOS XE), 3.15.0s (Cisco IOS XE), 3.15.1s (Cisco IOS XE), 3.15.2s (Cisco IOS XE), 3.15.3s (Cisco IOS XE), 3.16.0s (Cisco IOS XE), 3.16.1as (Cisco IOS XE), 3.16.2s (Cisco IOS XE), 3.17.0s (Cisco IOS XE), 3.17.1s (Cisco IOS XE), 16.5.1 (Cisco IOS XE), 16.3.1a (Cisco IOS XE), 16.2.1 (Cisco IOS XE), 16.2.2 (Cisco IOS XE), 16.3.1 (Cisco IOS XE), 16.3.2 (Cisco IOS XE), 16.3.3 (Cisco IOS XE), 16.3.4 (Cisco IOS XE), 16.3.5 (Cisco IOS XE), 16.4.1 (Cisco IOS XE), 16.6.1 (Cisco IOS XE), 16.6.4 (Cisco IOS XE), 16.4.3 (Cisco IOS XE), 16.7.2 (Cisco IOS XE), 3.13.0S (Cisco IOS XE), 3.13.3S (Cisco IOS XE), 3.13.6S (Cisco IOS XE), 3.13.7S (Cisco IOS XE), 3.13.6aS (Cisco IOS XE), 3.13.8S (Cisco IOS XE), 3.13.9S (Cisco IOS XE), 3.15.1cS (Cisco IOS XE), 3.15.4S (Cisco IOS XE), 3.16.0cS (Cisco IOS XE), 3.16.3S (Cisco IOS XE), 3.16.4aS (Cisco IOS XE), 3.16.4bS (Cisco IOS XE), 3.16.4gS (Cisco IOS XE), 3.16.5S (Cisco IOS XE), 3.16.4cS (Cisco IOS XE), 3.16.4dS (Cisco IOS XE), 3.16.4eS (Cisco IOS XE), 3.16.6S (Cisco IOS XE), 3.16.5aS (Cisco IOS XE), 3.16.5bS (Cisco IOS XE), 3.16.7S (Cisco IOS XE), 3.16.6bS (Cisco IOS XE), 3.16.7aS (Cisco IOS XE), 3.16.7bS (Cisco IOS XE), 3.17.2S (Cisco IOS XE), 3.17.3S (Cisco IOS XE), 3.17.4S (Cisco IOS XE), 16.3.6 (Cisco IOS XE), 16.4.2 (Cisco IOS XE), 16.5.1b (Cisco IOS XE), 16.5.2 (Cisco IOS XE), 16.5.3 (Cisco IOS XE), 16.6.2 (Cisco IOS XE), 16.6.3 (Cisco IOS XE), 16.7.1 (Cisco IOS XE), 16.8.1 (Cisco IOS XE), 16.8.1s (Cisco IOS XE), 3.13.10S (Cisco IOS XE), 3.16.8S (Cisco IOS XE), 16.3.7 (Cisco IOS XE), 3.18.2aSP (Cisco IOS XE), 16.6.4s (Cisco IOS XE), 16.8.2 (Cisco IOS XE), 16.9.1 (Cisco IOS XE), 16.9.2 (Cisco IOS XE), 16.9.1s (Cisco IOS XE), 16.7.3 (Cisco IOS XE), 16.10.1 (Cisco IOS XE), 3.16.10S (Cisco IOS XE), 16.12.1 (Cisco IOS XE), 16.8.3 (Cisco IOS XE), 16.9.2s (Cisco IOS XE), 3.16.9S (Cisco IOS XE), 16.3.8 (Cisco IOS XE), 16.6.5 (Cisco IOS XE), 16.10.2 (Cisco IOS XE), 16.3.9 (Cisco IOS XE), 16.6.6 (Cisco IOS XE), 16.9.3 (Cisco IOS XE), 16.9.4 (Cisco IOS XE), 16.9.3s (Cisco IOS XE), 16.10.1a (Cisco IOS XE), 16.10.1b (Cisco IOS XE), 16.10.1s (Cisco IOS XE), 16.10.1e (Cisco IOS XE), 16.10.3 (Cisco IOS XE), 16.11.1 (Cisco IOS XE), 16.11.1a (Cisco IOS XE), 16.11.1s (Cisco IOS XE), 16.11.1c (Cisco IOS XE), 16.12.1a (Cisco IOS XE), 16.12.1c (Cisco IOS XE), 16.12.1s (Cisco IOS XE), 16.11.2 (Cisco IOS XE), 16.3.10 (Cisco IOS XE), 16.6.7 (Cisco IOS XE), 16.6.8 (Cisco IOS XE), 16.9.5 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.1.1 (Cisco IOS XE), 16.12.2 (Cisco IOS XE), 16.12.2s (Cisco IOS XE), 16.12.2t (Cisco IOS XE), 16.12.4 (Cisco IOS XE), 16.12.3s (Cisco IOS XE), 17.1.1s (Cisco IOS XE), 17.1.2 (Cisco IOS XE), 17.1.1t (Cisco IOS XE), 17.1.3 (Cisco IOS XE), 17.2.1r (Cisco IOS XE), 17.2.1v (Cisco IOS XE), 17.2.2 (Cisco IOS XE), 17.3.1 (Cisco IOS XE), 17.3.1a (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.9.1a (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.11.1a (Cisco IOS XE), 17.12.1 (Cisco IOS XE), 17.12.1a (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 17.10.1a (Cisco IOS XE), 16.12.3 (Cisco IOS XE), 16.12.8 (Cisco IOS XE), 16.12.5 (Cisco IOS XE), 16.12.6 (Cisco IOS XE), 16.12.7 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9.4 (Cisco IOS XE), 17.9.4a (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.6.6a (Cisco IOS XE), 17.6.6 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE), 16.3.11 (Cisco IOS XE), 16.6.9 (Cisco IOS XE), 16.6.10 (Cisco IOS XE), 16.9.6 (Cisco IOS XE), 16.9.7 (Cisco IOS XE), 17.2.3 (Cisco IOS XE), 17.3.4a (Cisco IOS XE), 17.4.1a (Cisco IOS XE), 17.4.1b (Cisco IOS XE), 17.4.1c (Cisco IOS XE), 17.4.2 (Cisco IOS XE), 17.5.1a (Cisco IOS XE), 17.5.1b (Cisco IOS XE), 17.5.1c (Cisco IOS XE), 17.6.1a (Cisco IOS XE), 17.6.3a (Cisco IOS XE), 17.7.1a (Cisco IOS XE), 17.7.2 (Cisco IOS XE), 17.8.1a (Cisco IOS XE), 17.9.2a (Cisco IOS XE), 17.9.3a (Cisco IOS XE), 17.12.2 (Cisco IOS XE), 17.12.2a (Cisco IOS XE), 17.6.1y (Cisco IOS XE), 16.9.8 (Cisco IOS XE), 16.9.8a (Cisco IOS XE), 17.9.5a (Cisco IOS XE), 17.9.5b (Cisco IOS XE), 17.9.5c (Cisco IOS XE), 17.9.5d (Cisco IOS XE), 17.12.3a (Cisco IOS XE), 17.13.1 (Cisco IOS XE), 17.13.1a (Cisco IOS XE), 17.14.1 (Cisco IOS XE), 17.14.1a (Cisco IOS XE), 17.6.7 (Cisco IOS XE), 17.9.5 (Cisco IOS XE), 17.12.3 (Cisco IOS XE), 17.9.5e (Cisco IOS XE), 17.9.5f (Cisco IOS XE), 17.6.8a (Cisco IOS XE), 17.6.8 (Cisco IOS XE)
Possible Mitigations
Использование рекомендаций:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC
Reference
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC
CWE
CWE-232
{
"CVSS 2.0": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
"CVSS 3.0": "AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "3.13.1s (Cisco IOS XE), 3.13.2s (Cisco IOS XE), 3.13.4s (Cisco IOS XE), 3.13.5s (Cisco IOS XE), 3.14.0s (Cisco IOS XE), 3.14.1s (Cisco IOS XE), 3.14.2s (Cisco IOS XE), 3.14.3s (Cisco IOS XE), 3.14.4s (Cisco IOS XE), 3.15.0s (Cisco IOS XE), 3.15.1s (Cisco IOS XE), 3.15.2s (Cisco IOS XE), 3.15.3s (Cisco IOS XE), 3.16.0s (Cisco IOS XE), 3.16.1as (Cisco IOS XE), 3.16.2s (Cisco IOS XE), 3.17.0s (Cisco IOS XE), 3.17.1s (Cisco IOS XE), 16.5.1 (Cisco IOS XE), 16.3.1a (Cisco IOS XE), 16.2.1 (Cisco IOS XE), 16.2.2 (Cisco IOS XE), 16.3.1 (Cisco IOS XE), 16.3.2 (Cisco IOS XE), 16.3.3 (Cisco IOS XE), 16.3.4 (Cisco IOS XE), 16.3.5 (Cisco IOS XE), 16.4.1 (Cisco IOS XE), 16.6.1 (Cisco IOS XE), 16.6.4 (Cisco IOS XE), 16.4.3 (Cisco IOS XE), 16.7.2 (Cisco IOS XE), 3.13.0S (Cisco IOS XE), 3.13.3S (Cisco IOS XE), 3.13.6S (Cisco IOS XE), 3.13.7S (Cisco IOS XE), 3.13.6aS (Cisco IOS XE), 3.13.8S (Cisco IOS XE), 3.13.9S (Cisco IOS XE), 3.15.1cS (Cisco IOS XE), 3.15.4S (Cisco IOS XE), 3.16.0cS (Cisco IOS XE), 3.16.3S (Cisco IOS XE), 3.16.4aS (Cisco IOS XE), 3.16.4bS (Cisco IOS XE), 3.16.4gS (Cisco IOS XE), 3.16.5S (Cisco IOS XE), 3.16.4cS (Cisco IOS XE), 3.16.4dS (Cisco IOS XE), 3.16.4eS (Cisco IOS XE), 3.16.6S (Cisco IOS XE), 3.16.5aS (Cisco IOS XE), 3.16.5bS (Cisco IOS XE), 3.16.7S (Cisco IOS XE), 3.16.6bS (Cisco IOS XE), 3.16.7aS (Cisco IOS XE), 3.16.7bS (Cisco IOS XE), 3.17.2S (Cisco IOS XE), 3.17.3S (Cisco IOS XE), 3.17.4S (Cisco IOS XE), 16.3.6 (Cisco IOS XE), 16.4.2 (Cisco IOS XE), 16.5.1b (Cisco IOS XE), 16.5.2 (Cisco IOS XE), 16.5.3 (Cisco IOS XE), 16.6.2 (Cisco IOS XE), 16.6.3 (Cisco IOS XE), 16.7.1 (Cisco IOS XE), 16.8.1 (Cisco IOS XE), 16.8.1s (Cisco IOS XE), 3.13.10S (Cisco IOS XE), 3.16.8S (Cisco IOS XE), 16.3.7 (Cisco IOS XE), 3.18.2aSP (Cisco IOS XE), 16.6.4s (Cisco IOS XE), 16.8.2 (Cisco IOS XE), 16.9.1 (Cisco IOS XE), 16.9.2 (Cisco IOS XE), 16.9.1s (Cisco IOS XE), 16.7.3 (Cisco IOS XE), 16.10.1 (Cisco IOS XE), 3.16.10S (Cisco IOS XE), 16.12.1 (Cisco IOS XE), 16.8.3 (Cisco IOS XE), 16.9.2s (Cisco IOS XE), 3.16.9S (Cisco IOS XE), 16.3.8 (Cisco IOS XE), 16.6.5 (Cisco IOS XE), 16.10.2 (Cisco IOS XE), 16.3.9 (Cisco IOS XE), 16.6.6 (Cisco IOS XE), 16.9.3 (Cisco IOS XE), 16.9.4 (Cisco IOS XE), 16.9.3s (Cisco IOS XE), 16.10.1a (Cisco IOS XE), 16.10.1b (Cisco IOS XE), 16.10.1s (Cisco IOS XE), 16.10.1e (Cisco IOS XE), 16.10.3 (Cisco IOS XE), 16.11.1 (Cisco IOS XE), 16.11.1a (Cisco IOS XE), 16.11.1s (Cisco IOS XE), 16.11.1c (Cisco IOS XE), 16.12.1a (Cisco IOS XE), 16.12.1c (Cisco IOS XE), 16.12.1s (Cisco IOS XE), 16.11.2 (Cisco IOS XE), 16.3.10 (Cisco IOS XE), 16.6.7 (Cisco IOS XE), 16.6.8 (Cisco IOS XE), 16.9.5 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.1.1 (Cisco IOS XE), 16.12.2 (Cisco IOS XE), 16.12.2s (Cisco IOS XE), 16.12.2t (Cisco IOS XE), 16.12.4 (Cisco IOS XE), 16.12.3s (Cisco IOS XE), 17.1.1s (Cisco IOS XE), 17.1.2 (Cisco IOS XE), 17.1.1t (Cisco IOS XE), 17.1.3 (Cisco IOS XE), 17.2.1r (Cisco IOS XE), 17.2.1v (Cisco IOS XE), 17.2.2 (Cisco IOS XE), 17.3.1 (Cisco IOS XE), 17.3.1a (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.9.1a (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.11.1a (Cisco IOS XE), 17.12.1 (Cisco IOS XE), 17.12.1a (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 17.10.1a (Cisco IOS XE), 16.12.3 (Cisco IOS XE), 16.12.8 (Cisco IOS XE), 16.12.5 (Cisco IOS XE), 16.12.6 (Cisco IOS XE), 16.12.7 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9.4 (Cisco IOS XE), 17.9.4a (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.6.6a (Cisco IOS XE), 17.6.6 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE), 16.3.11 (Cisco IOS XE), 16.6.9 (Cisco IOS XE), 16.6.10 (Cisco IOS XE), 16.9.6 (Cisco IOS XE), 16.9.7 (Cisco IOS XE), 17.2.3 (Cisco IOS XE), 17.3.4a (Cisco IOS XE), 17.4.1a (Cisco IOS XE), 17.4.1b (Cisco IOS XE), 17.4.1c (Cisco IOS XE), 17.4.2 (Cisco IOS XE), 17.5.1a (Cisco IOS XE), 17.5.1b (Cisco IOS XE), 17.5.1c (Cisco IOS XE), 17.6.1a (Cisco IOS XE), 17.6.3a (Cisco IOS XE), 17.7.1a (Cisco IOS XE), 17.7.2 (Cisco IOS XE), 17.8.1a (Cisco IOS XE), 17.9.2a (Cisco IOS XE), 17.9.3a (Cisco IOS XE), 17.12.2 (Cisco IOS XE), 17.12.2a (Cisco IOS XE), 17.6.1y (Cisco IOS XE), 16.9.8 (Cisco IOS XE), 16.9.8a (Cisco IOS XE), 17.9.5a (Cisco IOS XE), 17.9.5b (Cisco IOS XE), 17.9.5c (Cisco IOS XE), 17.9.5d (Cisco IOS XE), 17.12.3a (Cisco IOS XE), 17.13.1 (Cisco IOS XE), 17.13.1a (Cisco IOS XE), 17.14.1 (Cisco IOS XE), 17.14.1a (Cisco IOS XE), 17.6.7 (Cisco IOS XE), 17.9.5 (Cisco IOS XE), 17.12.3 (Cisco IOS XE), 17.9.5e (Cisco IOS XE), 17.9.5f (Cisco IOS XE), 17.6.8a (Cisco IOS XE), 17.6.8 (Cisco IOS XE)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "07.05.2025",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "27.08.2025",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "27.08.2025",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-10325",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-20192",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco IOS XE",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Internet Key Exchange \u0432\u0435\u0440\u0441\u0438\u0438 1 (IKEv1) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u043d\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 (CWE-232)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Internet Key Exchange \u0432\u0435\u0440\u0441\u0438\u0438 1 (IKEv1) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043d\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-232",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,7)"
}
CISCO-SA-IOSXE-IKEV1-DOS-XHK3HZFC
Vulnerability from csaf_cisco - Published: 2025-05-07 16:00 - Updated: 2025-05-07 16:00Summary
Cisco IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability
Notes
Summary: A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.
This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279"].
Vulnerable Products: This vulnerability affects the following Cisco products if they are running a vulnerable release of Cisco IOS XE Software and have IKEv1 VPN enabled:
1000 Series Integrated Services Routers (ISRs)
4000 Series ISRs
Catalyst 8200 Series Edge Platforms
Catalyst 8300 Series Edge Platforms
Catalyst 8500 Series Edge Platforms
Catalyst 8500L Series Edge Platforms
The following features are affected by this vulnerability if they are configured to use IKEv1:
Dynamic Multipoint VPN (DMVPN)
Remote Access IPsec VPN (RAVPN)
Site-to-Site VPN (S2S VPN)
Note: Cisco Group Encrypted Transport VPN (GET VPN) and SSL VPN do not use IKEv1 for IPsec session establishment and are not affected by this vulnerability.
For information about which Cisco software releases are vulnerable, see the Fixed Software ["#fs"] section of this advisory.
Determine the Device Configuration
1. Determine Whether IKE (v1 or v2) Is Enabled
To determine whether IKE processing is enabled, use the show ip socket | include 500 or show udp | include 500 EXEC command on the device CLI. If UDP port 500 or UDP port 4500 is open on a device, the device is processing IKE packets.
Note: UDP ports 500 or 4500 or both will be open regardless of whether IKEv1 or IKEv2 is enabled, as both use the same port and protocol numbers.
The following example shows the output of the show udp | include 500 command on a device that is processing IKE packets on UDP ports 500 and 4500 using either IPv4 or IPv6:
Router#show udp | include 500
17 --listen-- 192.168.1.10 500 0 0 2001011 0
17(v6) --listen-- --any-- 500 0 0 2020011 0
17 --listen-- 192.168.1.10 4500 0 0 2001011 0
17(v6) --listen-- --any-- 4500 0 0 2020011 0
If this command returns empty output, the device is not affected by this vulnerability. Otherwise, proceed to step 2.
2. Determine Whether IKEv1 Is Used
To determine whether IKEv1 is being actively used by the device, use the show crypto map EXEC command on the device CLI. A crypto map uses IKEv1 if it does not have an IKEv2 Profile associated. A crypto map is active if there is at least one interface using that crypto map.
The following example shows the output of the show crypto map command on a device that has crypto map CMAP1 configured to use IKEv1 (because no IKEv2 Profile is listed) and enabled on interface GigabitEthernet1:
Router1#show crypto map
Crypto Map IPv4 "CMAP1" 10 ipsec-isakmp
Peer = 192.168.1.100
Access-List SS dynamic: False
Extended IP access list 120
access-list 110 permit ip 192.168.11.0 0.0.0.255 192.168.12.0 0.0.0.255
Current peer: 192.168.1.100
Security association lifetime: 4608000 kilobytes/3600 seconds
Dualstack (Y/N): N
Responder-Only (Y/N): N
PFS (Y/N): N
Mixed-mode : Disabled
Transform sets={
AESSET: { esp-256-aes esp-sha256-hmac } ,
}
Interfaces using crypto map CMAP1:
GigabitEthernet1
Router1#
This device is affected by this vulnerability.
The following example shows the output of the show crypto map command on a device that has crypto map CMAP2 configured to use IKEv2 (because an IKEv2 Profile is listed) and enabled on interface GigabitEthernet2:
Router2#show crypto map
Crypto Map IPv4 "CMAP2" 10 ipsec-isakmp
Peer = 192.168.1.200
IKEv2 Profile: profile1
Access-List SS dynamic: False
Extended IP access list 120
access-list 120 permit ip 192.168.21.0 0.0.0.255 192.168.22.0 0.0.0.255
Current peer: 192.168.1.200
Security association lifetime: 4608000 kilobytes/3600 seconds
Dualstack (Y/N): N
Responder-Only (Y/N): N
PFS (Y/N): N
Mixed-mode : Disabled
Transform sets={
AESSET: { esp-256-aes esp-sha256-hmac } ,
}
Interfaces using crypto map CMAP2:
GigabitEthernet2
Router2#
If this is the only crypto map configured on the device, this device is not affected by this vulnerability.
Products Confirmed Not Vulnerable: Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by this vulnerability.
