Vulnerability-Lookup

CVE-2025-20192 (GCVE-0-2025-20192)

Vulnerability from cvelistv5 – Published: 2025-05-07 17:36 – Updated: 2025-05-07 19:43

Summary

A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability. This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.

Severity

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-232 - Improper Handling of Undefined Values

Assigner

cisco

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

1 product

Vendor	Product	Version
Cisco	Cisco IOS XE Software	Affected: 3.13.0S Affected: 3.13.1S Affected: 3.13.2S Affected: 3.13.3S Affected: 3.13.4S Affected: 3.13.5S Affected: 3.13.6S Affected: 3.13.7S Affected: 3.13.6aS Affected: 3.13.8S Affected: 3.13.9S Affected: 3.13.10S Affected: 3.14.0S Affected: 3.14.1S Affected: 3.14.2S Affected: 3.14.3S Affected: 3.14.4S Affected: 3.15.0S Affected: 3.15.1S Affected: 3.15.2S Affected: 3.15.1cS Affected: 3.15.3S Affected: 3.15.4S Affected: 3.16.0S Affected: 3.16.1aS Affected: 3.16.2S Affected: 3.16.0cS Affected: 3.16.3S Affected: 3.16.4aS Affected: 3.16.4bS Affected: 3.16.5S Affected: 3.16.4dS Affected: 3.16.6S Affected: 3.16.7S Affected: 3.16.6bS Affected: 3.16.7aS Affected: 3.16.7bS Affected: 3.16.8S Affected: 3.16.9S Affected: 3.16.10S Affected: 3.17.0S Affected: 3.17.1S Affected: 3.17.2S Affected: 3.17.3S Affected: 3.17.4S Affected: 16.2.1 Affected: 16.2.2 Affected: 16.3.1 Affected: 16.3.2 Affected: 16.3.3 Affected: 16.3.1a Affected: 16.3.4 Affected: 16.3.5 Affected: 16.3.6 Affected: 16.3.7 Affected: 16.3.8 Affected: 16.3.9 Affected: 16.3.10 Affected: 16.3.11 Affected: 16.4.1 Affected: 16.4.2 Affected: 16.4.3 Affected: 16.5.1 Affected: 16.5.1b Affected: 16.5.2 Affected: 16.5.3 Affected: 3.18.2aSP Affected: 16.6.1 Affected: 16.6.2 Affected: 16.6.3 Affected: 16.6.4 Affected: 16.6.5 Affected: 16.6.6 Affected: 16.6.7 Affected: 16.6.8 Affected: 16.6.9 Affected: 16.6.10 Affected: 16.7.1 Affected: 16.7.2 Affected: 16.7.3 Affected: 16.8.1 Affected: 16.8.1s Affected: 16.8.2 Affected: 16.8.3 Affected: 16.9.1 Affected: 16.9.2 Affected: 16.9.1s Affected: 16.9.3 Affected: 16.9.4 Affected: 16.9.5 Affected: 16.9.6 Affected: 16.9.7 Affected: 16.9.8 Affected: 16.10.1 Affected: 16.10.1a Affected: 16.10.1b Affected: 16.10.1s Affected: 16.10.1e Affected: 16.10.2 Affected: 16.10.3 Affected: 16.11.1 Affected: 16.11.1a Affected: 16.11.2 Affected: 16.11.1s Affected: 16.12.1 Affected: 16.12.1s Affected: 16.12.1a Affected: 16.12.1c Affected: 16.12.2 Affected: 16.12.3 Affected: 16.12.8 Affected: 16.12.2s Affected: 16.12.4 Affected: 16.12.3s Affected: 16.12.5 Affected: 16.12.6 Affected: 16.12.7 Affected: 17.1.1 Affected: 17.1.1s Affected: 17.1.1t Affected: 17.1.3 Affected: 17.2.1 Affected: 17.2.1r Affected: 17.2.1v Affected: 17.2.2 Affected: 17.2.3 Affected: 17.3.1 Affected: 17.3.2 Affected: 17.3.3 Affected: 17.3.1a Affected: 17.3.4 Affected: 17.3.5 Affected: 17.3.4a Affected: 17.3.6 Affected: 17.3.7 Affected: 17.3.8 Affected: 17.3.8a Affected: 17.4.1 Affected: 17.4.2 Affected: 17.4.1a Affected: 17.4.1b Affected: 17.5.1 Affected: 17.5.1a Affected: 17.6.1 Affected: 17.6.2 Affected: 17.6.1a Affected: 17.6.3 Affected: 17.6.1y Affected: 17.6.3a Affected: 17.6.4 Affected: 17.6.5 Affected: 17.6.6 Affected: 17.6.6a Affected: 17.6.5a Affected: 17.6.7 Affected: 17.6.8 Affected: 17.6.8a Affected: 17.7.1 Affected: 17.7.1a Affected: 17.7.2 Affected: 17.10.1 Affected: 17.10.1a Affected: 17.8.1 Affected: 17.8.1a Affected: 17.9.1 Affected: 17.9.2 Affected: 17.9.1a Affected: 17.9.3 Affected: 17.9.2a Affected: 17.9.3a Affected: 17.9.4 Affected: 17.9.5 Affected: 17.9.4a Affected: 17.9.5a Affected: 17.9.5b Affected: 17.9.5e Affected: 17.9.5f Affected: 17.11.1 Affected: 17.11.1a Affected: 17.12.1 Affected: 17.12.1a Affected: 17.12.2 Affected: 17.12.3 Affected: 17.12.2a Affected: 17.12.3a Affected: 17.13.1 Affected: 17.13.1a Affected: 17.14.1 Affected: 17.14.1a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-20192",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-07T18:56:00.580521Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-07T19:43:26.883Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco IOS XE Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.13.0S"
            },
            {
              "status": "affected",
              "version": "3.13.1S"
            },
            {
              "status": "affected",
              "version": "3.13.2S"
            },
            {
              "status": "affected",
              "version": "3.13.3S"
            },
            {
              "status": "affected",
              "version": "3.13.4S"
            },
            {
              "status": "affected",
              "version": "3.13.5S"
            },
            {
              "status": "affected",
              "version": "3.13.6S"
            },
            {
              "status": "affected",
              "version": "3.13.7S"
            },
            {
              "status": "affected",
              "version": "3.13.6aS"
            },
            {
              "status": "affected",
              "version": "3.13.8S"
            },
            {
              "status": "affected",
              "version": "3.13.9S"
            },
            {
              "status": "affected",
              "version": "3.13.10S"
            },
            {
              "status": "affected",
              "version": "3.14.0S"
            },
            {
              "status": "affected",
              "version": "3.14.1S"
            },
            {
              "status": "affected",
              "version": "3.14.2S"
            },
            {
              "status": "affected",
              "version": "3.14.3S"
            },
            {
              "status": "affected",
              "version": "3.14.4S"
            },
            {
              "status": "affected",
              "version": "3.15.0S"
            },
            {
              "status": "affected",
              "version": "3.15.1S"
            },
            {
              "status": "affected",
              "version": "3.15.2S"
            },
            {
              "status": "affected",
              "version": "3.15.1cS"
            },
            {
              "status": "affected",
              "version": "3.15.3S"
            },
            {
              "status": "affected",
              "version": "3.15.4S"
            },
            {
              "status": "affected",
              "version": "3.16.0S"
            },
            {
              "status": "affected",
              "version": "3.16.1aS"
            },
            {
              "status": "affected",
              "version": "3.16.2S"
            },
            {
              "status": "affected",
              "version": "3.16.0cS"
            },
            {
              "status": "affected",
              "version": "3.16.3S"
            },
            {
              "status": "affected",
              "version": "3.16.4aS"
            },
            {
              "status": "affected",
              "version": "3.16.4bS"
            },
            {
              "status": "affected",
              "version": "3.16.5S"
            },
            {
              "status": "affected",
              "version": "3.16.4dS"
            },
            {
              "status": "affected",
              "version": "3.16.6S"
            },
            {
              "status": "affected",
              "version": "3.16.7S"
            },
            {
              "status": "affected",
              "version": "3.16.6bS"
            },
            {
              "status": "affected",
              "version": "3.16.7aS"
            },
            {
              "status": "affected",
              "version": "3.16.7bS"
            },
            {
              "status": "affected",
              "version": "3.16.8S"
            },
            {
              "status": "affected",
              "version": "3.16.9S"
            },
            {
              "status": "affected",
              "version": "3.16.10S"
            },
            {
              "status": "affected",
              "version": "3.17.0S"
            },
            {
              "status": "affected",
              "version": "3.17.1S"
            },
            {
              "status": "affected",
              "version": "3.17.2S"
            },
            {
              "status": "affected",
              "version": "3.17.3S"
            },
            {
              "status": "affected",
              "version": "3.17.4S"
            },
            {
              "status": "affected",
              "version": "16.2.1"
            },
            {
              "status": "affected",
              "version": "16.2.2"
            },
            {
              "status": "affected",
              "version": "16.3.1"
            },
            {
              "status": "affected",
              "version": "16.3.2"
            },
            {
              "status": "affected",
              "version": "16.3.3"
            },
            {
              "status": "affected",
              "version": "16.3.1a"
            },
            {
              "status": "affected",
              "version": "16.3.4"
            },
            {
              "status": "affected",
              "version": "16.3.5"
            },
            {
              "status": "affected",
              "version": "16.3.6"
            },
            {
              "status": "affected",
              "version": "16.3.7"
            },
            {
              "status": "affected",
              "version": "16.3.8"
            },
            {
              "status": "affected",
              "version": "16.3.9"
            },
            {
              "status": "affected",
              "version": "16.3.10"
            },
            {
              "status": "affected",
              "version": "16.3.11"
            },
            {
              "status": "affected",
              "version": "16.4.1"
            },
            {
              "status": "affected",
              "version": "16.4.2"
            },
            {
              "status": "affected",
              "version": "16.4.3"
            },
            {
              "status": "affected",
              "version": "16.5.1"
            },
            {
              "status": "affected",
              "version": "16.5.1b"
            },
            {
              "status": "affected",
              "version": "16.5.2"
            },
            {
              "status": "affected",
              "version": "16.5.3"
            },
            {
              "status": "affected",
              "version": "3.18.2aSP"
            },
            {
              "status": "affected",
              "version": "16.6.1"
            },
            {
              "status": "affected",
              "version": "16.6.2"
            },
            {
              "status": "affected",
              "version": "16.6.3"
            },
            {
              "status": "affected",
              "version": "16.6.4"
            },
            {
              "status": "affected",
              "version": "16.6.5"
            },
            {
              "status": "affected",
              "version": "16.6.6"
            },
            {
              "status": "affected",
              "version": "16.6.7"
            },
            {
              "status": "affected",