Cisco has confirmed that this vulnerability does not affect the following Cisco products:
IOS Software
IOS XE Software that is running on devices other than those listed in the Vulnerable Products ["#vp"] section
IOS XR Software
Meraki products
NX-OS Software
Workarounds: There are no workarounds that address this vulnerability.
Fixed Software: Cisco has released free software updates ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu"] that address the vulnerability described in this advisory. Customers with service contracts that entitle them to regular software updates should obtain security fixes through their usual update channels.
Customers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:
https://www.cisco.com/c/en/us/products/end-user-license-agreement.html ["https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"]
Additionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.
The Cisco Support and Downloads page ["https://www.cisco.com/c/en/us/support/index.html"] on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool.
When considering software upgrades ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page ["https://www.cisco.com/go/psirt"], to determine exposure and a complete upgrade solution.
In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.
Customers Without Service Contracts
Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"]
Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.
Cisco IOS and IOS XE Software
To help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (“First Fixed”). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (“Combined First Fixed”).
To use the tool, go to the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"] page and follow the instructions. Alternatively, use the following form to determine whether a release is affected by any Cisco Security Advisory. To use the form, follow these steps:
Choose which advisories the tool will search—only this advisory, only advisories with a Critical or High Security Impact Rating (SIR) ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"], or all advisories.
Enter a release number—for example, 15.9(3)M2 or 17.3.3.
Click Check.
Only this advisory All Critical and High advisories All advisories
Vulnerability Policy: To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.
Exploitation and Public Announcements: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.
Source: This vulnerability was found during the resolution of a Cisco TAC support case.
Legal Disclaimer: THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.
7.7 (High)
Affected products
Known affected
209 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
3.13.0S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.13.1S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.13.2S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.14.0S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.15.0S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.14.1S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.14.2S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.14.3S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.14.4S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.13.3S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.15.1S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.0S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.15.2S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.17.0S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.17.1S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.13.4S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.1aS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.2S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.13.5S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.15.1cS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.15.3S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.0cS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.3S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.2.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.3.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.4.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.17.2S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.2.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.3.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.3.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.4.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.5.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.13.6S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.13.7S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.15.4S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.6.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.7.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.8.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.13.6aS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.3.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.4aS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.4bS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.4gS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.5S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.3.4
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.4cS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.17.3S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.4dS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.4eS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.6S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.5aS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.5bS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.9.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.10.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.18.2aSP
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.5.1b
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.17.4S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.11.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.13.8S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.7S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.6.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.3.5
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.5.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.6bS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.4.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.13.9S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.3.6
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.6.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.9.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.5.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.7aS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.6.4
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.7bS
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.13.10S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.8.1s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.7.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.8S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.3.7
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.6.5
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.7.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.8.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.9.1s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.6.4s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.9S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.1.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.10.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.9.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.3.8
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.2.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.10.1b
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.11.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.9.2s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.10.1s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.6.6
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.10.1e
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.8.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
3.16.10S
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.10.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.11.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.6.7
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.11.1s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.3.9
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.9.4
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.9.3s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.4.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.5.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.11.1c
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.1s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.1c
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.9.5
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.10.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.8
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.2s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.3.10
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.1.1s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.2t
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.4
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.6.8
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.2.1r
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.3s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.1.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.1.1t
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.7.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.9.6
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.2.1v
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.10.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.4.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.8.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.3.11
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.2.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.5
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.9.7
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.1.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.4.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.6.9
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.4.1b
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.6
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.9.8
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.2.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.4
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.5.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.5
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.4.1c
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.6.10
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.4a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.6
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.7.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.7
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.1y
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.8.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.7.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.3a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.11.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.4
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.9.8a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.10.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.5.1b
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.5
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.7
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.2a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.6
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.5.1c
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.11.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.3a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.13.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.14.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.8
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.4
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.5
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.4a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.8a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.6a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.5a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.7
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.13.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.2a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.5a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.14.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.5b
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.8
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.3a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.5c
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.5d
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.8a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.5e
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.5f
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.14
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.7b
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.5c
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
References
12 references
| URL | Category |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/c… | self |
| https://sec.cloudapps.cisco.com/security/center/v… | external |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
| https://www.cisco.com/c/en/us/products/end-user-l… | external |
| https://www.cisco.com/c/en/us/support/index.html | external |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
| https://www.cisco.com/go/psirt | external |
| https://www.cisco.com/c/en/us/support/web/tsd-cis… | external |
| https://sec.cloudapps.cisco.com/security/center/s… | external |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
| http://www.cisco.com/web/about/security/psirt/sec… | external |
Acknowledgments
{
"document": {
"acknowledgments": [
{
"summary": "This vulnerability was found during the resolution of a Cisco TAC support case."
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"notes": [
{
"category": "summary",
"text": "A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.\r\n\r\nThis vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\n\r\n\r\nThis advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [\"https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279\"].",
"title": "Summary"
},
{
"category": "general",
"text": "This vulnerability affects the following Cisco products if they are running a vulnerable release of Cisco IOS XE Software and have IKEv1 VPN enabled:\r\n\r\n1000 Series Integrated Services Routers (ISRs)\r\n4000 Series ISRs\r\nCatalyst 8200 Series Edge Platforms\r\nCatalyst 8300 Series Edge Platforms\r\nCatalyst 8500 Series Edge Platforms\r\nCatalyst 8500L Series Edge Platforms\r\n\r\nThe following features are affected by this vulnerability if they are configured to use IKEv1:\r\n\r\nDynamic Multipoint VPN (DMVPN)\r\nRemote Access IPsec VPN (RAVPN)\r\nSite-to-Site VPN (S2S VPN)\r\n\r\nNote: Cisco Group Encrypted Transport VPN (GET VPN) and SSL VPN do not use IKEv1 for IPsec session establishment and are not affected by this vulnerability.\r\n\r\nFor information about which Cisco software releases are vulnerable, see the Fixed Software [\"#fs\"] section of this advisory.\r\n Determine the Device Configuration\r\n1. Determine Whether IKE (v1 or v2) Is Enabled\r\n\r\nTo determine whether IKE processing is enabled, use the show ip socket | include 500 or show udp | include 500 EXEC command on the device CLI. If UDP port 500 or UDP port 4500 is open on a device, the device is processing IKE packets.\r\n\r\nNote: UDP ports 500 or 4500 or both will be open regardless of whether IKEv1 or IKEv2 is enabled, as both use the same port and protocol numbers.\r\n\r\nThe following example shows the output of the show udp | include 500 command on a device that is processing IKE packets on UDP ports 500 and 4500 using either IPv4 or IPv6:\r\n\r\n\r\nRouter#show udp | include 500\r\n 17 --listen-- 192.168.1.10 500 0 0 2001011 0\r\n 17(v6) --listen-- --any-- 500 0 0 2020011 0\r\n 17 --listen-- 192.168.1.10 4500 0 0 2001011 0\r\n 17(v6) --listen-- --any-- 4500 0 0 2020011 0\r\n\r\nIf this command returns empty output, the device is not affected by this vulnerability. Otherwise, proceed to step 2.\r\n\r\n2. Determine Whether IKEv1 Is Used\r\n\r\nTo determine whether IKEv1 is being actively used by the device, use the show crypto map EXEC command on the device CLI. A crypto map uses IKEv1 if it does not have an IKEv2 Profile associated. A crypto map is active if there is at least one interface using that crypto map.\r\n\r\nThe following example shows the output of the show crypto map command on a device that has crypto map CMAP1 configured to use IKEv1 (because no IKEv2 Profile is listed) and enabled on interface GigabitEthernet1:\r\n\r\n\r\nRouter1#show crypto map\r\nCrypto Map IPv4 \"CMAP1\" 10 ipsec-isakmp\r\n Peer = 192.168.1.100\r\n Access-List SS dynamic: False\r\n Extended IP access list 120\r\n access-list 110 permit ip 192.168.11.0 0.0.0.255 192.168.12.0 0.0.0.255\r\n Current peer: 192.168.1.100\r\n Security association lifetime: 4608000 kilobytes/3600 seconds\r\n Dualstack (Y/N): N\r\n\r\n Responder-Only (Y/N): N\r\n PFS (Y/N): N\r\n Mixed-mode : Disabled\r\n Transform sets={\r\n AESSET: { esp-256-aes esp-sha256-hmac } ,\r\n }\r\n Interfaces using crypto map CMAP1:\r\n GigabitEthernet1\r\n\r\nRouter1#\r\n\r\nThis device is affected by this vulnerability.\r\n\r\nThe following example shows the output of the show crypto map command on a device that has crypto map CMAP2 configured to use IKEv2 (because an IKEv2 Profile is listed) and enabled on interface GigabitEthernet2:\r\n\r\n\r\nRouter2#show crypto map\r\nCrypto Map IPv4 \"CMAP2\" 10 ipsec-isakmp\r\n Peer = 192.168.1.200\r\n IKEv2 Profile: profile1\r\n Access-List SS dynamic: False\r\n Extended IP access list 120\r\n access-list 120 permit ip 192.168.21.0 0.0.0.255 192.168.22.0 0.0.0.255\r\n Current peer: 192.168.1.200\r\n Security association lifetime: 4608000 kilobytes/3600 seconds\r\n Dualstack (Y/N): N\r\n\r\n Responder-Only (Y/N): N\r\n PFS (Y/N): N\r\n Mixed-mode : Disabled\r\n Transform sets={\r\n AESSET: { esp-256-aes esp-sha256-hmac } ,\r\n }\r\n Interfaces using crypto map CMAP2:\r\n GigabitEthernet2\r\n\r\nRouter2#\r\n\r\nIf this is the only crypto map configured on the device, this device is not affected by this vulnerability.",
"title": "Vulnerable Products"
},
{
"category": "general",
"text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that this vulnerability does not affect the following Cisco products:\r\n\r\nIOS Software\r\nIOS XE Software that is running on devices other than those listed in the Vulnerable Products [\"#vp\"] section\r\nIOS XR Software\r\nMeraki products\r\nNX-OS Software",
"title": "Products Confirmed Not Vulnerable"
},
{
"category": "general",
"text": "There are no workarounds that address this vulnerability.",
"title": "Workarounds"
},
{
"category": "general",
"text": "Cisco has released free software updates [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu\"] that address the vulnerability described in this advisory. Customers with service contracts that entitle them to regular software updates should obtain security fixes through their usual update channels.\r\n\r\nCustomers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:\r\nhttps://www.cisco.com/c/en/us/products/end-user-license-agreement.html [\"https://www.cisco.com/c/en/us/products/end-user-license-agreement.html\"]\r\n\r\nAdditionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.\r\n\r\nThe Cisco Support and Downloads page [\"https://www.cisco.com/c/en/us/support/index.html\"] on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool.\r\n\r\nWhen considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page [\"https://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.\r\n Customers Without Service Contracts\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]\r\n\r\nCustomers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n Cisco IOS and IOS XE Software\r\nTo help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (\u201cFirst Fixed\u201d). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (\u201cCombined First Fixed\u201d).\r\n\r\nTo use the tool, go to the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"] page and follow the instructions. Alternatively, use the following form to determine whether a release is affected by any Cisco Security Advisory. To use the form, follow these steps:\r\n\r\nChoose which advisories the tool will search\u2014only this advisory, only advisories with a Critical or High Security Impact Rating (SIR) [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr\"], or all advisories.\r\nEnter a release number\u2014for example, 15.9(3)M2 or 17.3.3.\r\nClick Check.\r\n\r\n Only this advisory All Critical and High advisories All advisories",
"title": "Fixed Software"
},
{
"category": "general",
"text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
"title": "Vulnerability Policy"
},
{
"category": "general",
"text": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
"title": "Exploitation and Public Announcements"
},
{
"category": "general",
"text": "This vulnerability was found during the resolution of a Cisco TAC support case.",
"title": "Source"
},
{
"category": "legal_disclaimer",
"text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
"title": "Legal Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "psirt@cisco.com",
"issuing_authority": "Cisco PSIRT",
"name": "Cisco",
"namespace": "https://wwww.cisco.com"
},
"references": [
{
"category": "self",
"summary": "Cisco IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
},
{
"category": "external",
"summary": "Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication",
"url": "https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279"
},
{
"category": "external",
"summary": "Cisco Security Vulnerability Policy",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
},
{
"category": "external",
"summary": "free software updates",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu"
},
{
"category": "external",
"summary": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html",
"url": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"
},
{
"category": "external",
"summary": "Cisco Support and Downloads page",
"url": "https://www.cisco.com/c/en/us/support/index.html"
},
{
"category": "external",
"summary": "considering software upgrades",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"
},
{
"category": "external",
"summary": "Cisco Security Advisories page",
"url": "https://www.cisco.com/go/psirt"
},
{
"category": "external",
"summary": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html",
"url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
},
{
"category": "external",
"summary": "Cisco Software Checker",
"url": "https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"
},
{
"category": "external",
"summary": "Security Impact Rating (SIR)",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"
},
{
"category": "external",
"summary": "Security Vulnerability Policy",
"url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"
}
],
"title": "Cisco IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability",
"tracking": {
"current_release_date": "2025-05-07T16:00:00+00:00",
"generator": {
"date": "2025-05-07T15:59:45+00:00",
"engine": {
"name": "TVCE"
}
},
"id": "cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
"initial_release_date": "2025-05-07T16:00:00+00:00",
"revision_history": [
{
"date": "2025-05-07T15:53:17+00:00",
"number": "1.0.0",
"summary": "Initial public release."