              "version": "16.6.8"
            },
            {
              "status": "affected",
              "version": "16.6.9"
            },
            {
              "status": "affected",
              "version": "16.6.10"
            },
            {
              "status": "affected",
              "version": "16.7.1"
            },
            {
              "status": "affected",
              "version": "16.7.2"
            },
            {
              "status": "affected",
              "version": "16.7.3"
            },
            {
              "status": "affected",
              "version": "16.8.1"
            },
            {
              "status": "affected",
              "version": "16.8.1s"
            },
            {
              "status": "affected",
              "version": "16.8.2"
            },
            {
              "status": "affected",
              "version": "16.8.3"
            },
            {
              "status": "affected",
              "version": "16.9.1"
            },
            {
              "status": "affected",
              "version": "16.9.2"
            },
            {
              "status": "affected",
              "version": "16.9.1s"
            },
            {
              "status": "affected",
              "version": "16.9.3"
            },
            {
              "status": "affected",
              "version": "16.9.4"
            },
            {
              "status": "affected",
              "version": "16.9.5"
            },
            {
              "status": "affected",
              "version": "16.9.6"
            },
            {
              "status": "affected",
              "version": "16.9.7"
            },
            {
              "status": "affected",
              "version": "16.9.8"
            },
            {
              "status": "affected",
              "version": "16.10.1"
            },
            {
              "status": "affected",
              "version": "16.10.1a"
            },
            {
              "status": "affected",
              "version": "16.10.1b"
            },
            {
              "status": "affected",
              "version": "16.10.1s"
            },
            {
              "status": "affected",
              "version": "16.10.1e"
            },
            {
              "status": "affected",
              "version": "16.10.2"
            },
            {
              "status": "affected",
              "version": "16.10.3"
            },
            {
              "status": "affected",
              "version": "16.11.1"
            },
            {
              "status": "affected",
              "version": "16.11.1a"
            },
            {
              "status": "affected",
              "version": "16.11.2"
            },
            {
              "status": "affected",
              "version": "16.11.1s"
            },
            {
              "status": "affected",
              "version": "16.12.1"
            },
            {
              "status": "affected",
              "version": "16.12.1s"
            },
            {
              "status": "affected",
              "version": "16.12.1a"
            },
            {
              "status": "affected",
              "version": "16.12.1c"
            },
            {
              "status": "affected",
              "version": "16.12.2"
            },
            {
              "status": "affected",
              "version": "16.12.3"
            },
            {
              "status": "affected",
              "version": "16.12.8"
            },
            {
              "status": "affected",
              "version": "16.12.2s"
            },
            {
              "status": "affected",
              "version": "16.12.4"
            },
            {
              "status": "affected",
              "version": "16.12.3s"
            },
            {
              "status": "affected",
              "version": "16.12.5"
            },
            {
              "status": "affected",
              "version": "16.12.6"
            },
            {
              "status": "affected",
              "version": "16.12.7"
            },
            {
              "status": "affected",
              "version": "17.1.1"
            },
            {
              "status": "affected",
              "version": "17.1.1s"
            },
            {
              "status": "affected",
              "version": "17.1.1t"
            },
            {
              "status": "affected",
              "version": "17.1.3"
            },
            {
              "status": "affected",
              "version": "17.2.1"
            },
            {
              "status": "affected",
              "version": "17.2.1r"
            },
            {
              "status": "affected",
              "version": "17.2.1v"
            },
            {
              "status": "affected",
              "version": "17.2.2"
            },
            {
              "status": "affected",
              "version": "17.2.3"
            },
            {
              "status": "affected",
              "version": "17.3.1"
            },
            {
              "status": "affected",
              "version": "17.3.2"
            },
            {
              "status": "affected",
              "version": "17.3.3"
            },
            {
              "status": "affected",
              "version": "17.3.1a"
            },
            {
              "status": "affected",
              "version": "17.3.4"
            },
            {
              "status": "affected",
              "version": "17.3.5"
            },
            {
              "status": "affected",
              "version": "17.3.4a"
            },
            {
              "status": "affected",
              "version": "17.3.6"
            },
            {
              "status": "affected",
              "version": "17.3.7"
            },
            {
              "status": "affected",
              "version": "17.3.8"
            },
            {
              "status": "affected",
              "version": "17.3.8a"
            },
            {
              "status": "affected",
              "version": "17.4.1"
            },
            {
              "status": "affected",
              "version": "17.4.2"
            },
            {
              "status": "affected",
              "version": "17.4.1a"
            },
            {
              "status": "affected",
              "version": "17.4.1b"
            },
            {
              "status": "affected",
              "version": "17.5.1"
            },
            {
              "status": "affected",
              "version": "17.5.1a"
            },
            {
              "status": "affected",
              "version": "17.6.1"
            },
            {
              "status": "affected",
              "version": "17.6.2"
            },
            {
              "status": "affected",
              "version": "17.6.1a"
            },
            {
              "status": "affected",
              "version": "17.6.3"
            },
            {
              "status": "affected",
              "version": "17.6.1y"
            },
            {
              "status": "affected",
              "version": "17.6.3a"
            },
            {
              "status": "affected",
              "version": "17.6.4"
            },
            {
              "status": "affected",
              "version": "17.6.5"
            },
            {
              "status": "affected",
              "version": "17.6.6"
            },
            {
              "status": "affected",
              "version": "17.6.6a"
            },
            {
              "status": "affected",
              "version": "17.6.5a"
            },
            {
              "status": "affected",
              "version": "17.6.7"
            },
            {
              "status": "affected",
              "version": "17.6.8"
            },
            {
              "status": "affected",
              "version": "17.6.8a"
            },
            {
              "status": "affected",
              "version": "17.7.1"
            },
            {
              "status": "affected",
              "version": "17.7.1a"
            },
            {
              "status": "affected",
              "version": "17.7.2"
            },
            {
              "status": "affected",
              "version": "17.10.1"
            },
            {
              "status": "affected",
              "version": "17.10.1a"
            },
            {
              "status": "affected",
              "version": "17.8.1"
            },
            {
              "status": "affected",
              "version": "17.8.1a"
            },
            {
              "status": "affected",
              "version": "17.9.1"
            },
            {
              "status": "affected",
              "version": "17.9.2"
            },
            {
              "status": "affected",
              "version": "17.9.1a"
            },
            {
              "status": "affected",
              "version": "17.9.3"
            },
            {
              "status": "affected",
              "version": "17.9.2a"
            },
            {
              "status": "affected",
              "version": "17.9.3a"
            },
            {
              "status": "affected",
              "version": "17.9.4"
            },
            {
              "status": "affected",
              "version": "17.9.5"
            },
            {
              "status": "affected",
              "version": "17.9.4a"
            },
            {
              "status": "affected",
              "version": "17.9.5a"
            },
            {
              "status": "affected",
              "version": "17.9.5b"
            },
            {
              "status": "affected",
              "version": "17.9.5e"
            },
            {
              "status": "affected",
              "version": "17.9.5f"
            },
            {
              "status": "affected",
              "version": "17.11.1"
            },
            {
              "status": "affected",
              "version": "17.11.1a"
            },
            {
              "status": "affected",
              "version": "17.12.1"
            },
            {
              "status": "affected",
              "version": "17.12.1a"
            },
            {
              "status": "affected",
              "version": "17.12.2"
            },
            {
              "status": "affected",
              "version": "17.12.3"
            },
            {
              "status": "affected",
              "version": "17.12.2a"
            },
            {
              "status": "affected",
              "version": "17.12.3a"
            },
            {
              "status": "affected",
              "version": "17.13.1"
            },
            {
              "status": "affected",
              "version": "17.13.1a"
            },
            {
              "status": "affected",
              "version": "17.14.1"
            },
            {
              "status": "affected",
              "version": "17.14.1a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.\r\n\r This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-232",