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "service_pack",
"name": "3.13.0S",
"product": {
"name": "3.13.0S",
"product_id": "CSAFPID-201495"
}
},
{
"category": "service_pack",
"name": "3.13.1S",
"product": {
"name": "3.13.1S",
"product_id": "CSAFPID-206174"
}
},
{
"category": "service_pack",
"name": "3.13.2S",
"product": {
"name": "3.13.2S",
"product_id": "CSAFPID-206175"
}
},
{
"category": "service_pack",
"name": "3.13.3S",
"product": {
"name": "3.13.3S",
"product_id": "CSAFPID-210078"
}
},
{
"category": "service_pack",
"name": "3.13.4S",
"product": {
"name": "3.13.4S",
"product_id": "CSAFPID-213475"
}
},
{
"category": "service_pack",
"name": "3.13.5S",
"product": {
"name": "3.13.5S",
"product_id": "CSAFPID-213557"
}
},
{
"category": "service_pack",
"name": "3.13.6S",
"product": {
"name": "3.13.6S",
"product_id": "CSAFPID-217262"
}
},
{
"category": "service_pack",
"name": "3.13.7S",
"product": {
"name": "3.13.7S",
"product_id": "CSAFPID-217263"
}
},
{
"category": "service_pack",
"name": "3.13.6aS",
"product": {
"name": "3.13.6aS",
"product_id": "CSAFPID-220688"
}
},
{
"category": "service_pack",
"name": "3.13.8S",
"product": {
"name": "3.13.8S",
"product_id": "CSAFPID-227923"
}
},
{
"category": "service_pack",
"name": "3.13.9S",
"product": {
"name": "3.13.9S",
"product_id": "CSAFPID-231454"
}
},
{
"category": "service_pack",
"name": "3.13.10S",
"product": {
"name": "3.13.10S",
"product_id": "CSAFPID-234928"
}
}
],
"category": "product_version",
"name": "3.13S"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.14.0S",
"product": {
"name": "3.14.0S",
"product_id": "CSAFPID-206178"
}
},
{
"category": "service_pack",
"name": "3.14.1S",
"product": {
"name": "3.14.1S",
"product_id": "CSAFPID-206181"
}
},
{
"category": "service_pack",
"name": "3.14.2S",
"product": {
"name": "3.14.2S",
"product_id": "CSAFPID-206191"
}
},
{
"category": "service_pack",
"name": "3.14.3S",
"product": {
"name": "3.14.3S",
"product_id": "CSAFPID-206192"
}
},
{
"category": "service_pack",
"name": "3.14.4S",
"product": {
"name": "3.14.4S",
"product_id": "CSAFPID-206193"
}
}
],
"category": "product_version",
"name": "3.14S"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.15.0S",
"product": {
"name": "3.15.0S",
"product_id": "CSAFPID-206180"
}
},
{
"category": "service_pack",
"name": "3.15.1S",
"product": {
"name": "3.15.1S",
"product_id": "CSAFPID-210079"
}
},
{
"category": "service_pack",
"name": "3.15.2S",
"product": {
"name": "3.15.2S",
"product_id": "CSAFPID-212268"
}
},
{
"category": "service_pack",
"name": "3.15.1cS",
"product": {
"name": "3.15.1cS",
"product_id": "CSAFPID-213700"
}
},
{
"category": "service_pack",
"name": "3.15.3S",
"product": {
"name": "3.15.3S",
"product_id": "CSAFPID-213776"
}
},
{
"category": "service_pack",
"name": "3.15.4S",
"product": {
"name": "3.15.4S",
"product_id": "CSAFPID-217264"
}
}
],
"category": "product_version",
"name": "3.15S"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.16.0S",
"product": {
"name": "3.16.0S",
"product_id": "CSAFPID-210081"
}
},
{
"category": "service_pack",
"name": "3.16.1aS",
"product": {
"name": "3.16.1aS",
"product_id": "CSAFPID-213477"
}
},
{
"category": "service_pack",
"name": "3.16.2S",
"product": {
"name": "3.16.2S",
"product_id": "CSAFPID-213478"
}
},
{
"category": "service_pack",
"name": "3.16.0cS",
"product": {
"name": "3.16.0cS",
"product_id": "CSAFPID-213778"
}
},
{
"category": "service_pack",
"name": "3.16.3S",
"product": {
"name": "3.16.3S",
"product_id": "CSAFPID-213779"
}
},
{
"category": "service_pack",
"name": "3.16.4aS",
"product": {
"name": "3.16.4aS",
"product_id": "CSAFPID-220993"
}
},
{
"category": "service_pack",
"name": "3.16.4bS",
"product": {
"name": "3.16.4bS",
"product_id": "CSAFPID-222257"
}
},
{
"category": "service_pack",
"name": "3.16.4gS",
"product": {
"name": "3.16.4gS",
"product_id": "CSAFPID-222693"
}
},
{
"category": "service_pack",
"name": "3.16.5S",
"product": {
"name": "3.16.5S",
"product_id": "CSAFPID-222694"
}
},
{
"category": "service_pack",
"name": "3.16.4cS",
"product": {
"name": "3.16.4cS",
"product_id": "CSAFPID-222925"
}
},
{
"category": "service_pack",
"name": "3.16.4dS",
"product": {
"name": "3.16.4dS",
"product_id": "CSAFPID-223252"
}
},
{
"category": "service_pack",
"name": "3.16.4eS",
"product": {
"name": "3.16.4eS",
"product_id": "CSAFPID-224702"
}
},
{
"category": "service_pack",
"name": "3.16.6S",
"product": {
"name": "3.16.6S",
"product_id": "CSAFPID-225099"
}
},
{
"category": "service_pack",
"name": "3.16.5aS",
"product": {
"name": "3.16.5aS",
"product_id": "CSAFPID-225466"
}
},
{
"category": "service_pack",
"name": "3.16.5bS",
"product": {
"name": "3.16.5bS",
"product_id": "CSAFPID-225832"
}
},
{
"category": "service_pack",
"name": "3.16.7S",
"product": {
"name": "3.16.7S",
"product_id": "CSAFPID-228690"
}
},
{
"category": "service_pack",
"name": "3.16.6bS",
"product": {
"name": "3.16.6bS",
"product_id": "CSAFPID-230303"
}
},
{
"category": "service_pack",
"name": "3.16.7aS",
"product": {
"name": "3.16.7aS",
"product_id": "CSAFPID-233141"
}
},
{
"category": "service_pack",
"name": "3.16.7bS",
"product": {
"name": "3.16.7bS",
"product_id": "CSAFPID-233447"
}
},
{
"category": "service_pack",
"name": "3.16.8S",
"product": {
"name": "3.16.8S",
"product_id": "CSAFPID-238937"
}
},
{
"category": "service_pack",
"name": "3.16.9S",
"product": {
"name": "3.16.9S",
"product_id": "CSAFPID-244912"
}
},
{
"category": "service_pack",
"name": "3.16.10S",
"product": {
"name": "3.16.10S",
"product_id": "CSAFPID-258406"
}
}
],
"category": "product_version",
"name": "3.16S"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.17.0S",
"product": {
"name": "3.17.0S",
"product_id": "CSAFPID-212411"
}
},
{
"category": "service_pack",
"name": "3.17.1S",
"product": {
"name": "3.17.1S",
"product_id": "CSAFPID-212412"
}
},
{
"category": "service_pack",
"name": "3.17.2S",
"product": {
"name": "3.17.2S",
"product_id": "CSAFPID-217234"
}
},
{
"category": "service_pack",
"name": "3.17.3S",
"product": {
"name": "3.17.3S",
"product_id": "CSAFPID-222942"
}
},
{
"category": "service_pack",
"name": "3.17.4S",
"product": {
"name": "3.17.4S",
"product_id": "CSAFPID-227556"
}
}
],
"category": "product_version",
"name": "3.17S"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.2.1",
"product": {
"name": "16.2.1",
"product_id": "CSAFPID-213809"
}
},
{
"category": "service_pack",
"name": "16.2.2",
"product": {
"name": "16.2.2",
"product_id": "CSAFPID-217253"
}
}
],
"category": "product_version",
"name": "16.2"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.3.1",
"product": {
"name": "16.3.1",
"product_id": "CSAFPID-213960"
}
},
{
"category": "service_pack",
"name": "16.3.2",
"product": {
"name": "16.3.2",
"product_id": "CSAFPID-217255"
}
},
{
"category": "service_pack",
"name": "16.3.3",
"product": {
"name": "16.3.3",
"product_id": "CSAFPID-217256"
}
},
{
"category": "service_pack",
"name": "16.3.1a",
"product": {
"name": "16.3.1a",
"product_id": "CSAFPID-220802"
}
},
{
"category": "service_pack",
"name": "16.3.4",
"product": {
"name": "16.3.4",
"product_id": "CSAFPID-222711"
}
},
{
"category": "service_pack",
"name": "16.3.5",
"product": {
"name": "16.3.5",
"product_id": "CSAFPID-229124"
}
},
{
"category": "service_pack",
"name": "16.3.6",
"product": {
"name": "16.3.6",
"product_id": "CSAFPID-231667"
}
},
{
"category": "service_pack",
"name": "16.3.7",
"product": {
"name": "16.3.7",
"product_id": "CSAFPID-239264"
}
},
{
"category": "service_pack",
"name": "16.3.8",
"product": {
"name": "16.3.8",
"product_id": "CSAFPID-251165"
}
},
{
"category": "service_pack",
"name": "16.3.9",
"product": {
"name": "16.3.9",
"product_id": "CSAFPID-262389"
}
},
{
"category": "service_pack",
"name": "16.3.10",
"product": {
"name": "16.3.10",
"product_id": "CSAFPID-273563"
}
},
{
"category": "service_pack",
"name": "16.3.11",
"product": {
"name": "16.3.11",
"product_id": "CSAFPID-278402"
}
}
],
"category": "product_version",
"name": "16.3"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.4.1",
"product": {
"name": "16.4.1",
"product_id": "CSAFPID-214051"
}
},
{
"category": "service_pack",
"name": "16.4.2",
"product": {
"name": "16.4.2",
"product_id": "CSAFPID-217257"
}
},
{
"category": "service_pack",
"name": "16.4.3",
"product": {
"name": "16.4.3",
"product_id": "CSAFPID-231390"
}
}
],
"category": "product_version",
"name": "16.4"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.5.1",
"product": {
"name": "16.5.1",
"product_id": "CSAFPID-217259"
}
},
{
"category": "service_pack",
"name": "16.5.1b",
"product": {
"name": "16.5.1b",
"product_id": "CSAFPID-226330"
}
},
{
"category": "service_pack",
"name": "16.5.2",
"product": {
"name": "16.5.2",
"product_id": "CSAFPID-229187"
}
},
{
"category": "service_pack",
"name": "16.5.3",
"product": {
"name": "16.5.3",
"product_id": "CSAFPID-232461"
}
}
],
"category": "product_version",
"name": "16.5"
},
{
"branches": [
{
"category": "service_pack",
"name": "3.18.2aSP",
"product": {
"name": "3.18.2aSP",
"product_id": "CSAFPID-226160"
}
}
],
"category": "product_version",
"name": "3.18SP"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.6.1",
"product": {
"name": "16.6.1",
"product_id": "CSAFPID-218901"
}
},
{
"category": "service_pack",
"name": "16.6.2",
"product": {
"name": "16.6.2",
"product_id": "CSAFPID-228706"
}
},
{
"category": "service_pack",
"name": "16.6.3",
"product": {
"name": "16.6.3",
"product_id": "CSAFPID-231682"
}
},
{
"category": "service_pack",
"name": "16.6.4",
"product": {
"name": "16.6.4",
"product_id": "CSAFPID-233155"
}
},
{
"category": "service_pack",
"name": "16.6.5",
"product": {
"name": "16.6.5",
"product_id": "CSAFPID-241736"
}
},
{
"category": "service_pack",
"name": "16.6.4s",
"product": {
"name": "16.6.4s",
"product_id": "CSAFPID-244900"
}
},
{
"category": "service_pack",
"name": "16.6.6",
"product": {
"name": "16.6.6",
"product_id": "CSAFPID-252914"
}
},
{
"category": "service_pack",
"name": "16.6.7",
"product": {
"name": "16.6.7",
"product_id": "CSAFPID-261241"
}
},
{
"category": "service_pack",
"name": "16.6.8",
"product": {
"name": "16.6.8",
"product_id": "CSAFPID-277148"
}
},
{
"category": "service_pack",
"name": "16.6.9",
"product": {
"name": "16.6.9",
"product_id": "CSAFPID-280801"
}
},
{
"category": "service_pack",
"name": "16.6.10",
"product": {
"name": "16.6.10",
"product_id": "CSAFPID-283835"
}
}
],
"category": "product_version",
"name": "16.6"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.7.1",
"product": {
"name": "16.7.1",
"product_id": "CSAFPID-218903"
}
},
{
"category": "service_pack",
"name": "16.7.2",
"product": {
"name": "16.7.2",
"product_id": "CSAFPID-236837"
}
},
{
"category": "service_pack",
"name": "16.7.3",
"product": {
"name": "16.7.3",
"product_id": "CSAFPID-244070"
}
}
],
"category": "product_version",
"name": "16.7"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.8.1",
"product": {
"name": "16.8.1",
"product_id": "CSAFPID-218905"
}
},
{
"category": "service_pack",
"name": "16.8.1s",
"product": {
"name": "16.8.1s",
"product_id": "CSAFPID-236834"
}
},
{
"category": "service_pack",
"name": "16.8.2",
"product": {
"name": "16.8.2",
"product_id": "CSAFPID-244071"
}
},
{
"category": "service_pack",
"name": "16.8.3",
"product": {
"name": "16.8.3",
"product_id": "CSAFPID-257984"
}
}
],
"category": "product_version",
"name": "16.8"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.9.1",
"product": {
"name": "16.9.1",
"product_id": "CSAFPID-225856"
}
},
{
"category": "service_pack",
"name": "16.9.2",
"product": {
"name": "16.9.2",
"product_id": "CSAFPID-232008"
}
},
{
"category": "service_pack",
"name": "16.9.1s",
"product": {
"name": "16.9.1s",
"product_id": "CSAFPID-244530"
}
},
{
"category": "service_pack",
"name": "16.9.3",
"product": {
"name": "16.9.3",
"product_id": "CSAFPID-251075"
}
},
{
"category": "service_pack",
"name": "16.9.2s",
"product": {
"name": "16.9.2s",
"product_id": "CSAFPID-252272"
}
},
{
"category": "service_pack",
"name": "16.9.4",
"product": {
"name": "16.9.4",
"product_id": "CSAFPID-262390"
}
},
{
"category": "service_pack",
"name": "16.9.3s",
"product": {
"name": "16.9.3s",
"product_id": "CSAFPID-262549"
}
},
{
"category": "service_pack",
"name": "16.9.5",
"product": {
"name": "16.9.5",
"product_id": "CSAFPID-271798"
}
},
{
"category": "service_pack",
"name": "16.9.6",
"product": {
"name": "16.9.6",
"product_id": "CSAFPID-277945"
}
},
{
"category": "service_pack",
"name": "16.9.7",
"product": {
"name": "16.9.7",
"product_id": "CSAFPID-280651"
}
},
{
"category": "service_pack",
"name": "16.9.8",
"product": {
"name": "16.9.8",
"product_id": "CSAFPID-280938"
}
},
{
"category": "service_pack",
"name": "16.9.8a",
"product": {
"name": "16.9.8a",
"product_id": "CSAFPID-290562"
}
}
],
"category": "product_version",
"name": "16.9"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.10.1",
"product": {
"name": "16.10.1",
"product_id": "CSAFPID-225858"
}
},
{
"category": "service_pack",
"name": "16.10.1a",
"product": {
"name": "16.10.1a",
"product_id": "CSAFPID-250629"
}
},
{
"category": "service_pack",
"name": "16.10.1b",
"product": {
"name": "16.10.1b",
"product_id": "CSAFPID-252045"
}
},
{
"category": "service_pack",
"name": "16.10.1s",
"product": {
"name": "16.10.1s",
"product_id": "CSAFPID-252913"
}
},
{
"category": "service_pack",
"name": "16.10.1e",
"product": {
"name": "16.10.1e",
"product_id": "CSAFPID-257955"
}
},
{
"category": "service_pack",
"name": "16.10.2",
"product": {
"name": "16.10.2",
"product_id": "CSAFPID-260917"
}
},
{
"category": "service_pack",
"name": "16.10.3",
"product": {
"name": "16.10.3",
"product_id": "CSAFPID-273112"
}
}
],
"category": "product_version",
"name": "16.10"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.11.1",
"product": {
"name": "16.11.1",
"product_id": "CSAFPID-227918"
}
},
{
"category": "service_pack",
"name": "16.11.1a",
"product": {
"name": "16.11.1a",
"product_id": "CSAFPID-252271"
}
},
{
"category": "service_pack",
"name": "16.11.2",
"product": {
"name": "16.11.2",
"product_id": "CSAFPID-261240"
}
},
{
"category": "service_pack",
"name": "16.11.1s",
"product": {
"name": "16.11.1s",
"product_id": "CSAFPID-261465"
}
},
{
"category": "service_pack",
"name": "16.11.1c",
"product": {
"name": "16.11.1c",
"product_id": "CSAFPID-264096"
}
}
],
"category": "product_version",
"name": "16.11"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.12.1",
"product": {
"name": "16.12.1",
"product_id": "CSAFPID-227920"
}
},
{
"category": "service_pack",
"name": "16.12.1s",
"product": {
"name": "16.12.1s",
"product_id": "CSAFPID-265735"
}
},
{
"category": "service_pack",
"name": "16.12.1a",
"product": {
"name": "16.12.1a",
"product_id": "CSAFPID-265841"
}
},
{
"category": "service_pack",
"name": "16.12.1c",
"product": {
"name": "16.12.1c",
"product_id": "CSAFPID-267110"
}
},
{
"category": "service_pack",
"name": "16.12.2",
"product": {
"name": "16.12.2",
"product_id": "CSAFPID-267605"
}
},
{
"category": "service_pack",
"name": "16.12.3",
"product": {
"name": "16.12.3",
"product_id": "CSAFPID-273445"
}
},
{
"category": "service_pack",
"name": "16.12.8",
"product": {
"name": "16.12.8",
"product_id": "CSAFPID-273448"
}
},
{
"category": "service_pack",
"name": "16.12.2s",
"product": {
"name": "16.12.2s",
"product_id": "CSAFPID-273509"
}
},
{
"category": "service_pack",
"name": "16.12.2t",
"product": {
"name": "16.12.2t",
"product_id": "CSAFPID-275538"
}
},
{
"category": "service_pack",
"name": "16.12.4",
"product": {
"name": "16.12.4",
"product_id": "CSAFPID-277147"
}
},
{
"category": "service_pack",
"name": "16.12.3s",
"product": {
"name": "16.12.3s",
"product_id": "CSAFPID-277255"
}
},
{
"category": "service_pack",
"name": "16.12.5",
"product": {
"name": "16.12.5",
"product_id": "CSAFPID-280463"
}
},
{
"category": "service_pack",
"name": "16.12.6",
"product": {
"name": "16.12.6",
"product_id": "CSAFPID-280937"
}
},
{
"category": "service_pack",
"name": "16.12.7",
"product": {
"name": "16.12.7",
"product_id": "CSAFPID-286031"
}
},
{
"category": "service_pack",
"name": "16.12.14",
"product": {
"name": "16.12.14",
"product_id": "CSAFPID-305303"
}
}
],
"category": "product_version",
"name": "16.12"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.1.1",
"product": {
"name": "17.1.1",
"product_id": "CSAFPID-245377"
}
},
{
"category": "service_pack",
"name": "17.1.1s",
"product": {
"name": "17.1.1s",
"product_id": "CSAFPID-274818"
}
},
{
"category": "service_pack",
"name": "17.1.2",
"product": {
"name": "17.1.2",
"product_id": "CSAFPID-277338"
}
},
{
"category": "service_pack",
"name": "17.1.1t",
"product": {
"name": "17.1.1t",
"product_id": "CSAFPID-277348"
}
},
{
"category": "service_pack",
"name": "17.1.3",
"product": {
"name": "17.1.3",
"product_id": "CSAFPID-280652"
}
}
],
"category": "product_version",
"name": "17.1"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.2.1",
"product": {
"name": "17.2.1",
"product_id": "CSAFPID-251225"
}
},
{
"category": "service_pack",
"name": "17.2.1r",
"product": {
"name": "17.2.1r",
"product_id": "CSAFPID-277194"
}
},
{
"category": "service_pack",
"name": "17.2.1v",
"product": {
"name": "17.2.1v",
"product_id": "CSAFPID-278002"
}
},
{
"category": "service_pack",
"name": "17.2.2",
"product": {
"name": "17.2.2",
"product_id": "CSAFPID-278504"
}
},
{
"category": "service_pack",
"name": "17.2.3",
"product": {
"name": "17.2.3",
"product_id": "CSAFPID-280939"
}
}
],
"category": "product_version",
"name": "17.2"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.3.1",
"product": {
"name": "17.3.1",
"product_id": "CSAFPID-254712"
}
},
{
"category": "service_pack",
"name": "17.3.2",
"product": {
"name": "17.3.2",
"product_id": "CSAFPID-277099"
}
},
{
"category": "service_pack",
"name": "17.3.3",
"product": {
"name": "17.3.3",
"product_id": "CSAFPID-278019"
}
},
{
"category": "service_pack",
"name": "17.3.1a",
"product": {
"name": "17.3.1a",
"product_id": "CSAFPID-279338"
}
},
{
"category": "service_pack",
"name": "17.3.4",
"product": {
"name": "17.3.4",
"product_id": "CSAFPID-282028"
}
},
{
"category": "service_pack",
"name": "17.3.5",
"product": {
"name": "17.3.5",
"product_id": "CSAFPID-282115"
}
},
{
"category": "service_pack",
"name": "17.3.4a",
"product": {
"name": "17.3.4a",
"product_id": "CSAFPID-284178"
}
},
{
"category": "service_pack",
"name": "17.3.6",
"product": {
"name": "17.3.6",
"product_id": "CSAFPID-284331"
}
},
{
"category": "service_pack",
"name": "17.3.7",
"product": {
"name": "17.3.7",
"product_id": "CSAFPID-290671"
}
},
{
"category": "service_pack",
"name": "17.3.8",
"product": {
"name": "17.3.8",
"product_id": "CSAFPID-295398"
}
},
{
"category": "service_pack",
"name": "17.3.8a",
"product": {
"name": "17.3.8a",
"product_id": "CSAFPID-300847"
}
}
],
"category": "product_version",
"name": "17.3"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.4.1",
"product": {
"name": "17.4.1",
"product_id": "CSAFPID-262588"
}
},
{
"category": "service_pack",
"name": "17.4.2",
"product": {
"name": "17.4.2",
"product_id": "CSAFPID-278020"
}
},
{
"category": "service_pack",
"name": "17.4.1a",
"product": {
"name": "17.4.1a",
"product_id": "CSAFPID-280770"
}
},
{
"category": "service_pack",
"name": "17.4.1b",
"product": {
"name": "17.4.1b",
"product_id": "CSAFPID-280899"
}
},
{
"category": "service_pack",
"name": "17.4.1c",
"product": {
"name": "17.4.1c",
"product_id": "CSAFPID-282116"
}
}
],
"category": "product_version",
"name": "17.4"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.5.1",
"product": {
"name": "17.5.1",
"product_id": "CSAFPID-262590"
}
},
{
"category": "service_pack",
"name": "17.5.1a",
"product": {
"name": "17.5.1a",
"product_id": "CSAFPID-282046"
}
},
{
"category": "service_pack",
"name": "17.5.1b",
"product": {
"name": "17.5.1b",
"product_id": "CSAFPID-290596"
}
},
{
"category": "service_pack",
"name": "17.5.1c",
"product": {
"name": "17.5.1c",
"product_id": "CSAFPID-292698"
}
}
],
"category": "product_version",
"name": "17.5"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.6.1",
"product": {
"name": "17.6.1",
"product_id": "CSAFPID-262592"
}
},
{
"category": "service_pack",
"name": "17.6.2",
"product": {
"name": "17.6.2",
"product_id": "CSAFPID-282117"
}
},
{
"category": "service_pack",
"name": "17.6.1a",
"product": {
"name": "17.6.1a",
"product_id": "CSAFPID-284179"
}
},
{
"category": "service_pack",
"name": "17.6.3",
"product": {
"name": "17.6.3",
"product_id": "CSAFPID-286409"
}
},
{
"category": "service_pack",
"name": "17.6.1y",
"product": {
"name": "17.6.1y",
"product_id": "CSAFPID-286477"
}
},
{
"category": "service_pack",
"name": "17.6.3a",
"product": {
"name": "17.6.3a",