              "description": "Improper Handling of Undefined Values",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T17:36:16.366Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
        }
      ],
      "source": {
        "advisory": "cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
        "defects": [
          "CSCwi26594"
        ],
        "discovery": "INTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2025-20192",
    "datePublished": "2025-05-07T17:36:16.366Z",
    "dateReserved": "2024-10-10T19:15:13.226Z",
    "dateUpdated": "2025-05-07T19:43:26.883Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-20192",
      "date": "2026-07-05",
      "epss": "0.00365",
      "percentile": "0.28544"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-20192\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2025-05-07T18:15:39.280\",\"lastModified\":\"2026-06-17T08:41:01.700\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.\\r\\n\\r This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la implementaci\u00f3n de Intercambio de Claves por Internet versi\u00f3n 1 (IKEv1) del software Cisco IOS XE podr\u00eda permitir que un atacante remoto autenticado provoque una denegaci\u00f3n de servicio (DoS). El atacante debe tener credenciales VPN IKEv1 v\u00e1lidas para explotar esta vulnerabilidad. Esta vulnerabilidad se debe a una validaci\u00f3n incorrecta de los par\u00e1metros de fase 2 de IKEv1 antes de que la solicitud de creaci\u00f3n de la asociaci\u00f3n de seguridad IPsec se transfiera al acelerador criptogr\u00e1fico de hardware de un dispositivo afectado. Un atacante podr\u00eda explotar esta vulnerabilidad enviando mensajes IKEv1 manipulados al dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante provocar la recarga del dispositivo.\"}],\"affected\":[{\"source\":\"psirt@cisco.com\",\"affectedData\":[{\"vendor\":\"Cisco\",\"product\":\"Cisco IOS XE Software\",\"versions\":[{\"version\":\"3.13.0S\",\"status\":\"affected\"},{\"version\":\"3.13.1S\",\"status\":\"affected\"},{\"version\":\"3.13.2S\",\"status\":\"affected\"},{\"version\":\"3.13.3S\",\"status\":\"affected\"},{\"version\":\"3.13.4S\",\"status\":\"affected\"},{\"version\":\"3.13.5S\",\"status\":\"affected\"},{\"version\":\"3.13.6S\",\"status\":\"affected\"},{\"version\":\"3.13.7S\",\"status\":\"affected\"},{\"version\":\"3.13.6aS\",\"status\":\"affected\"},{\"version\":\"3.13.8S\",\"status\":\"affected\"},{\"version\":\"3.13.9S\",\"status\":\"affected\"},{\"version\":\"3.13.10S\",\"status\":\"affected\"},{\"version\":\"3.14.0S\",\"status\":\"affected\"},{\"version\":\"3.14.1S\",\"status\":\"affected\"},{\"version\":\"3.14.2S\",\"status\":\"affected\"},{\"version\":\"3.14.3S\",\"status\":\"affected\"},{\"version\":\"3.14.4S\",\"status\":\"affected\"},{\"version\":\"3.15.0S\",\"status\":\"affected\"},{\"version\":\"3.15.1S\",\"status\":\"affected\"},{\"version\":\"3.15.2S\",\"status\":\"affected\"},{\"version\":\"3.15.1cS\",\"status\":\"affected\"},{\"version\":\"3.15.3S\",\"status\":\"affected\"},{\"version\":\"3.15.4S\",\"status\":\"affected\"},{\"version\":\"3.16.0S\",\"status\":\"affected\"},{\"version\":\"3.16.1aS\",\"status\":\"affected\"},{\"version\":\"3.16.2S\",\"status\":\"affected\"},{\"version\":\"3.16.0cS\",\"status\":\"affected\"},{\"version\":\"3.16.3S\",\"status\":\"affected\"},{\"version\":\"3.16.4aS\",\"status\":\"affected\"},{\"version\":\"3.16.4bS\",\"status\":\"affected\"},{\"version\":\"3.16.5S\",\"status\":\"affected\"},{\"version\":\"3.16.4dS\",\"status\":\"affected\"},{\"version\":\"3.16.6S\",\"status\":\"affected\"},{\"version\":\"3.16.7S\",\"status\":\"affected\"},{\"version\":\"3.16.6bS\",\"status\":\"affected\"},{\"version\":\"3.16.7aS\",\"status\":\"affected\"},{\"version\":\"3.16.7bS\",\"status\":\"affected\"},{\"version\":\"3.16.8S\",\"status\":\"affected\"},{\"version\":\"3.16.9S\",\"status\":\"affected\"},{\"version\":\"3.16.10S\",\"status\":\"affected\"},{\"version\":\"3.17.0S\",\"status\":\"affected\"},{\"version\":\"3.17.1S\",\"status\":\"affected\"},{\"version\":\"3.17.2S\",\"status\":\"affected\"},{\"version\":\"3.17.3S\",\"status\":\"affected\"},{\"version\":\"3.17.4S\",\"status\":\"affected\"},{\"version\":\"16.2.1\",\"status\":\"affected\"},{\"version\":\"16.2.2\",\"status\":\"affected\"},{\"version\":\"16.3.1\",\"status\":\"affected\"},{\"version\":\"16.3.2\",\"status\":\"affected\"},{\"version\":\"16.3.3\",\"status\":\"affected\"},{\"version\":\"16.3.1a\",\"status\":\"affected\"},{\"version\":\"16.3.4\",\"status\":\"affected\"},{\"version\":\"16.3.5\",\"status\":\"affected\"},{\"version\":\"16.3.6\",\"status\":\"affected\"},{\"version\":\"16.3.7\",\"status\":\"affected\"},{\"version\":\"16.3.8\",\"status\":\"affected\"},{\"version\":\"16.3.9\",\"status\":\"affected\"},{\"version\":\"16.3.10\",\"status\":\"affected\"},{\"version\":\"16.3.11\",\"status\":\"affected\"},{\"version\":\"16.4.1\",\"status\":\"affected\"},{\"version\":\"16.4.2\",\"status\":\"affected\"},{\"version\":\"16.4.3\",\"status\":\"affected\"},{\"version\":\"16.5.1\",\"status\":\"affected\"},{\"version\":\"16.5.1b\",\"status\":\"affected\"},{\"version\":\"16.5.2\",\"status\":\"affected\"},{\"version\":\"16.5.3\",\"status\":\"affected\"},{\"version\":\"3.18.2aSP\",\"status\":\"affected\"},{\"version\":\"16.6.1\",\"status\":\"affected\"},{\"version\":\"16.6.2\",\"status\":\"affected\"},{\"version\":\"16.6.3\",\"status\":\"affected\"},{\"version\":\"16.6.4\",\"status\":\"affected\"},{\"version\":\"16.6.5\",\"status\":\"affected\"},{\"version\":\"16.6.6\",\"status\":\"affected\"},{\"version\":\"16.6.7\",\"status\":\"affected\"},{\"version\":\"16.6.8\",\"status\":\"affected\"},{\"version\":\"16.6.9\",\"status\":\"affected\"},{\"version\":\"16.6.10\",\"status\":\"affected\"},{\"version\":\"16.7.1\",\"status\":\"affected\"},{\"version\":\"16.7.2\",\"status\":\"affected\"},{\"version\":\"16.7.3\",\"status\":\"affected\"},{\"version\":\"16.8.1\",\"status\":\"affected\"},{\"version\":\"16.8.1s\",\"status\":\"affected\"},{\"version\":\"16.8.2\",\"status\":\"affected\"},{\"version\":\"16.8.3\",\"status\":\"affected\"},{\"version\":\"16.9.1\",\"status\":\"affected\"},{\"version\":\"16.9.2\",\"status\":\"affected\"},{\"version\":\"16.9.1s\",\"status\":\"affected\"},{\"version\":\"16.9.3\",\"status\":\"affected\"},{\"version\":\"16.9.4\",\"status\":\"affected\"},{\"version\":\"16.9.5\",\"status\":\"affected\"},{\"version\":\"16.9.6\",\"status\":\"affected\"},{\"version\":\"16.9.7\",\"status\":\"affected\"},{\"version\":\"16.9.8\",\"status\":\"affected\"},{\"version\":\"16.10.1\",\"status\":\"affected\"},{\"version\":\"16.10.1a\",\"status\":\"affected\"},{\"version\":\"16.10.1b\",\"status\":\"affected\"},{\"version\":\"16.10.1s\",\"status\":\"affected\"},{\"version\":\"16.10.1e\",\"status\":\"affected\"},{\"version\":\"16.10.2\",\"status\":\"affected\"},{\"version\":\"16.10.3\",\"status\":\"affected\"},{\"version\":\"16.11.1\",\"status\":\"affected\"},{\"version\":\"16.11.1a\",\"status\":\"affected\"},{\"version\":\"16.11.2\",\"status\":\"affected\"},{\"version\":\"16.11.1s\",\"status\":\"affected\"},{\"version\":\"16.12.1\",\"status\":\"affected\"},{\"version\":\"16.12.1s\",\"status\":\"affected\"},{\"version\":\"16.12.1a\",\"status\":\"affected\"},{\"version\":\"16.12.1c\",\"status\":\"affected\"},{\"version\":\"16.12.2\",\"status\":\"affected\"},{\"version\":\"16.12.3\",\"status\":\"affected\"},{\"version\":\"16.12.8\",\"status\":\"affected\"},{\"version\":\"16.12.2s\",\"status\":\"affected\"},{\"version\":\"16.12.4\",\"status\":\"affected\"},{\"version\":\"16.12.3s\",\"status\":\"affected\"},{\"version\":\"16.12.5\",\"status\":\"affected\"},{\"version\":\"16.12.6\",\"status\":\"affected\"},{\"version\":\"16.12.7\",\"status\":\"affected\"},{\"version\":\"17.1.1\",\"status\":\"affected\"},{\"version\":\"17.1.1s\",\"status\":\"affected\"},{\"version\":\"17.1.1t\",\"status\":\"affected\"},{\"version\":\"17.1.3\",\"status\":\"affected\"},{\"version\":\"17.2.1\",\"status\":\"affected\"},{\"version\":\"17.2.1r\",\"status\":\"affected\"},{\"version\":\"17.2.1v\",\"status\":\"affected\"},{\"version\":\"17.2.2\",\"status\":\"affected\"},{\"version\":\"17.2.3\",\"status\":\"affected\"},{\"version\":\"17.3.1\",\"status\":\"affected\"},{\"version\":\"17.3.2\",\"status\":\"affected\"},{\"version\":\"17.3.3\",\"status\":\"affected\"},{\"version\":\"17.3.1a\",\"status\":\"affected\"},{\"version\":\"17.3.4\",\"status\":\"affected\"},{\"version\":\"17.3.5\",\"status\":\"affected\"},{\"version\":\"17.3.4a\",\"status\":\"affected\"},{\"version\":\"17.3.6\",\"status\":\"affected\"},{\"version\":\"17.3.7\",\"status\":\"affected\"},{\"version\":\"17.3.8\",\"status\":\"affected\"},{\"version\":\"17.3.8a\",\"status\":\"affected\"},{\"version\":\"17.4.1\",\"status\":\"affected\"},{\"version\":\"17.4.2\",\"status\":\"affected\"},{\"version\":\"17.4.1a\",\"status\":\"affected\"},{\"version\":\"17.4.1b\",\"status\":\"affected\"},{\"version\":\"17.5.1\",\"status\":\"affected\"},{\"version\":\"17.5.1a\",\"status\":\"affected\"},{\"version\":\"17.6.1\",\"status\":\"affected\"},{\"version\":\"17.6.2\",\"status\":\"affected\"},{\"version\":\"17.6.1a\",\"status\":\"affected\"},{\"version\":\"17.6.3\",\"status\":\"affected\"},{\"version\":\"17.6.1y\",\"status\":\"affected\"},{\"version\":\"17.6.3a\",\"status\":\"affected\"},{\"version\":\"17.6.4\",\"status\":\"affected\"},{\"version\":\"17.6.5\",\"status\":\"affected\"},{\"version\":\"17.6.6\",\"status\":\"affected\"},{\"version\":\"17.6.6a\",\"status\":\"affected\"},{\"version\":\"17.6.5a\",\"status\":\"affected\"},{\"version\":\"17.6.7\",\"status\":\"affected\"},{\"version\":\"17.6.8\",\"status\":\"affected\"},{\"version\":\"17.6.8a\",\"status\":\"affected\"},{\"version\":\"17.7.1\",\"status\":\"affected\"},{\"version\":\"17.7.1a\",\"status\":\"affected\"},{\"version\":\"17.7.2\",\"status\":\"affected\"},{\"version\":\"17.10.1\",\"status\":\"affected\"},{\"version\":\"17.10.1a\",\"status\":\"affected\"},{\"version\":\"17.8.1\",\"status\":\"affected\"},{\"version\":\"17.8.1a\",\"status\":\"affected\"},{\"version\":\"17.9.1\",\"status\":\"affected\"},{\"version\":\"17.9.2\",\"status\":\"affected\"},{\"version\":\"17.9.1a\",\"status\":\"affected\"},{\"version\":\"17.9.3\",\"status\":\"affected\"},{\"version\":\"17.9.2a\",\"status\":\"affected\"},{\"version\":\"17.9.3a\",\"status\":\"affected\"},{\"version\":\"17.9.4\",\"status\":\"affected\"},{\"version\":\"17.9.5\",\"status\":\"affected\"},{\"version\":\"17.9.4a\",\"status\":\"affected\"},{\"version\":\"17.9.5a\",\"status\":\"affected\"},{\"version\":\"17.9.5b\",\"status\":\"affected\"},{\"version\":\"17.9.5e\",\"status\":\"affected\"},{\"version\":\"17.9.5f\",\"status\":\"affected\"},{\"version\":\"17.11.1\",\"status\":\"affected\"},{\"version\":\"17.11.1a\",\"status\":\"affected\"},{\"version\":\"17.12.1\",\"status\":\"affected\"},{\"version\":\"17.12.1a\",\"status\":\"affected\"},{\"version\":\"17.12.2\",\"status\":\"affected\"},{\"version\":\"17.12.3\",\"status\":\"affected\"},{\"version\":\"17.12.2a\",\"status\":\"affected\"},{\"version\":\"17.12.3a\",\"status\":\"affected\"},{\"version\":\"17.13.1\",\"status\":\"affected\"},{\"version\":\"17.13.1a\",\"status\":\"affected\"},{\"version\":\"17.14.1\",\"status\":\"affected\"},{\"version\":\"17.14.1a\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H\",\"baseScore\":7.7,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.1,\"impactScore\":4.0}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-05-07T18:56:00.580521Z\",\"id\":\"CVE-2025-20192\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-232\"}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC\",\"source\":\"psirt@cisco.com\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-20192\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-05-07T18:56:00.580521Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-07T18:56:02.812Z\"}}], \"cna\": {\"source\": {\"defects\": [\"CSCwi26594\"], \"advisory\": \"cisco-sa-iosxe-ikev1-dos-XHk3HzFC\", \"discovery\": \"INTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 