"product_id": "CSAFPID-286594"
}
},
{
"category": "service_pack",
"name": "17.6.4",
"product": {
"name": "17.6.4",
"product_id": "CSAFPID-287087"
}
},
{
"category": "service_pack",
"name": "17.6.5",
"product": {
"name": "17.6.5",
"product_id": "CSAFPID-290660"
}
},
{
"category": "service_pack",
"name": "17.6.6",
"product": {
"name": "17.6.6",
"product_id": "CSAFPID-292656"
}
},
{
"category": "service_pack",
"name": "17.6.6a",
"product": {
"name": "17.6.6a",
"product_id": "CSAFPID-300848"
}
},
{
"category": "service_pack",
"name": "17.6.5a",
"product": {
"name": "17.6.5a",
"product_id": "CSAFPID-300850"
}
},
{
"category": "service_pack",
"name": "17.6.7",
"product": {
"name": "17.6.7",
"product_id": "CSAFPID-300851"
}
},
{
"category": "service_pack",
"name": "17.6.8",
"product": {
"name": "17.6.8",
"product_id": "CSAFPID-301722"
}
},
{
"category": "service_pack",
"name": "17.6.8a",
"product": {
"name": "17.6.8a",
"product_id": "CSAFPID-302974"
}
}
],
"category": "product_version",
"name": "17.6"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.7.1",
"product": {
"name": "17.7.1",
"product_id": "CSAFPID-277357"
}
},
{
"category": "service_pack",
"name": "17.7.1a",
"product": {
"name": "17.7.1a",
"product_id": "CSAFPID-285329"
}
},
{
"category": "service_pack",
"name": "17.7.2",
"product": {
"name": "17.7.2",
"product_id": "CSAFPID-286534"
}
}
],
"category": "product_version",
"name": "17.7"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.10.1",
"product": {
"name": "17.10.1",
"product_id": "CSAFPID-278018"
}
},
{
"category": "service_pack",
"name": "17.10.1a",
"product": {
"name": "17.10.1a",
"product_id": "CSAFPID-290580"
}
}
],
"category": "product_version",
"name": "17.10"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.8.1",
"product": {
"name": "17.8.1",
"product_id": "CSAFPID-278023"
}
},
{
"category": "service_pack",
"name": "17.8.1a",
"product": {
"name": "17.8.1a",
"product_id": "CSAFPID-286486"
}
}
],
"category": "product_version",
"name": "17.8"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.9.1",
"product": {
"name": "17.9.1",
"product_id": "CSAFPID-278025"
}
},
{
"category": "service_pack",
"name": "17.9.2",
"product": {
"name": "17.9.2",
"product_id": "CSAFPID-288221"
}
},
{
"category": "service_pack",
"name": "17.9.1a",
"product": {
"name": "17.9.1a",
"product_id": "CSAFPID-288247"
}
},
{
"category": "service_pack",
"name": "17.9.3",
"product": {
"name": "17.9.3",
"product_id": "CSAFPID-290674"
}
},
{
"category": "service_pack",
"name": "17.9.2a",
"product": {
"name": "17.9.2a",
"product_id": "CSAFPID-290675"
}
},
{
"category": "service_pack",
"name": "17.9.3a",
"product": {
"name": "17.9.3a",
"product_id": "CSAFPID-295198"
}
},
{
"category": "service_pack",
"name": "17.9.4",
"product": {
"name": "17.9.4",
"product_id": "CSAFPID-295412"
}
},
{
"category": "service_pack",
"name": "17.9.5",
"product": {
"name": "17.9.5",
"product_id": "CSAFPID-300263"
}
},
{
"category": "service_pack",
"name": "17.9.4a",
"product": {
"name": "17.9.4a",
"product_id": "CSAFPID-300845"
}
},
{
"category": "service_pack",
"name": "17.9.5a",
"product": {
"name": "17.9.5a",
"product_id": "CSAFPID-301278"
}
},
{
"category": "service_pack",
"name": "17.9.5b",
"product": {
"name": "17.9.5b",
"product_id": "CSAFPID-301619"
}
},
{
"category": "service_pack",
"name": "17.9.5c",
"product": {
"name": "17.9.5c",
"product_id": "CSAFPID-302644"
}
},
{
"category": "service_pack",
"name": "17.9.5d",
"product": {
"name": "17.9.5d",
"product_id": "CSAFPID-302784"
}
},
{
"category": "service_pack",
"name": "17.9.5e",
"product": {
"name": "17.9.5e",
"product_id": "CSAFPID-303047"
}
},
{
"category": "service_pack",
"name": "17.9.5f",
"product": {
"name": "17.9.5f",
"product_id": "CSAFPID-303316"
}
},
{
"category": "service_pack",
"name": "17.9.7b",
"product": {
"name": "17.9.7b",
"product_id": "CSAFPID-306388"
}
}
],
"category": "product_version",
"name": "17.9"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.11.1",
"product": {
"name": "17.11.1",
"product_id": "CSAFPID-286799"
}
},
{
"category": "service_pack",
"name": "17.11.1a",
"product": {
"name": "17.11.1a",
"product_id": "CSAFPID-294838"
}
}
],
"category": "product_version",
"name": "17.11"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.12.1",
"product": {
"name": "17.12.1",
"product_id": "CSAFPID-286801"
}
},
{
"category": "service_pack",
"name": "17.12.1a",
"product": {
"name": "17.12.1a",
"product_id": "CSAFPID-300012"
}
},
{
"category": "service_pack",
"name": "17.12.2",
"product": {
"name": "17.12.2",
"product_id": "CSAFPID-300834"
}
},
{
"category": "service_pack",
"name": "17.12.3",
"product": {
"name": "17.12.3",
"product_id": "CSAFPID-300936"
}
},
{
"category": "service_pack",
"name": "17.12.2a",
"product": {
"name": "17.12.2a",
"product_id": "CSAFPID-300948"
}
},
{
"category": "service_pack",
"name": "17.12.3a",
"product": {
"name": "17.12.3a",
"product_id": "CSAFPID-302628"
}
},
{
"category": "service_pack",
"name": "17.12.5c",
"product": {
"name": "17.12.5c",
"product_id": "CSAFPID-306389"
}
}
],
"category": "product_version",
"name": "17.12"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.13.1",
"product": {
"name": "17.13.1",
"product_id": "CSAFPID-295359"
}
},
{
"category": "service_pack",
"name": "17.13.1a",
"product": {
"name": "17.13.1a",
"product_id": "CSAFPID-300947"
}
}
],
"category": "product_version",
"name": "17.13"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.14.1",
"product": {
"name": "17.14.1",
"product_id": "CSAFPID-295361"
}
},
{
"category": "service_pack",
"name": "17.14.1a",
"product": {
"name": "17.14.1a",
"product_id": "CSAFPID-301611"
}
}
],
"category": "product_version",
"name": "17.14"
}
],
"category": "product_family",
"name": "Cisco IOS XE Software"
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-20192",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwi26594"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-201495",
"CSAFPID-206174",
"CSAFPID-206175",
"CSAFPID-206178",
"CSAFPID-206180",
"CSAFPID-206181",
"CSAFPID-206191",
"CSAFPID-206192",
"CSAFPID-206193",
"CSAFPID-210078",
"CSAFPID-210079",
"CSAFPID-210081",
"CSAFPID-212268",
"CSAFPID-212411",
"CSAFPID-212412",
"CSAFPID-213475",
"CSAFPID-213477",
"CSAFPID-213478",
"CSAFPID-213557",
"CSAFPID-213700",
"CSAFPID-213776",
"CSAFPID-213778",
"CSAFPID-213779",
"CSAFPID-213809",
"CSAFPID-213960",
"CSAFPID-214051",
"CSAFPID-217234",
"CSAFPID-217253",
"CSAFPID-217255",
"CSAFPID-217256",
"CSAFPID-217257",
"CSAFPID-217259",
"CSAFPID-217262",
"CSAFPID-217263",
"CSAFPID-217264",
"CSAFPID-218901",
"CSAFPID-218903",
"CSAFPID-218905",
"CSAFPID-220688",
"CSAFPID-220802",
"CSAFPID-220993",
"CSAFPID-222257",
"CSAFPID-222693",
"CSAFPID-222694",
"CSAFPID-222711",
"CSAFPID-222925",
"CSAFPID-222942",
"CSAFPID-223252",
"CSAFPID-224702",
"CSAFPID-225099",
"CSAFPID-225466",
"CSAFPID-225832",
"CSAFPID-225856",
"CSAFPID-225858",
"CSAFPID-226160",
"CSAFPID-226330",
"CSAFPID-227556",
"CSAFPID-227918",
"CSAFPID-227920",
"CSAFPID-227923",
"CSAFPID-228690",
"CSAFPID-228706",
"CSAFPID-229124",
"CSAFPID-229187",
"CSAFPID-230303",
"CSAFPID-231390",
"CSAFPID-231454",
"CSAFPID-231667",
"CSAFPID-231682",
"CSAFPID-232008",
"CSAFPID-232461",
"CSAFPID-233141",
"CSAFPID-233155",
"CSAFPID-233447",
"CSAFPID-234928",
"CSAFPID-236834",
"CSAFPID-236837",
"CSAFPID-238937",
"CSAFPID-239264",
"CSAFPID-241736",
"CSAFPID-244070",
"CSAFPID-244071",
"CSAFPID-244530",
"CSAFPID-244900",
"CSAFPID-244912",
"CSAFPID-245377",
"CSAFPID-250629",
"CSAFPID-251075",
"CSAFPID-251165",
"CSAFPID-251225",
"CSAFPID-252045",
"CSAFPID-252271",
"CSAFPID-252272",
"CSAFPID-252913",
"CSAFPID-252914",
"CSAFPID-254712",
"CSAFPID-257955",
"CSAFPID-257984",
"CSAFPID-258406",
"CSAFPID-260917",
"CSAFPID-261240",
"CSAFPID-261241",
"CSAFPID-261465",
"CSAFPID-262389",
"CSAFPID-262390",
"CSAFPID-262549",
"CSAFPID-262588",
"CSAFPID-262590",
"CSAFPID-262592",
"CSAFPID-264096",
"CSAFPID-265735",
"CSAFPID-265841",
"CSAFPID-267110",
"CSAFPID-267605",
"CSAFPID-271798",
"CSAFPID-273112",
"CSAFPID-273445",
"CSAFPID-273448",
"CSAFPID-273509",
"CSAFPID-273563",
"CSAFPID-274818",
"CSAFPID-275538",
"CSAFPID-277099",
"CSAFPID-277147",
"CSAFPID-277148",
"CSAFPID-277194",
"CSAFPID-277255",
"CSAFPID-277338",
"CSAFPID-277348",
"CSAFPID-277357",
"CSAFPID-277945",
"CSAFPID-278002",
"CSAFPID-278018",
"CSAFPID-278019",
"CSAFPID-278020",
"CSAFPID-278023",
"CSAFPID-278025",
"CSAFPID-278402",
"CSAFPID-278504",
"CSAFPID-279338",
"CSAFPID-280463",
"CSAFPID-280651",
"CSAFPID-280652",
"CSAFPID-280770",
"CSAFPID-280801",
"CSAFPID-280899",
"CSAFPID-280937",
"CSAFPID-280938",
"CSAFPID-280939",
"CSAFPID-282028",
"CSAFPID-282046",
"CSAFPID-282115",
"CSAFPID-282116",
"CSAFPID-282117",
"CSAFPID-283835",
"CSAFPID-284178",
"CSAFPID-284179",
"CSAFPID-284331",
"CSAFPID-285329",
"CSAFPID-286031",
"CSAFPID-286409",
"CSAFPID-286477",
"CSAFPID-286486",
"CSAFPID-286534",
"CSAFPID-286594",
"CSAFPID-286799",
"CSAFPID-286801",
"CSAFPID-287087",
"CSAFPID-288221",
"CSAFPID-288247",
"CSAFPID-290562",
"CSAFPID-290580",
"CSAFPID-290596",
"CSAFPID-290660",
"CSAFPID-290671",
"CSAFPID-290674",
"CSAFPID-290675",
"CSAFPID-292656",
"CSAFPID-292698",
"CSAFPID-294838",
"CSAFPID-295198",
"CSAFPID-295359",
"CSAFPID-295361",
"CSAFPID-295398",
"CSAFPID-295412",
"CSAFPID-300012",
"CSAFPID-300263",
"CSAFPID-300834",
"CSAFPID-300845",
"CSAFPID-300847",
"CSAFPID-300848",
"CSAFPID-300850",
"CSAFPID-300851",
"CSAFPID-300936",
"CSAFPID-300947",
"CSAFPID-300948",
"CSAFPID-301278",
"CSAFPID-301611",
"CSAFPID-301619",
"CSAFPID-301722",
"CSAFPID-302628",
"CSAFPID-302644",
"CSAFPID-302784",
"CSAFPID-302974",
"CSAFPID-303047",
"CSAFPID-303316",
"CSAFPID-305303",
"CSAFPID-306388",
"CSAFPID-306389"
]
},
"release_date": "2025-05-07T16:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-201495",
"CSAFPID-206174",
"CSAFPID-206175",
"CSAFPID-206178",
"CSAFPID-206180",
"CSAFPID-206181",
"CSAFPID-206191",
"CSAFPID-206192",
"CSAFPID-206193",
"CSAFPID-210078",
"CSAFPID-210079",
"CSAFPID-210081",
"CSAFPID-212268",
"CSAFPID-212411",
"CSAFPID-212412",
"CSAFPID-213475",
"CSAFPID-213477",
"CSAFPID-213478",
"CSAFPID-213557",
"CSAFPID-213700",
"CSAFPID-213776",
"CSAFPID-213778",
"CSAFPID-213779",
"CSAFPID-213809",
"CSAFPID-213960",
"CSAFPID-214051",
"CSAFPID-217234",
"CSAFPID-217253",
"CSAFPID-217255",