7.7, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco IOS XE Software\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.13.0S\"}, {\"status\": \"affected\", \"version\": \"3.13.1S\"}, {\"status\": \"affected\", \"version\": \"3.13.2S\"}, {\"status\": \"affected\", \"version\": \"3.13.3S\"}, {\"status\": \"affected\", \"version\": \"3.13.4S\"}, {\"status\": \"affected\", \"version\": \"3.13.5S\"}, {\"status\": \"affected\", \"version\": \"3.13.6S\"}, {\"status\": \"affected\", \"version\": \"3.13.7S\"}, {\"status\": \"affected\", \"version\": \"3.13.6aS\"}, {\"status\": \"affected\", \"version\": \"3.13.8S\"}, {\"status\": \"affected\", \"version\": \"3.13.9S\"}, {\"status\": \"affected\", \"version\": \"3.13.10S\"}, {\"status\": \"affected\", \"version\": \"3.14.0S\"}, {\"status\": \"affected\", \"version\": \"3.14.1S\"}, {\"status\": \"affected\", \"version\": \"3.14.2S\"}, {\"status\": \"affected\", \"version\": \"3.14.3S\"}, {\"status\": \"affected\", \"version\": \"3.14.4S\"}, {\"status\": \"affected\", \"version\": \"3.15.0S\"}, {\"status\": \"affected\", \"version\": \"3.15.1S\"}, {\"status\": \"affected\", \"version\": \"3.15.2S\"}, {\"status\": \"affected\", \"version\": \"3.15.1cS\"}, {\"status\": \"affected\", \"version\": \"3.15.3S\"}, {\"status\": \"affected\", \"version\": \"3.15.4S\"}, {\"status\": \"affected\", \"version\": \"3.16.0S\"}, {\"status\": \"affected\", \"version\": \"3.16.1aS\"}, {\"status\": \"affected\", \"version\": \"3.16.2S\"}, {\"status\": \"affected\", \"version\": \"3.16.0cS\"}, {\"status\": \"affected\", \"version\": \"3.16.3S\"}, {\"status\": \"affected\", \"version\": \"3.16.4aS\"}, {\"status\": \"affected\", \"version\": \"3.16.4bS\"}, {\"status\": \"affected\", \"version\": \"3.16.5S\"}, {\"status\": \"affected\", \"version\": \"3.16.4dS\"}, {\"status\": \"affected\", \"version\": \"3.16.6S\"}, {\"status\": \"affected\", \"version\": \"3.16.7S\"}, {\"status\": \"affected\", \"version\": \"3.16.6bS\"}, {\"status\": \"affected\", \"version\": \"3.16.7aS\"}, {\"status\": \"affected\", \"version\": \"3.16.7bS\"}, {\"status\": \"affected\", \"version\": \"3.16.8S\"}, {\"status\": \"affected\", \"version\": \"3.16.9S\"}, {\"status\": \"affected\", \"version\": \"3.16.10S\"}, {\"status\": \"affected\", \"version\": \"3.17.0S\"}, {\"status\": \"affected\", \"version\": \"3.17.1S\"}, {\"status\": \"affected\", \"version\": \"3.17.2S\"}, {\"status\": \"affected\", \"version\": \"3.17.3S\"}, {\"status\": \"affected\", \"version\": \"3.17.4S\"}, {\"status\": \"affected\", \"version\": \"16.2.1\"}, {\"status\": \"affected\", \"version\": \"16.2.2\"}, {\"status\": \"affected\", \"version\": \"16.3.1\"}, {\"status\": \"affected\", \"version\": \"16.3.2\"}, {\"status\": \"affected\", \"version\": \"16.3.3\"}, {\"status\": \"affected\", \"version\": \"16.3.1a\"}, {\"status\": \"affected\", \"version\": \"16.3.4\"}, {\"status\": \"affected\", \"version\": \"16.3.5\"}, {\"status\": \"affected\", \"version\": \"16.3.6\"}, {\"status\": \"affected\", \"version\": \"16.3.7\"}, {\"status\": \"affected\", \"version\": \"16.3.8\"}, {\"status\": \"affected\", \"version\": \"16.3.9\"}, {\"status\": \"affected\", \"version\": \"16.3.10\"}, {\"status\": \"affected\", \"version\": \"16.3.11\"}, {\"status\": \"affected\", \"version\": \"16.4.1\"}, {\"status\": \"affected\", \"version\": \"16.4.2\"}, {\"status\": \"affected\", \"version\": \"16.4.3\"}, {\"status\": \"affected\", \"version\": \"16.5.1\"}, {\"status\": \"affected\", \"version\": \"16.5.1b\"}, {\"status\": \"affected\", \"version\": \"16.5.2\"}, {\"status\": \"affected\", \"version\": \"16.5.3\"}, {\"status\": \"affected\", \"version\": \"3.18.2aSP\"}, {\"status\": \"affected\", \"version\": \"16.6.1\"}, {\"status\": \"affected\", \"version\": \"16.6.2\"}, {\"status\": \"affected\", \"version\": \"16.6.3\"}, {\"status\": \"affected\", \"version\": \"16.6.4\"}, {\"status\": \"affected\", \"version\": \"16.6.5\"}, {\"status\": \"affected\", \"version\": \"16.6.6\"}, {\"status\": \"affected\", \"version\": \"16.6.7\"}, {\"status\": \"affected\", \"version\": \"16.6.8\"}, {\"status\": \"affected\", \"version\": \"16.6.9\"}, {\"status\": \"affected\", \"version\": \"16.6.10\"}, {\"status\": \"affected\", \"version\": \"16.7.1\"}, {\"status\": \"affected\", \"version\": \"16.7.2\"}, {\"status\": \"affected\", \"version\": \"16.7.3\"}, {\"status\": \"affected\", \"version\": \"16.8.1\"}, {\"status\": \"affected\", \"version\": \"16.8.1s\"}, {\"status\": \"affected\", \"version\": \"16.8.2\"}, {\"status\": \"affected\", \"version\": \"16.8.3\"}, {\"status\": \"affected\", \"version\": \"16.9.1\"}, {\"status\": \"affected\", \"version\": \"16.9.2\"}, {\"status\": \"affected\", \"version\": \"16.9.1s\"}, {\"status\": \"affected\", \"version\": \"16.9.3\"}, {\"status\": \"affected\", \"version\": \"16.9.4\"}, {\"status\": \"affected\", \"version\": \"16.9.5\"}, {\"status\": \"affected\", \"version\": \"16.9.6\"}, {\"status\": \"affected\", \"version\": \"16.9.7\"}, {\"status\": \"affected\", \"version\": \"16.9.8\"}, {\"status\": \"affected\", \"version\": \"16.10.1\"}, {\"status\": \"affected\", \"version\": \"16.10.1a\"}, {\"status\": \"affected\", \"version\": \"16.10.1b\"}, {\"status\": \"affected\", \"version\": \"16.10.1s\"}, {\"status\": \"affected\", \"version\": \"16.10.1e\"}, {\"status\": \"affected\", \"version\": \"16.10.2\"}, {\"status\": \"affected\", \"version\": \"16.10.3\"}, {\"status\": \"affected\", \"version\": \"16.11.1\"}, {\"status\": \"affected\", \"version\": \"16.11.1a\"}, {\"status\": \"affected\", \"version\": \"16.11.2\"}, {\"status\": \"affected\", \"version\": \"16.11.1s\"}, {\"status\": \"affected\", \"version\": \"16.12.1\"}, {\"status\": \"affected\", \"version\": \"16.12.1s\"}, {\"status\": \"affected\", \"version\": \"16.12.1a\"}, {\"status\": \"affected\", \"version\": \"16.12.1c\"}, {\"status\": \"affected\", \"version\": \"16.12.2\"}, {\"status\": \"affected\", \"version\": \"16.12.3\"}, {\"status\": \"affected\", \"version\": \"16.12.8\"}, {\"status\": \"affected\", \"version\": \"16.12.2s\"}, {\"status\": \"affected\", \"version\": \"16.12.4\"}, {\"status\": \"affected\", \"version\": \"16.12.3s\"}, {\"status\": \"affected\", \"version\": \"16.12.5\"}, {\"status\": \"affected\", \"version\": \"16.12.6\"}, {\"status\": \"affected\", \"version\": \"16.12.7\"}, {\"status\": \"affected\", \"version\": \"17.1.1\"}, {\"status\": \"affected\", \"version\": \"17.1.1s\"}, {\"status\": \"affected\", \"version\": \"17.1.1t\"}, {\"status\": \"affected\", \"version\": \"17.1.3\"}, {\"status\": \"affected\", \"version\": \"17.2.1\"}, {\"status\": \"affected\", \"version\": \"17.2.1r\"}, {\"status\": \"affected\", \"version\": \"17.2.1v\"}, {\"status\": \"affected\", \"version\": \"17.2.2\"}, {\"status\": \"affected\", \"version\": \"17.2.3\"}, {\"status\": \"affected\", \"version\": \"17.3.1\"}, {\"status\": \"affected\", \"version\": \"17.3.2\"}, {\"status\": \"affected\", \"version\": \"17.3.3\"}, {\"status\": \"affected\", \"version\": \"17.3.1a\"}, {\"status\": \"affected\", \"version\": \"17.3.4\"}, {\"status\": \"affected\", \"version\": \"17.3.5\"}, {\"status\": \"affected\", \"version\": \"17.3.4a\"}, {\"status\": \"affected\", \"version\": \"17.3.6\"}, {\"status\": \"affected\", \"version\": \"17.3.7\"}, {\"status\": \"affected\", \"version\": \"17.3.8\"}, {\"status\": \"affected\", \"version\": \"17.3.8a\"}, {\"status\": \"affected\", \"version\": \"17.4.1\"}, {\"status\": \"affected\", \"version\": \"17.4.2\"}, {\"status\": \"affected\", \"version\": \"17.4.1a\"}, {\"status\": \"affected\", \"version\": \"17.4.1b\"}, {\"status\": \"affected\", \"version\": \"17.5.1\"}, {\"status\": \"affected\", \"version\": \"17.5.1a\"}, {\"status\": \"affected\", \"version\": \"17.6.1\"}, {\"status\": \"affected\", \"version\": \"17.6.2\"}, {\"status\": \"affected\", \"version\": \"17.6.1a\"}, {\"status\": \"affected\", \"version\": \"17.6.3\"}, {\"status\": \"affected\", \"version\": \"17.6.1y\"}, {\"status\": \"affected\", \"version\": \"17.6.3a\"}, {\"status\": \"affected\", \"version\": \"17.6.4\"}, {\"status\": \"affected\", \"version\": \"17.6.5\"}, {\"status\": \"affected\", \"version\": \"17.6.6\"}, {\"status\": \"affected\", \"version\": \"17.6.6a\"}, {\"status\": \"affected\", \"version\": \"17.6.5a\"}, {\"status\": \"affected\", \"version\": \"17.6.7\"}, {\"status\": \"affected\", \"version\": \"17.6.8\"}, {\"status\": \"affected\", \"version\": \"17.6.8a\"}, {\"status\": \"affected\", \"version\": \"17.7.1\"}, {\"status\": \"affected\", \"version\": \"17.7.1a\"}, {\"status\": \"affected\", \"version\": \"17.7.2\"}, {\"status\": \"affected\", \"version\": \"17.10.1\"}, {\"status\": \"affected\", \"version\": \"17.10.1a\"}, {\"status\": \"affected\", \"version\": \"17.8.1\"}, {\"status\": \"affected\", \"version\": \"17.8.1a\"}, {\"status\": \"affected\", \"version\": \"17.9.1\"}, {\"status\": \"affected\", \"version\": \"17.9.2\"}, {\"status\": \"affected\", \"version\": \"17.9.1a\"}, {\"status\": \"affected\", \"version\": \"17.9.3\"}, {\"status\": \"affected\", \"version\": \"17.9.2a\"}, {\"status\": \"affected\", \"version\": \"17.9.3a\"}, {\"status\": \"affected\", \"version\": \"17.9.4\"}, {\"status\": \"affected\", \"version\": \"17.9.5\"}, {\"status\": \"affected\", \"version\": \"17.9.4a\"}, {\"status\": \"affected\", \"version\": \"17.9.5a\"}, {\"status\": \"affected\", \"version\": \"17.9.5b\"}, {\"status\": \"affected\", \"version\": \"17.9.5e\"}, {\"status\": \"affected\", \"version\": \"17.9.5f\"}, {\"status\": \"affected\", \"version\": \"17.11.1\"}, {\"status\": \"affected\", \"version\": \"17.11.1a\"}, {\"status\": \"affected\", \"version\": \"17.12.1\"}, {\"status\": \"affected\", \"version\": \"17.12.1a\"}, {\"status\": \"affected\", \"version\": \"17.12.2\"}, {\"status\": \"affected\", \"version\": \"17.12.3\"}, {\"status\": \"affected\", \"version\": \"17.12.2a\"}, {\"status\": \"affected\", \"version\": \"17.12.3a\"}, {\"status\": \"affected\", \"version\": \"17.13.1\"}, {\"status\": \"affected\", \"version\": \"17.13.1a\"}, {\"status\": \"affected\", \"version\": \"17.14.1\"}, {\"status\": \"affected\", \"version\": \"17.14.1a\"}]}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC\", \"name\": \"cisco-sa-iosxe-ikev1-dos-XHk3HzFC\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.\\r\\n\\r This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-232\", \"description\": \"Improper Handling of Undefined Values\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2025-05-07T17:36:16.366Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-20192\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-07T19:43:26.883Z\", \"dateReserved\": \"2024-10-10T19:15:13.226Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2025-05-07T17:36:16.366Z\", \"assignerShortName\": \"cisco\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2025-AVI-0378

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Cisco	Catalyst Center	Catalyst Center versions antérieures à 2.3.7.9
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x antérieures à 20.15.2
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.16.x antérieures à 20.16.1
Cisco	IOS XR	IOS XR versions antérieures à 24.3.2
Cisco	WLC AireOS	WLC AireOS versions antérieures à 8.10.196.0
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions antérieures à 20.9.7
Cisco	IOS XE	IOS XE : Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des configurations vulnérables des équipements (cf. section Documentation).
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x antérieures à 20.12.5

References

Title

Publication Time

CERTFR-2025-AVI-0378

Vulnerability from certfr_avis - Published: - Updated:

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Cisco	Catalyst Center	Catalyst Center versions antérieures à 2.3.7.9
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x antérieures à 20.15.2
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.16.x antérieures à 20.16.1
Cisco	IOS XR	IOS XR versions antérieures à 24.3.2
Cisco	WLC AireOS	WLC AireOS versions antérieures à 8.10.196.0
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions antérieures à 20.9.7
Cisco	IOS XE	IOS XE : Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des configurations vulnérables des équipements (cf. section Documentation).
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x antérieures à 20.12.5

References

Title

Publication Time

BDU:2025-10325

Vulnerability from fstec - Published: 07.05.2025

Title

Уязвимость протокола Internet Key Exchange версии 1 (IKEv1) операционных систем Cisco IOS XE, позволяющая нарушителю вызвать отказ в обслуживании

Description

Уязвимость протокола Internet Key Exchange версии 1 (IKEv1) операционных систем Cisco IOS XE связана с неправильной обработкой неопределенных значений. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании

Severity


                    
                      AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Vendor

Cisco Systems Inc.