"CSAFPID-217256",
"CSAFPID-217257",
"CSAFPID-217259",
"CSAFPID-217262",
"CSAFPID-217263",
"CSAFPID-217264",
"CSAFPID-218901",
"CSAFPID-218903",
"CSAFPID-218905",
"CSAFPID-220688",
"CSAFPID-220802",
"CSAFPID-220993",
"CSAFPID-222257",
"CSAFPID-222693",
"CSAFPID-222694",
"CSAFPID-222711",
"CSAFPID-222925",
"CSAFPID-222942",
"CSAFPID-223252",
"CSAFPID-224702",
"CSAFPID-225099",
"CSAFPID-225466",
"CSAFPID-225832",
"CSAFPID-225856",
"CSAFPID-225858",
"CSAFPID-226160",
"CSAFPID-226330",
"CSAFPID-227556",
"CSAFPID-227918",
"CSAFPID-227920",
"CSAFPID-227923",
"CSAFPID-228690",
"CSAFPID-228706",
"CSAFPID-229124",
"CSAFPID-229187",
"CSAFPID-230303",
"CSAFPID-231390",
"CSAFPID-231454",
"CSAFPID-231667",
"CSAFPID-231682",
"CSAFPID-232008",
"CSAFPID-232461",
"CSAFPID-233141",
"CSAFPID-233155",
"CSAFPID-233447",
"CSAFPID-234928",
"CSAFPID-236834",
"CSAFPID-236837",
"CSAFPID-238937",
"CSAFPID-239264",
"CSAFPID-241736",
"CSAFPID-244070",
"CSAFPID-244071",
"CSAFPID-244530",
"CSAFPID-244900",
"CSAFPID-244912",
"CSAFPID-245377",
"CSAFPID-250629",
"CSAFPID-251075",
"CSAFPID-251165",
"CSAFPID-251225",
"CSAFPID-252045",
"CSAFPID-252271",
"CSAFPID-252272",
"CSAFPID-252913",
"CSAFPID-252914",
"CSAFPID-254712",
"CSAFPID-257955",
"CSAFPID-257984",
"CSAFPID-258406",
"CSAFPID-260917",
"CSAFPID-261240",
"CSAFPID-261241",
"CSAFPID-261465",
"CSAFPID-262389",
"CSAFPID-262390",
"CSAFPID-262549",
"CSAFPID-262588",
"CSAFPID-262590",
"CSAFPID-262592",
"CSAFPID-264096",
"CSAFPID-265735",
"CSAFPID-265841",
"CSAFPID-267110",
"CSAFPID-267605",
"CSAFPID-271798",
"CSAFPID-273112",
"CSAFPID-273445",
"CSAFPID-273448",
"CSAFPID-273509",
"CSAFPID-273563",
"CSAFPID-274818",
"CSAFPID-275538",
"CSAFPID-277099",
"CSAFPID-277147",
"CSAFPID-277148",
"CSAFPID-277194",
"CSAFPID-277255",
"CSAFPID-277338",
"CSAFPID-277348",
"CSAFPID-277357",
"CSAFPID-277945",
"CSAFPID-278002",
"CSAFPID-278018",
"CSAFPID-278019",
"CSAFPID-278020",
"CSAFPID-278023",
"CSAFPID-278025",
"CSAFPID-278402",
"CSAFPID-278504",
"CSAFPID-279338",
"CSAFPID-280463",
"CSAFPID-280651",
"CSAFPID-280652",
"CSAFPID-280770",
"CSAFPID-280801",
"CSAFPID-280899",
"CSAFPID-280937",
"CSAFPID-280938",
"CSAFPID-280939",
"CSAFPID-282028",
"CSAFPID-282046",
"CSAFPID-282115",
"CSAFPID-282116",
"CSAFPID-282117",
"CSAFPID-283835",
"CSAFPID-284178",
"CSAFPID-284179",
"CSAFPID-284331",
"CSAFPID-285329",
"CSAFPID-286031",
"CSAFPID-286409",
"CSAFPID-286477",
"CSAFPID-286486",
"CSAFPID-286534",
"CSAFPID-286594",
"CSAFPID-286799",
"CSAFPID-286801",
"CSAFPID-287087",
"CSAFPID-288221",
"CSAFPID-288247",
"CSAFPID-290562",
"CSAFPID-290580",
"CSAFPID-290596",
"CSAFPID-290660",
"CSAFPID-290671",
"CSAFPID-290674",
"CSAFPID-290675",
"CSAFPID-292656",
"CSAFPID-292698",
"CSAFPID-294838",
"CSAFPID-295198",
"CSAFPID-295359",
"CSAFPID-295361",
"CSAFPID-295398",
"CSAFPID-295412",
"CSAFPID-300012",
"CSAFPID-300263",
"CSAFPID-300834",
"CSAFPID-300845",
"CSAFPID-300847",
"CSAFPID-300848",
"CSAFPID-300850",
"CSAFPID-300851",
"CSAFPID-300936",
"CSAFPID-300947",
"CSAFPID-300948",
"CSAFPID-301278",
"CSAFPID-301611",
"CSAFPID-301619",
"CSAFPID-301722",
"CSAFPID-302628",
"CSAFPID-302644",
"CSAFPID-302784",
"CSAFPID-302974",
"CSAFPID-303047",
"CSAFPID-303316",
"CSAFPID-305303",
"CSAFPID-306388",
"CSAFPID-306389"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-201495",
"CSAFPID-206174",
"CSAFPID-206175",
"CSAFPID-206178",
"CSAFPID-206180",
"CSAFPID-206181",
"CSAFPID-206191",
"CSAFPID-206192",
"CSAFPID-206193",
"CSAFPID-210078",
"CSAFPID-210079",
"CSAFPID-210081",
"CSAFPID-212268",
"CSAFPID-212411",
"CSAFPID-212412",
"CSAFPID-213475",
"CSAFPID-213477",
"CSAFPID-213478",
"CSAFPID-213557",
"CSAFPID-213700",
"CSAFPID-213776",
"CSAFPID-213778",
"CSAFPID-213779",
"CSAFPID-213809",
"CSAFPID-213960",
"CSAFPID-214051",
"CSAFPID-217234",
"CSAFPID-217253",
"CSAFPID-217255",
"CSAFPID-217256",
"CSAFPID-217257",
"CSAFPID-217259",
"CSAFPID-217262",
"CSAFPID-217263",
"CSAFPID-217264",
"CSAFPID-218901",
"CSAFPID-218903",
"CSAFPID-218905",
"CSAFPID-220688",
"CSAFPID-220802",
"CSAFPID-220993",
"CSAFPID-222257",
"CSAFPID-222693",
"CSAFPID-222694",
"CSAFPID-222711",
"CSAFPID-222925",
"CSAFPID-222942",
"CSAFPID-223252",
"CSAFPID-224702",
"CSAFPID-225099",
"CSAFPID-225466",
"CSAFPID-225832",
"CSAFPID-225856",
"CSAFPID-225858",
"CSAFPID-226160",
"CSAFPID-226330",
"CSAFPID-227556",
"CSAFPID-227918",
"CSAFPID-227920",
"CSAFPID-227923",
"CSAFPID-228690",
"CSAFPID-228706",
"CSAFPID-229124",
"CSAFPID-229187",
"CSAFPID-230303",
"CSAFPID-231390",
"CSAFPID-231454",
"CSAFPID-231667",
"CSAFPID-231682",
"CSAFPID-232008",
"CSAFPID-232461",
"CSAFPID-233141",
"CSAFPID-233155",
"CSAFPID-233447",
"CSAFPID-234928",
"CSAFPID-236834",
"CSAFPID-236837",
"CSAFPID-238937",
"CSAFPID-239264",
"CSAFPID-241736",
"CSAFPID-244070",
"CSAFPID-244071",
"CSAFPID-244530",
"CSAFPID-244900",
"CSAFPID-244912",
"CSAFPID-245377",
"CSAFPID-250629",
"CSAFPID-251075",
"CSAFPID-251165",
"CSAFPID-251225",
"CSAFPID-252045",
"CSAFPID-252271",
"CSAFPID-252272",
"CSAFPID-252913",
"CSAFPID-252914",
"CSAFPID-254712",
"CSAFPID-257955",
"CSAFPID-257984",
"CSAFPID-258406",
"CSAFPID-260917",
"CSAFPID-261240",
"CSAFPID-261241",
"CSAFPID-261465",
"CSAFPID-262389",
"CSAFPID-262390",
"CSAFPID-262549",
"CSAFPID-262588",
"CSAFPID-262590",
"CSAFPID-262592",
"CSAFPID-264096",
"CSAFPID-265735",
"CSAFPID-265841",
"CSAFPID-267110",
"CSAFPID-267605",
"CSAFPID-271798",
"CSAFPID-273112",
"CSAFPID-273445",
"CSAFPID-273448",
"CSAFPID-273509",
"CSAFPID-273563",
"CSAFPID-274818",
"CSAFPID-275538",
"CSAFPID-277099",
"CSAFPID-277147",
"CSAFPID-277148",
"CSAFPID-277194",
"CSAFPID-277255",
"CSAFPID-277338",
"CSAFPID-277348",
"CSAFPID-277357",
"CSAFPID-277945",
"CSAFPID-278002",
"CSAFPID-278018",
"CSAFPID-278019",
"CSAFPID-278020",
"CSAFPID-278023",
"CSAFPID-278025",
"CSAFPID-278402",
"CSAFPID-278504",
"CSAFPID-279338",
"CSAFPID-280463",
"CSAFPID-280651",
"CSAFPID-280652",
"CSAFPID-280770",
"CSAFPID-280801",
"CSAFPID-280899",
"CSAFPID-280937",
"CSAFPID-280938",
"CSAFPID-280939",
"CSAFPID-282028",
"CSAFPID-282046",
"CSAFPID-282115",
"CSAFPID-282116",
"CSAFPID-282117",
"CSAFPID-283835",
"CSAFPID-284178",
"CSAFPID-284179",
"CSAFPID-284331",
"CSAFPID-285329",
"CSAFPID-286031",
"CSAFPID-286409",
"CSAFPID-286477",
"CSAFPID-286486",
"CSAFPID-286534",
"CSAFPID-286594",
"CSAFPID-286799",
"CSAFPID-286801",
"CSAFPID-287087",
"CSAFPID-288221",
"CSAFPID-288247",
"CSAFPID-290562",
"CSAFPID-290580",
"CSAFPID-290596",
"CSAFPID-290660",
"CSAFPID-290671",
"CSAFPID-290674",
"CSAFPID-290675",
"CSAFPID-292656",
"CSAFPID-292698",
"CSAFPID-294838",
"CSAFPID-295198",
"CSAFPID-295359",
"CSAFPID-295361",
"CSAFPID-295398",
"CSAFPID-295412",
"CSAFPID-300012",
"CSAFPID-300263",
"CSAFPID-300834",
"CSAFPID-300845",
"CSAFPID-300847",
"CSAFPID-300848",
"CSAFPID-300850",
"CSAFPID-300851",
"CSAFPID-300936",
"CSAFPID-300947",
"CSAFPID-300948",
"CSAFPID-301278",
"CSAFPID-301611",
"CSAFPID-301619",
"CSAFPID-301722",
"CSAFPID-302628",
"CSAFPID-302644",
"CSAFPID-302784",
"CSAFPID-302974",
"CSAFPID-303047",
"CSAFPID-303316",
"CSAFPID-305303",
"CSAFPID-306388",
"CSAFPID-306389"
]
}
],
"title": "Cisco IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability"
}
]
}
FKIE_CVE-2025-20192
Vulnerability from fkie_nvd - Published: 2025-05-07 18:15 - Updated: 2026-04-15 00:35
Severity ?
Summary
A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.
This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.\r\n\r This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la implementaci\u00f3n de Intercambio de Claves por Internet versi\u00f3n 1 (IKEv1) del software Cisco IOS XE podr\u00eda permitir que un atacante remoto autenticado provoque una denegaci\u00f3n de servicio (DoS). El atacante debe tener credenciales VPN IKEv1 v\u00e1lidas para explotar esta vulnerabilidad. Esta vulnerabilidad se debe a una validaci\u00f3n incorrecta de los par\u00e1metros de fase 2 de IKEv1 antes de que la solicitud de creaci\u00f3n de la asociaci\u00f3n de seguridad IPsec se transfiera al acelerador criptogr\u00e1fico de hardware de un dispositivo afectado. Un atacante podr\u00eda explotar esta vulnerabilidad enviando mensajes IKEv1 manipulados al dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante provocar la recarga del dispositivo."
}
],
"id": "CVE-2025-20192",
"lastModified": "2026-04-15T00:35:42.020",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.1,
"impactScore": 4.0,
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
},
"published": "2025-05-07T18:15:39.280",
"references": [
{
"source": "psirt@cisco.com",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-232"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
}
GHSA-FFCC-CQG6-6F7V
Vulnerability from github – Published: 2025-05-07 18:30 – Updated: 2025-05-07 18:30
VLAI?
Details
A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.
This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.
Severity ?
7.7 (High)
{
"affected": [],
"aliases": [
"CVE-2025-20192"
],
"database_specific": {
"cwe_ids": [
"CWE-232"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-07T18:15:39Z",
"severity": "HIGH"
},
"details": "A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.\n\n This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.",
"id": "GHSA-ffcc-cqg6-6f7v",
"modified": "2025-05-07T18:30:49Z",
"published": "2025-05-07T18:30:49Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20192"
},
{
"type": "WEB",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
NCSC-2025-0146
Vulnerability from csaf_ncscnl - Published: 2025-05-08 08:43 - Updated: 2025-05-08 08:43Summary
Kwetsbaarheden verholpen in Cisco IOS XE Software
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Cisco heeft kwetsbaarheden verholpen in Cisco IOS XE Software.
Interpretaties: De kwetsbaarheden in Cisco IOS XE Software omvatten verschillende problemen, waaronder onvoldoende invoervalidatie en onjuist geheugenbeheer. Deze kwetsbaarheden kunnen worden misbruikt door ongeauthenticeerde aanvallers om Denial-of-Service (DoS) situaties te veroorzaken, ongeautoriseerde toegang te verkrijgen, en zelfs om configuraties te manipuleren. Kwetsbare systemen kunnen onverwacht opnieuw opstarten of kunnen worden blootgesteld aan ongeautoriseerde commando-injectie-aanvallen, wat de integriteit en beschikbaarheid van netwerken in gevaar kan brengen.