Software Name

Cisco IOS XE

Software Version

3.13.1s (Cisco IOS XE), 3.13.2s (Cisco IOS XE), 3.13.4s (Cisco IOS XE), 3.13.5s (Cisco IOS XE), 3.14.0s (Cisco IOS XE), 3.14.1s (Cisco IOS XE), 3.14.2s (Cisco IOS XE), 3.14.3s (Cisco IOS XE), 3.14.4s (Cisco IOS XE), 3.15.0s (Cisco IOS XE), 3.15.1s (Cisco IOS XE), 3.15.2s (Cisco IOS XE), 3.15.3s (Cisco IOS XE), 3.16.0s (Cisco IOS XE), 3.16.1as (Cisco IOS XE), 3.16.2s (Cisco IOS XE), 3.17.0s (Cisco IOS XE), 3.17.1s (Cisco IOS XE), 16.5.1 (Cisco IOS XE), 16.3.1a (Cisco IOS XE), 16.2.1 (Cisco IOS XE), 16.2.2 (Cisco IOS XE), 16.3.1 (Cisco IOS XE), 16.3.2 (Cisco IOS XE), 16.3.3 (Cisco IOS XE), 16.3.4 (Cisco IOS XE), 16.3.5 (Cisco IOS XE), 16.4.1 (Cisco IOS XE), 16.6.1 (Cisco IOS XE), 16.6.4 (Cisco IOS XE), 16.4.3 (Cisco IOS XE), 16.7.2 (Cisco IOS XE), 3.13.0S (Cisco IOS XE), 3.13.3S (Cisco IOS XE), 3.13.6S (Cisco IOS XE), 3.13.7S (Cisco IOS XE), 3.13.6aS (Cisco IOS XE), 3.13.8S (Cisco IOS XE), 3.13.9S (Cisco IOS XE), 3.15.1cS (Cisco IOS XE), 3.15.4S (Cisco IOS XE), 3.16.0cS (Cisco IOS XE), 3.16.3S (Cisco IOS XE), 3.16.4aS (Cisco IOS XE), 3.16.4bS (Cisco IOS XE), 3.16.4gS (Cisco IOS XE), 3.16.5S (Cisco IOS XE), 3.16.4cS (Cisco IOS XE), 3.16.4dS (Cisco IOS XE), 3.16.4eS (Cisco IOS XE), 3.16.6S (Cisco IOS XE), 3.16.5aS (Cisco IOS XE), 3.16.5bS (Cisco IOS XE), 3.16.7S (Cisco IOS XE), 3.16.6bS (Cisco IOS XE), 3.16.7aS (Cisco IOS XE), 3.16.7bS (Cisco IOS XE), 3.17.2S (Cisco IOS XE), 3.17.3S (Cisco IOS XE), 3.17.4S (Cisco IOS XE), 16.3.6 (Cisco IOS XE), 16.4.2 (Cisco IOS XE), 16.5.1b (Cisco IOS XE), 16.5.2 (Cisco IOS XE), 16.5.3 (Cisco IOS XE), 16.6.2 (Cisco IOS XE), 16.6.3 (Cisco IOS XE), 16.7.1 (Cisco IOS XE), 16.8.1 (Cisco IOS XE), 16.8.1s (Cisco IOS XE), 3.13.10S (Cisco IOS XE), 3.16.8S (Cisco IOS XE), 16.3.7 (Cisco IOS XE), 3.18.2aSP (Cisco IOS XE), 16.6.4s (Cisco IOS XE), 16.8.2 (Cisco IOS XE), 16.9.1 (Cisco IOS XE), 16.9.2 (Cisco IOS XE), 16.9.1s (Cisco IOS XE), 16.7.3 (Cisco IOS XE), 16.10.1 (Cisco IOS XE), 3.16.10S (Cisco IOS XE), 16.12.1 (Cisco IOS XE), 16.8.3 (Cisco IOS XE), 16.9.2s (Cisco IOS XE), 3.16.9S (Cisco IOS XE), 16.3.8 (Cisco IOS XE), 16.6.5 (Cisco IOS XE), 16.10.2 (Cisco IOS XE), 16.3.9 (Cisco IOS XE), 16.6.6 (Cisco IOS XE), 16.9.3 (Cisco IOS XE), 16.9.4 (Cisco IOS XE), 16.9.3s (Cisco IOS XE), 16.10.1a (Cisco IOS XE), 16.10.1b (Cisco IOS XE), 16.10.1s (Cisco IOS XE), 16.10.1e (Cisco IOS XE), 16.10.3 (Cisco IOS XE), 16.11.1 (Cisco IOS XE), 16.11.1a (Cisco IOS XE), 16.11.1s (Cisco IOS XE), 16.11.1c (Cisco IOS XE), 16.12.1a (Cisco IOS XE), 16.12.1c (Cisco IOS XE), 16.12.1s (Cisco IOS XE), 16.11.2 (Cisco IOS XE), 16.3.10 (Cisco IOS XE), 16.6.7 (Cisco IOS XE), 16.6.8 (Cisco IOS XE), 16.9.5 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.1.1 (Cisco IOS XE), 16.12.2 (Cisco IOS XE), 16.12.2s (Cisco IOS XE), 16.12.2t (Cisco IOS XE), 16.12.4 (Cisco IOS XE), 16.12.3s (Cisco IOS XE), 17.1.1s (Cisco IOS XE), 17.1.2 (Cisco IOS XE), 17.1.1t (Cisco IOS XE), 17.1.3 (Cisco IOS XE), 17.2.1r (Cisco IOS XE), 17.2.1v (Cisco IOS XE), 17.2.2 (Cisco IOS XE), 17.3.1 (Cisco IOS XE), 17.3.1a (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.9.1a (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.11.1a (Cisco IOS XE), 17.12.1 (Cisco IOS XE), 17.12.1a (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 17.10.1a (Cisco IOS XE), 16.12.3 (Cisco IOS XE), 16.12.8 (Cisco IOS XE), 16.12.5 (Cisco IOS XE), 16.12.6 (Cisco IOS XE), 16.12.7 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9.4 (Cisco IOS XE), 17.9.4a (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.6.6a (Cisco IOS XE), 17.6.6 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE), 16.3.11 (Cisco IOS XE), 16.6.9 (Cisco IOS XE), 16.6.10 (Cisco IOS XE), 16.9.6 (Cisco IOS XE), 16.9.7 (Cisco IOS XE), 17.2.3 (Cisco IOS XE), 17.3.4a (Cisco IOS XE), 17.4.1a (Cisco IOS XE), 17.4.1b (Cisco IOS XE), 17.4.1c (Cisco IOS XE), 17.4.2 (Cisco IOS XE), 17.5.1a (Cisco IOS XE), 17.5.1b (Cisco IOS XE), 17.5.1c (Cisco IOS XE), 17.6.1a (Cisco IOS XE), 17.6.3a (Cisco IOS XE), 17.7.1a (Cisco IOS XE), 17.7.2 (Cisco IOS XE), 17.8.1a (Cisco IOS XE), 17.9.2a (Cisco IOS XE), 17.9.3a (Cisco IOS XE), 17.12.2 (Cisco IOS XE), 17.12.2a (Cisco IOS XE), 17.6.1y (Cisco IOS XE), 16.9.8 (Cisco IOS XE), 16.9.8a (Cisco IOS XE), 17.9.5a (Cisco IOS XE), 17.9.5b (Cisco IOS XE), 17.9.5c (Cisco IOS XE), 17.9.5d (Cisco IOS XE), 17.12.3a (Cisco IOS XE), 17.13.1 (Cisco IOS XE), 17.13.1a (Cisco IOS XE), 17.14.1 (Cisco IOS XE), 17.14.1a (Cisco IOS XE), 17.6.7 (Cisco IOS XE), 17.9.5 (Cisco IOS XE), 17.12.3 (Cisco IOS XE), 17.9.5e (Cisco IOS XE), 17.9.5f (Cisco IOS XE), 17.6.8a (Cisco IOS XE), 17.6.8 (Cisco IOS XE)

Possible Mitigations

Использование рекомендаций: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC

Reference

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC

CWE

CWE-232

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:S/C:N/I:N/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "3.13.1s (Cisco IOS XE), 3.13.2s (Cisco IOS XE), 3.13.4s (Cisco IOS XE), 3.13.5s (Cisco IOS XE), 3.14.0s (Cisco IOS XE), 3.14.1s (Cisco IOS XE), 3.14.2s (Cisco IOS XE), 3.14.3s (Cisco IOS XE), 3.14.4s (Cisco IOS XE), 3.15.0s (Cisco IOS XE), 3.15.1s (Cisco IOS XE), 3.15.2s (Cisco IOS XE), 3.15.3s (Cisco IOS XE), 3.16.0s (Cisco IOS XE), 3.16.1as (Cisco IOS XE), 3.16.2s (Cisco IOS XE), 3.17.0s (Cisco IOS XE), 3.17.1s (Cisco IOS XE), 16.5.1 (Cisco IOS XE), 16.3.1a (Cisco IOS XE), 16.2.1 (Cisco IOS XE), 16.2.2 (Cisco IOS XE), 16.3.1 (Cisco IOS XE), 16.3.2 (Cisco IOS XE), 16.3.3 (Cisco IOS XE), 16.3.4 (Cisco IOS XE), 16.3.5 (Cisco IOS XE), 16.4.1 (Cisco IOS XE), 16.6.1 (Cisco IOS XE), 16.6.4 (Cisco IOS XE), 16.4.3 (Cisco IOS XE), 16.7.2 (Cisco IOS XE), 3.13.0S (Cisco IOS XE), 3.13.3S (Cisco IOS XE), 3.13.6S (Cisco IOS XE), 3.13.7S (Cisco IOS XE), 3.13.6aS (Cisco IOS XE), 3.13.8S (Cisco IOS XE), 3.13.9S (Cisco IOS XE), 3.15.1cS (Cisco IOS XE), 3.15.4S (Cisco IOS XE), 3.16.0cS (Cisco IOS XE), 3.16.3S (Cisco IOS XE), 3.16.4aS (Cisco IOS XE), 3.16.4bS (Cisco IOS XE), 3.16.4gS (Cisco IOS XE), 3.16.5S (Cisco IOS XE), 3.16.4cS (Cisco IOS XE), 3.16.4dS (Cisco IOS XE), 3.16.4eS (Cisco IOS XE), 3.16.6S (Cisco IOS XE), 3.16.5aS (Cisco IOS XE), 3.16.5bS (Cisco IOS XE), 3.16.7S (Cisco IOS XE), 3.16.6bS (Cisco IOS XE), 3.16.7aS (Cisco IOS XE), 3.16.7bS (Cisco IOS XE), 3.17.2S (Cisco IOS XE), 3.17.3S (Cisco IOS XE), 3.17.4S (Cisco IOS XE), 16.3.6 (Cisco IOS XE), 16.4.2 (Cisco IOS XE), 16.5.1b (Cisco IOS XE), 16.5.2 (Cisco IOS XE), 16.5.3 (Cisco IOS XE), 16.6.2 (Cisco IOS XE), 16.6.3 (Cisco IOS XE), 16.7.1 (Cisco IOS XE), 16.8.1 (Cisco IOS XE), 16.8.1s (Cisco IOS XE), 3.13.10S (Cisco IOS XE), 3.16.8S (Cisco IOS XE), 16.3.7 (Cisco IOS XE), 3.18.2aSP (Cisco IOS XE), 16.6.4s (Cisco IOS XE), 16.8.2 (Cisco IOS XE), 16.9.1 (Cisco IOS XE), 16.9.2 (Cisco IOS XE), 16.9.1s (Cisco IOS XE), 16.7.3 (Cisco IOS XE), 16.10.1 (Cisco IOS XE), 3.16.10S (Cisco IOS XE), 16.12.1 (Cisco IOS XE), 16.8.3 (Cisco IOS XE), 16.9.2s (Cisco IOS XE), 3.16.9S (Cisco IOS XE), 16.3.8 (Cisco IOS XE), 16.6.5 (Cisco IOS XE), 16.10.2 (Cisco IOS XE), 16.3.9 (Cisco IOS XE), 16.6.6 (Cisco IOS XE), 16.9.3 (Cisco IOS XE), 16.9.4 (Cisco IOS XE), 16.9.3s (Cisco IOS XE), 16.10.1a (Cisco IOS XE), 16.10.1b (Cisco IOS XE), 16.10.1s (Cisco IOS XE), 16.10.1e (Cisco IOS XE), 16.10.3 (Cisco IOS XE), 16.11.1 (Cisco IOS XE), 16.11.1a (Cisco IOS XE), 16.11.1s (Cisco IOS XE), 16.11.1c (Cisco IOS XE), 16.12.1a (Cisco IOS XE), 16.12.1c (Cisco IOS XE), 16.12.1s (Cisco IOS XE), 16.11.2 (Cisco IOS XE), 16.3.10 (Cisco IOS XE), 16.6.7 (Cisco IOS XE), 16.6.8 (Cisco IOS XE), 16.9.5 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.1.1 (Cisco IOS XE), 16.12.2 (Cisco IOS XE), 16.12.2s (Cisco IOS XE), 16.12.2t (Cisco IOS XE), 16.12.4 (Cisco IOS XE), 16.12.3s (Cisco IOS XE), 17.1.1s (Cisco IOS XE), 17.1.2 (Cisco IOS XE), 17.1.1t (Cisco IOS XE), 17.1.3 (Cisco IOS XE), 17.2.1r (Cisco IOS XE), 17.2.1v (Cisco IOS XE), 17.2.2 (Cisco IOS XE), 17.3.1 (Cisco IOS XE), 17.3.1a (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.9.1a (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.11.1a (Cisco IOS XE), 17.12.1 (Cisco IOS XE), 17.12.1a (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 17.10.1a (Cisco IOS XE), 16.12.3 (Cisco IOS XE), 16.12.8 (Cisco IOS XE), 16.12.5 (Cisco IOS XE), 16.12.6 (Cisco IOS XE), 16.12.7 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9.4 (Cisco IOS XE), 17.9.4a (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.6.6a (Cisco IOS XE), 17.6.6 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE), 16.3.11 (Cisco IOS XE), 16.6.9 (Cisco IOS XE), 16.6.10 (Cisco IOS XE), 16.9.6 (Cisco IOS XE), 16.9.7 (Cisco IOS XE), 17.2.3 (Cisco IOS XE), 17.3.4a (Cisco IOS XE), 17.4.1a (Cisco IOS XE), 17.4.1b (Cisco IOS XE), 17.4.1c (Cisco IOS XE), 17.4.2 (Cisco IOS XE), 17.5.1a (Cisco IOS XE), 17.5.1b (Cisco IOS XE), 17.5.1c (Cisco IOS XE), 17.6.1a (Cisco IOS XE), 17.6.3a (Cisco IOS XE), 17.7.1a (Cisco IOS XE), 17.7.2 (Cisco IOS XE), 17.8.1a (Cisco IOS XE), 17.9.2a (Cisco IOS XE), 17.9.3a (Cisco IOS XE), 17.12.2 (Cisco IOS XE), 17.12.2a (Cisco IOS XE), 17.6.1y (Cisco IOS XE), 16.9.8 (Cisco IOS XE), 16.9.8a (Cisco IOS XE), 17.9.5a (Cisco IOS XE), 17.9.5b (Cisco IOS XE), 17.9.5c (Cisco IOS XE), 17.9.5d (Cisco IOS XE), 17.12.3a (Cisco IOS XE), 17.13.1 (Cisco IOS XE), 17.13.1a (Cisco IOS XE), 17.14.1 (Cisco IOS XE), 17.14.1a (Cisco IOS XE), 17.6.7 (Cisco IOS XE), 17.9.5 (Cisco IOS XE), 17.12.3 (Cisco IOS XE), 17.9.5e (Cisco IOS XE), 17.9.5f (Cisco IOS XE), 17.6.8a (Cisco IOS XE), 17.6.8 (Cisco IOS XE)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "07.05.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "27.08.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "27.08.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-10325",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-20192",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco IOS XE",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Internet Key Exchange \u0432\u0435\u0440\u0441\u0438\u0438 1 (IKEv1) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u043d\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 (CWE-232)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Internet Key Exchange \u0432\u0435\u0440\u0441\u0438\u0438 1 (IKEv1) \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043d\u0435\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-232",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,7)"
}