Oplossingen: Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-762: Mismatched Memory Management Routines
CWE-805: Buffer Access with Incorrect Length Value
CWE-347: Improper Verification of Cryptographic Signature
CWE-232: Improper Handling of Undefined Values
CWE-798: Use of Hard-coded Credentials
CWE-352: Cross-Site Request Forgery (CSRF)
CWE-284: Improper Access Control
CWE-400: Uncontrolled Resource Consumption
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-787: Out-of-bounds Write
CWE-789: Memory Allocation with Excessive Size Value
CWE-20: Improper Input Validation
4.7 (Medium)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
7.4 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
8.6 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
8.6 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
6.8 (Medium)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
8.6 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
8.8 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
10.0 (Critical)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
7.4 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
6.5 (Medium)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
7.7 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
5.4 (Medium)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
7.4 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
References
23 references
| URL | Category |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Cisco heeft kwetsbaarheden verholpen in Cisco IOS XE Software.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden in Cisco IOS XE Software omvatten verschillende problemen, waaronder onvoldoende invoervalidatie en onjuist geheugenbeheer. Deze kwetsbaarheden kunnen worden misbruikt door ongeauthenticeerde aanvallers om Denial-of-Service (DoS) situaties te veroorzaken, ongeautoriseerde toegang te verkrijgen, en zelfs om configuraties te manipuleren. Kwetsbare systemen kunnen onverwacht opnieuw opstarten of kunnen worden blootgesteld aan ongeautoriseerde commando-injectie-aanvallen, wat de integriteit en beschikbaarheid van netwerken in gevaar kan brengen.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Mismatched Memory Management Routines",
"title": "CWE-762"
},
{
"category": "general",
"text": "Buffer Access with Incorrect Length Value",
"title": "CWE-805"
},
{
"category": "general",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "general",
"text": "Improper Handling of Undefined Values",
"title": "CWE-232"
},
{
"category": "general",
"text": "Use of Hard-coded Credentials",
"title": "CWE-798"
},
{
"category": "general",
"text": "Cross-Site Request Forgery (CSRF)",
"title": "CWE-352"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Memory Allocation with Excessive Size Value",
"title": "CWE-789"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-user-del-hQxMpUDj"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-file-uplpd-rHZG9UfC"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL"
}
],
"title": "Kwetsbaarheden verholpen in Cisco IOS XE Software",
"tracking": {
"current_release_date": "2025-05-08T08:43:57.415709Z",
"generator": {
"date": "2025-02-25T15:15:00Z",
"engine": {
"name": "V.A.",
"version": "1.0"
}
},
"id": "NCSC-2025-0146",
"initial_release_date": "2025-05-08T08:43:57.415709Z",
"revision_history": [
{
"date": "2025-05-08T08:43:57.415709Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:cisco/16.1.3",
"product": {
"name": "vers:cisco/16.1.3",
"product_id": "CSAFPID-2714930"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.10.3",
"product": {
"name": "vers:cisco/16.10.3",
"product_id": "CSAFPID-2715313"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.11.2",
"product": {
"name": "vers:cisco/16.11.2",
"product_id": "CSAFPID-2715043"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.12.9",
"product": {
"name": "vers:cisco/16.12.9",
"product_id": "CSAFPID-2715520"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.10bs",
"product": {
"name": "vers:cisco/3.16.10bs",
"product_id": "CSAFPID-2715459"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.10s",
"product": {
"name": "vers:cisco/3.16.10s",
"product_id": "CSAFPID-2715039"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.2.2",
"product": {
"name": "vers:cisco/16.2.2",
"product_id": "CSAFPID-2714932"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.3.11",
"product": {
"name": "vers:cisco/16.3.11",
"product_id": "CSAFPID-2715445"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.4.3",
"product": {
"name": "vers:cisco/16.4.3",
"product_id": "CSAFPID-2715031"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.5.3",
"product": {
"name": "vers:cisco/16.5.3",
"product_id": "CSAFPID-2715164"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.6.10",
"product": {
"name": "vers:cisco/16.6.10",
"product_id": "CSAFPID-2715478"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.7bs",
"product": {
"name": "vers:cisco/3.16.7bs",
"product_id": "CSAFPID-2715170"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.7s",
"product": {
"name": "vers:cisco/3.16.7s",
"product_id": "CSAFPID-2715017"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.8.3",
"product": {
"name": "vers:cisco/16.8.3",
"product_id": "CSAFPID-2714865"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.9s",
"product": {
"name": "vers:cisco/3.16.9s",
"product_id": "CSAFPID-2714842"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.10.9s",
"product": {
"name": "vers:cisco/3.10.9s",
"product_id": "CSAFPID-2714989"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.11.9e",
"product": {
"name": "vers:cisco/3.11.9e",
"product_id": "CSAFPID-2715536"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.12.4s",
"product": {
"name": "vers:cisco/3.12.4s",
"product_id": "CSAFPID-2714784"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.13.9s",
"product": {
"name": "vers:cisco/3.13.9s",
"product_id": "CSAFPID-2715032"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.14.4s",
"product": {
"name": "vers:cisco/3.14.4s",
"product_id": "CSAFPID-2714746"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.15.4s",
"product": {
"name": "vers:cisco/3.15.4s",
"product_id": "CSAFPID-2714941"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.2as",
"product": {
"name": "vers:cisco/3.16.2as",
"product_id": "CSAFPID-2714791"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.2bs",
"product": {
"name": "vers:cisco/3.16.2bs",
"product_id": "CSAFPID-2714942"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.2s",
"product": {
"name": "vers:cisco/3.16.2s",
"product_id": "CSAFPID-2714788"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.3as",
"product": {
"name": "vers:cisco/3.16.3as",
"product_id": "CSAFPID-2714943"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.3s",
"product": {
"name": "vers:cisco/3.16.3s",
"product_id": "CSAFPID-2714798"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4s",
"product": {
"name": "vers:cisco/3.16.4s",
"product_id": "CSAFPID-2714944"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4gs",
"product": {
"name": "vers:cisco/3.16.4gs",
"product_id": "CSAFPID-2714974"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4es",
"product": {
"name": "vers:cisco/3.16.4es",
"product_id": "CSAFPID-2714985"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4ds",
"product": {
"name": "vers:cisco/3.16.4ds",
"product_id": "CSAFPID-2714983"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4cs",
"product": {
"name": "vers:cisco/3.16.4cs",
"product_id": "CSAFPID-2714978"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4bs",
"product": {
"name": "vers:cisco/3.16.4bs",
"product_id": "CSAFPID-2714971"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4as",
"product": {
"name": "vers:cisco/3.16.4as",
"product_id": "CSAFPID-2714967"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.5as",
"product": {
"name": "vers:cisco/3.16.5as",
"product_id": "CSAFPID-2714992"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.5bs",
"product": {
"name": "vers:cisco/3.16.5bs",
"product_id": "CSAFPID-2714996"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.5s",
"product": {
"name": "vers:cisco/3.16.5s",
"product_id": "CSAFPID-2714975"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.6bs",
"product": {
"name": "vers:cisco/3.16.6bs",
"product_id": "CSAFPID-2715025"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.6s",
"product": {
"name": "vers:cisco/3.16.6s",
"product_id": "CSAFPID-2714987"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.7as",
"product": {
"name": "vers:cisco/3.16.7as",
"product_id": "CSAFPID-2715168"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.8s",
"product": {
"name": "vers:cisco/3.16.8s",
"product_id": "CSAFPID-2715178"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.1as",
"product": {
"name": "vers:cisco/3.16.1as",
"product_id": "CSAFPID-2714787"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.1s",
"product": {
"name": "vers:cisco/3.16.1s",
"product_id": "CSAFPID-2714773"
}
}
],
"category": "product_name",
"name": "Cisco IOS XE Software"
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-20137",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20137",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20137.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20137"
},
{
"cve": "CVE-2025-20140",
"cwe": {
"id": "CWE-789",
"name": "Memory Allocation with Excessive Size Value"
},
"notes": [
{
"category": "other",
"text": "Memory Allocation with Excessive Size Value",
"title": "CWE-789"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20140",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20140.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20140"
},
{
"cve": "CVE-2025-20154",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20154",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20154.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20154"
},
{
"cve": "CVE-2025-20162",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20162",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20162.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20162"
},
{
"cve": "CVE-2025-20181",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20181",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20181.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20181"
},
{
"cve": "CVE-2025-20182",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20182",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20182.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20182"
},
{
"cve": "CVE-2025-20186",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20186",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20186.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20186"
},
{
"cve": "CVE-2025-20188",
"cwe": {
"id": "CWE-798",
"name": "Use of Hard-coded Credentials"
},
"notes": [
{
"category": "other",
"text": "Use of Hard-coded Credentials",
"title": "CWE-798"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20188",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20188.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20188"
},
{
"cve": "CVE-2025-20189",
"cwe": {
"id": "CWE-762",
"name": "Mismatched Memory Management Routines"
},
"notes": [
{
"category": "other",
"text": "Mismatched Memory Management Routines",
"title": "CWE-762"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20189",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20189.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20189"
},
{
"cve": "CVE-2025-20190",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20190",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20190.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20190"
},
{
"cve": "CVE-2025-20192",
"cwe": {
"id": "CWE-232",
"name": "Improper Handling of Undefined Values"
},
"notes": [
{
"category": "other",
"text": "Improper Handling of Undefined Values",
"title": "CWE-232"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20192",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20192.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20192"
},
{
"cve": "CVE-2025-20194",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "other",
"text": "Cross-Site Request Forgery (CSRF)",
"title": "CWE-352"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20194",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20194.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20194"
},
{
"cve": "CVE-2025-20202",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"notes": [
{
"category": "other",
"text": "Buffer Access with Incorrect Length Value",
"title": "CWE-805"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20202",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20202.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20202"
}
]
}
WID-SEC-W-2025-0979
Vulnerability from csaf_certbund - Published: 2025-05-07 22:00 - Updated: 2025-05-07 22:00Summary
Cisco IOS XE Software: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.
Angriff: Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco IOS XE Software ausnutzen, um Dateien zu manipulieren, erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen und vertrauliche Informationen preiszugeben.
Betroffene Betriebssysteme: - CISCO Appliance
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
References
7 references
| URL | Category |
|---|---|
| https://wid.cert-bund.de/.well-known/csaf/white/2… | self |
| https://wid.cert-bund.de/portal/wid/securityadvis… | self |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das f\u00fcr Cisco Ger\u00e4te wie z. B. Router und Switches eingesetzt wird.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco IOS XE Software ausnutzen, um Dateien zu manipulieren, erh\u00f6hte Rechte zu erlangen, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und vertrauliche Informationen preiszugeben.",
"title": "Angriff"
},
{
"category": "general",
"text": "- CISCO Appliance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-0979 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0979.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-0979 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0979"
},
{
"category": "external",
"summary": "Cisco Security Advisory cisco-sa-iosxe-privesc-su7scvdp vom 2025-05-07",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-privesc-su7scvdp"
},
{
"category": "external",
"summary": "Cisco Security Advisory cisco-sa-bootstrap-KfgxYgdh vom 2025-05-07",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bootstrap-KfgxYgdh"
},
{
"category": "external",
"summary": "Cisco Security Advisory cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks vom 2025-05-07",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
},
{
"category": "external",
"summary": "Cisco Security Advisory cisco-sa-iosxe-ikev1-dos-XHk3HzFC vom 2025-05-07",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
},
{
"category": "external",
"summary": "Cisco Security Advisory cisco-sa-netconf-nacm-bypass-TGZV9pmQ vom 2025-05-07",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-netconf-nacm-bypass-TGZV9pmQ"
}
],
"source_lang": "en-US",
"title": "Cisco IOS XE Software: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-05-07T22:00:00.000+00:00",
"generator": {
"date": "2025-05-08T10:59:15.841+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.12"
}
},
"id": "WID-SEC-W-2025-0979",
"initial_release_date": "2025-05-07T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-05-07T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "Software",
"product": {
"name": "Cisco IOS XE Software",
"product_id": "T043497",
"product_identification_helper": {
"cpe": "cpe:/o:cisco:ios_xe:software"
}
}
}
],
"category": "product_name",
"name": "IOS XE"
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-20155",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20155"
},
{
"cve": "CVE-2025-20162",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20162"
},
{
"cve": "CVE-2025-20192",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20192"
},
{
"cve": "CVE-2025-20214",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20214"
},
{
"cve": "CVE-2025-20197",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20197"
},
{
"cve": "CVE-2025-20198",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20198"
},
{
"cve": "CVE-2025-20199",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20199"
},
{
"cve": "CVE-2025-20200",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20200"
},
{
"cve": "CVE-2025-20201",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20201"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…