CISCO-SA-IOSXE-IKEV1-DOS-XHK3HZFC

Vulnerability from csaf_cisco - Published: 2025-05-07 16:00 - Updated: 2025-05-07 16:00

Summary

Cisco IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability

Notes

Summary: A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability. This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279"].

Vulnerable Products: This vulnerability affects the following Cisco products if they are running a vulnerable release of Cisco IOS XE Software and have IKEv1 VPN enabled: 1000 Series Integrated Services Routers (ISRs) 4000 Series ISRs Catalyst 8200 Series Edge Platforms Catalyst 8300 Series Edge Platforms Catalyst 8500 Series Edge Platforms Catalyst 8500L Series Edge Platforms The following features are affected by this vulnerability if they are configured to use IKEv1: Dynamic Multipoint VPN (DMVPN) Remote Access IPsec VPN (RAVPN) Site-to-Site VPN (S2S VPN) Note: Cisco Group Encrypted Transport VPN (GET VPN) and SSL VPN do not use IKEv1 for IPsec session establishment and are not affected by this vulnerability. For information about which Cisco software releases are vulnerable, see the Fixed Software ["#fs"] section of this advisory. Determine the Device Configuration 1. Determine Whether IKE (v1 or v2) Is Enabled To determine whether IKE processing is enabled, use the show ip socket | include 500 or show udp | include 500 EXEC command on the device CLI. If UDP port 500 or UDP port 4500 is open on a device, the device is processing IKE packets. Note: UDP ports 500 or 4500 or both will be open regardless of whether IKEv1 or IKEv2 is enabled, as both use the same port and protocol numbers. The following example shows the output of the show udp | include 500 command on a device that is processing IKE packets on UDP ports 500 and 4500 using either IPv4 or IPv6: Router#show udp | include 500 17 --listen-- 192.168.1.10 500 0 0 2001011 0 17(v6) --listen-- --any-- 500 0 0 2020011 0 17 --listen-- 192.168.1.10 4500 0 0 2001011 0 17(v6) --listen-- --any-- 4500 0 0 2020011 0 If this command returns empty output, the device is not affected by this vulnerability. Otherwise, proceed to step 2. 2. Determine Whether IKEv1 Is Used To determine whether IKEv1 is being actively used by the device, use the show crypto map EXEC command on the device CLI. A crypto map uses IKEv1 if it does not have an IKEv2 Profile associated. A crypto map is active if there is at least one interface using that crypto map. The following example shows the output of the show crypto map command on a device that has crypto map CMAP1 configured to use IKEv1 (because no IKEv2 Profile is listed) and enabled on interface GigabitEthernet1: Router1#show crypto map Crypto Map IPv4 "CMAP1" 10 ipsec-isakmp Peer = 192.168.1.100 Access-List SS dynamic: False Extended IP access list 120 access-list 110 permit ip 192.168.11.0 0.0.0.255 192.168.12.0 0.0.0.255 Current peer: 192.168.1.100 Security association lifetime: 4608000 kilobytes/3600 seconds Dualstack (Y/N): N Responder-Only (Y/N): N PFS (Y/N): N Mixed-mode : Disabled Transform sets={ AESSET: { esp-256-aes esp-sha256-hmac } , } Interfaces using crypto map CMAP1: GigabitEthernet1 Router1# This device is affected by this vulnerability. The following example shows the output of the show crypto map command on a device that has crypto map CMAP2 configured to use IKEv2 (because an IKEv2 Profile is listed) and enabled on interface GigabitEthernet2: Router2#show crypto map Crypto Map IPv4 "CMAP2" 10 ipsec-isakmp Peer = 192.168.1.200 IKEv2 Profile: profile1 Access-List SS dynamic: False Extended IP access list 120 access-list 120 permit ip 192.168.21.0 0.0.0.255 192.168.22.0 0.0.0.255 Current peer: 192.168.1.200 Security association lifetime: 4608000 kilobytes/3600 seconds Dualstack (Y/N): N Responder-Only (Y/N): N PFS (Y/N): N Mixed-mode : Disabled Transform sets={ AESSET: { esp-256-aes esp-sha256-hmac } , } Interfaces using crypto map CMAP2: GigabitEthernet2 Router2# If this is the only crypto map configured on the device, this device is not affected by this vulnerability.

Products Confirmed Not Vulnerable: Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by this vulnerability. Cisco has confirmed that this vulnerability does not affect the following Cisco products: IOS Software IOS XE Software that is running on devices other than those listed in the Vulnerable Products ["#vp"] section IOS XR Software Meraki products NX-OS Software

Workarounds: There are no workarounds that address this vulnerability.

Fixed Software: Cisco has released free software updates ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu"] that address the vulnerability described in this advisory. Customers with service contracts that entitle them to regular software updates should obtain security fixes through their usual update channels. Customers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license: https://www.cisco.com/c/en/us/products/end-user-license-agreement.html ["https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"] Additionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades. The Cisco Support and Downloads page ["https://www.cisco.com/c/en/us/support/index.html"] on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. When considering software upgrades ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page ["https://www.cisco.com/go/psirt"], to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers. Customers Without Service Contracts Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"] Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade. Cisco IOS and IOS XE Software To help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (“First Fixed”). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (“Combined First Fixed”). To use the tool, go to the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"] page and follow the instructions. Alternatively, use the following form to determine whether a release is affected by any Cisco Security Advisory. To use the form, follow these steps: Choose which advisories the tool will search—only this advisory, only advisories with a Critical or High Security Impact Rating (SIR) ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"], or all advisories. Enter a release number—for example, 15.9(3)M2 or 17.3.3. Click Check. Only this advisory All Critical and High advisories All advisories

Vulnerability Policy: To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.

Exploitation and Public Announcements: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Source: This vulnerability was found during the resolution of a Cisco TAC support case.

Legal Disclaimer: THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME. A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.

CVE-2025-20192

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Affected products

Known affected 209 products

Product	Version	Remediation
3.13.0S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.13.1S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.13.2S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.14.0S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.15.0S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.14.1S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.14.2S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.14.3S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.14.4S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.13.3S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.15.1S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.0S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.15.2S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.17.0S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.17.1S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.13.4S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.1aS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.2S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.13.5S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.15.1cS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.15.3S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.0cS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.3S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.2.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.4.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.17.2S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.2.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.4.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.5.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.13.6S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.13.7S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.15.4S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.7.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.8.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.13.6aS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.4aS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.4bS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.4gS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.5S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.4cS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.17.3S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.4dS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.4eS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.6S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.5aS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.5bS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.10.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.2aSP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.5.1b Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.17.4S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.11.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.13.8S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.7S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.5.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.6bS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.4.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.13.9S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.5.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.7aS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.7bS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.13.10S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.8.1s Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.7.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.8S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.7 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.7.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.8.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.1s Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.4s Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.9S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.1.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.10.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.8 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.2.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.10.1b Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.11.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.2s Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.10.1s Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.10.1e Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.8.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.10S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.10.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.11.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.7 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.11.1s Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.9 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.3s Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.4.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.5.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.11.1c Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.1s Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.1c Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.10.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.8 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.2s Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.10 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.1.1s Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.2t Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.8 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.2.1r Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.3s Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.1.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.1.1t Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.7.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.2.1v Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.10.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.4.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.8.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.11 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.2.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.7 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.1.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.4.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.9 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.4.1b Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.8 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.2.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.5.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.4.1c Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.10 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.4a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.7.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.7 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.1y Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.8.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.7.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.3a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.11.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.12.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.8a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.10.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.5.1b Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.7 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.2a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.5.1c Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.11.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.3a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.13.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.14.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.8 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.12.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.12.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.4a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.8a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.6a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.5a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.7 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.12.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.13.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.12.2a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.5a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.14.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.5b Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.8 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.12.3a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.5c Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.5d Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.8a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.5e Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.5f Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.14 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.7b Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.12.5c Cisco / Cisco IOS XE Software	—	Vendor Fix fix

References

12 references

URL	Category
https://sec.cloudapps.cisco.com/security/center/c…	self
https://sec.cloudapps.cisco.com/security/center/v…	external
https://sec.cloudapps.cisco.com/security/center/r…	external
https://sec.cloudapps.cisco.com/security/center/r…	external
https://www.cisco.com/c/en/us/products/end-user-l…	external
https://www.cisco.com/c/en/us/support/index.html	external
https://sec.cloudapps.cisco.com/security/center/r…	external
https://www.cisco.com/go/psirt	external
https://www.cisco.com/c/en/us/support/web/tsd-cis…	external
https://sec.cloudapps.cisco.com/security/center/s…	external
https://sec.cloudapps.cisco.com/security/center/r…	external
http://www.cisco.com/web/about/security/psirt/sec…	external

Acknowledgments

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "summary": "This vulnerability was found during the resolution of a Cisco TAC support case."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "notes": [
      {
        "category": "summary",
        "text": "A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.\r\n\r\nThis vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\n\r\n\r\nThis advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [\"https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279\"].",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "This vulnerability affects the following Cisco products if they are running a vulnerable release of Cisco IOS XE Software and have IKEv1 VPN enabled:\r\n\r\n1000 Series Integrated Services Routers (ISRs)\r\n4000 Series ISRs\r\nCatalyst 8200 Series Edge Platforms\r\nCatalyst 8300 Series Edge Platforms\r\nCatalyst 8500 Series Edge Platforms\r\nCatalyst 8500L Series Edge Platforms\r\n\r\nThe following features are affected by this vulnerability if they are configured to use IKEv1:\r\n\r\nDynamic Multipoint VPN (DMVPN)\r\nRemote Access IPsec VPN (RAVPN)\r\nSite-to-Site VPN (S2S VPN)\r\n\r\nNote: Cisco Group Encrypted Transport VPN (GET VPN) and SSL VPN do not use IKEv1 for IPsec session establishment and are not affected by this vulnerability.\r\n\r\nFor information about which Cisco software releases are vulnerable, see the Fixed Software [\"#fs\"] section of this advisory.\r\n  Determine the Device Configuration\r\n1. Determine Whether IKE (v1 or v2) Is Enabled\r\n\r\nTo determine whether IKE processing is enabled, use the show ip socket | include 500 or show udp | include 500 EXEC command on the device CLI. If UDP port 500 or UDP port 4500 is open on a device, the device is processing IKE packets.\r\n\r\nNote: UDP ports 500 or 4500 or both will be open regardless of whether IKEv1 or IKEv2 is enabled, as both use the same port and protocol numbers.\r\n\r\nThe following example shows the output of the show udp | include 500 command on a device that is processing IKE packets on UDP ports 500 and 4500 using either IPv4 or IPv6:\r\n\r\n\r\nRouter#show udp | include 500\r\n 17       --listen--          192.168.1.10      500   0   0 2001011   0\r\n 17(v6)   --listen--          --any--           500   0   0 2020011   0\r\n 17       --listen--          192.168.1.10     4500   0   0 2001011   0\r\n 17(v6)   --listen--          --any--          4500   0   0 2020011   0\r\n\r\nIf this command returns empty output, the device is not affected by this vulnerability. Otherwise, proceed to step 2.\r\n\r\n2. Determine Whether IKEv1 Is Used\r\n\r\nTo determine whether IKEv1 is being actively used by the device, use the show crypto map EXEC command on the device CLI. A crypto map uses IKEv1 if it does not have an IKEv2 Profile associated. A crypto map is active if there is at least one interface using that crypto map.\r\n\r\nThe following example shows the output of the show crypto map command on a device that has crypto map CMAP1 configured to use IKEv1 (because no IKEv2 Profile is listed) and enabled on interface GigabitEthernet1:\r\n\r\n\r\nRouter1#show crypto map\r\nCrypto Map IPv4 \"CMAP1\" 10 ipsec-isakmp\r\n      Peer = 192.168.1.100\r\n      Access-List SS dynamic: False\r\n      Extended IP access list 120\r\n          access-list 110 permit ip 192.168.11.0 0.0.0.255 192.168.12.0 0.0.0.255\r\n      Current peer: 192.168.1.100\r\n      Security association lifetime: 4608000 kilobytes/3600 seconds\r\n      Dualstack (Y/N): N\r\n\r\n      Responder-Only (Y/N): N\r\n      PFS (Y/N): N\r\n      Mixed-mode : Disabled\r\n      Transform sets={\r\n              AESSET:  { esp-256-aes esp-sha256-hmac  } ,\r\n      }\r\n      Interfaces using crypto map CMAP1:\r\n              GigabitEthernet1\r\n\r\nRouter1#\r\n\r\nThis device is affected by this vulnerability.\r\n\r\nThe following example shows the output of the show crypto map command on a device that has crypto map CMAP2 configured to use IKEv2 (because an IKEv2 Profile is listed) and enabled on interface GigabitEthernet2:\r\n\r\n\r\nRouter2#show crypto map\r\nCrypto Map IPv4 \"CMAP2\" 10 ipsec-isakmp\r\n      Peer = 192.168.1.200\r\n      IKEv2 Profile: profile1\r\n      Access-List SS dynamic: False\r\n      Extended IP access list 120\r\n          access-list 120 permit ip 192.168.21.0 0.0.0.255 192.168.22.0 0.0.0.255\r\n      Current peer: 192.168.1.200\r\n      Security association lifetime: 4608000 kilobytes/3600 seconds\r\n      Dualstack (Y/N): N\r\n\r\n      Responder-Only (Y/N): N\r\n      PFS (Y/N): N\r\n      Mixed-mode : Disabled\r\n      Transform sets={\r\n              AESSET:  { esp-256-aes esp-sha256-hmac  } ,\r\n      }\r\n      Interfaces using crypto map CMAP2:\r\n              GigabitEthernet2\r\n\r\nRouter2#\r\n\r\nIf this is the only crypto map configured on the device, this device is not affected by this vulnerability.",
        "title": "Vulnerable Products"
      },
      {
        "category": "general",
        "text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that this vulnerability does not affect the following Cisco products:\r\n\r\nIOS Software\r\nIOS XE Software that is running on devices other than those listed in the Vulnerable Products [\"#vp\"] section\r\nIOS XR Software\r\nMeraki products\r\nNX-OS Software",
        "title": "Products Confirmed Not Vulnerable"
      },
      {
        "category": "general",
        "text": "There are no workarounds that address this vulnerability.",
        "title": "Workarounds"
      },
      {
        "category": "general",
        "text": "Cisco has released free software updates [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu\"] that address the vulnerability described in this advisory. Customers with service contracts that entitle them to regular software updates should obtain security fixes through their usual update channels.\r\n\r\nCustomers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:\r\nhttps://www.cisco.com/c/en/us/products/end-user-license-agreement.html [\"https://www.cisco.com/c/en/us/products/end-user-license-agreement.html\"]\r\n\r\nAdditionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.\r\n\r\nThe Cisco Support and Downloads page [\"https://www.cisco.com/c/en/us/support/index.html\"] on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool.\r\n\r\nWhen considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page [\"https://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.\r\n  Customers Without Service Contracts\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]\r\n\r\nCustomers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n        Cisco IOS and IOS XE Software\r\nTo help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (\u201cFirst Fixed\u201d). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (\u201cCombined First Fixed\u201d).\r\n\r\nTo use the tool, go to the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"] page and follow the instructions. Alternatively, use the following form to determine whether a release is affected by any Cisco Security Advisory. To use the form, follow these steps:\r\n\r\nChoose which advisories the tool will search\u2014only this advisory, only advisories with a Critical or High Security Impact Rating (SIR) [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr\"], or all advisories.\r\nEnter a release number\u2014for example, 15.9(3)M2 or 17.3.3.\r\nClick Check.\r\n\r\n       Only this advisory  All Critical and High advisories  All advisories",
        "title": "Fixed Software"
      },
      {
        "category": "general",
        "text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
        "title": "Vulnerability Policy"
      },
      {
        "category": "general",
        "text": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
        "title": "Exploitation and Public Announcements"
      },
      {
        "category": "general",
        "text": "This vulnerability was found during the resolution of a Cisco TAC support case.",
        "title": "Source"
      },
      {
        "category": "legal_disclaimer",
        "text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
        "title": "Legal Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@cisco.com",
      "issuing_authority": "Cisco PSIRT",
      "name": "Cisco",
      "namespace": "https://wwww.cisco.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Cisco IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
      },
      {
        "category": "external",
        "summary": "Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication",
        "url": "https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279"
      },
      {
        "category": "external",
        "summary": "Cisco Security Vulnerability Policy",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
      },
      {
        "category": "external",
        "summary": "free software updates",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu"
      },
      {
        "category": "external",
        "summary": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html",
        "url": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"
      },
      {
        "category": "external",
        "summary": "Cisco Support and Downloads page",
        "url": "https://www.cisco.com/c/en/us/support/index.html"
      },
      {
        "category": "external",
        "summary": "considering software upgrades",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisories page",
        "url": "https://www.cisco.com/go/psirt"
      },
      {
        "category": "external",
        "summary": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html",
        "url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
      },
      {
        "category": "external",
        "summary": "Cisco Software Checker",
        "url": "https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"
      },
      {
        "category": "external",
        "summary": "Security Impact Rating (SIR)",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"
      },
      {
        "category": "external",
        "summary": "Security Vulnerability Policy",
        "url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"
      }
    ],
    "title": "Cisco IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability",
    "tracking": {
      "current_release_date": "2025-05-07T16:00:00+00:00",
      "generator": {
        "date": "2025-05-07T15:59:45+00:00",
        "engine": {
          "name": "TVCE"
        }
      },
      "id": "cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
      "initial_release_date": "2025-05-07T16:00:00+00:00",
      "revision_history": [
        {
          "date": "2025-05-07T15:53:17+00:00",
          "number": "1.0.0",
          "summary": "Initial public release."
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.13.0S",
                    "product": {
                      "name": "3.13.0S",
                      "product_id": "CSAFPID-201495"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.13.1S",
                    "product": {
                      "name": "3.13.1S",
                      "product_id": "CSAFPID-206174"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.13.2S",
                    "product": {
                      "name": "3.13.2S",
                      "product_id": "CSAFPID-206175"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.13.3S",
                    "product": {
                      "name": "3.13.3S",
                      "product_id": "CSAFPID-210078"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.13.4S",
                    "product": {
                      "name": "3.13.4S",
                      "product_id": "CSAFPID-213475"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.13.5S",
                    "product": {
                      "name": "3.13.5S",
                      "product_id": "CSAFPID-213557"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.13.6S",
                    "product": {
                      "name": "3.13.6S",
                      "product_id": "CSAFPID-217262"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.13.7S",
                    "product": {
                      "name": "3.13.7S",
                      "product_id": "CSAFPID-217263"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.13.6aS",
                    "product": {
                      "name": "3.13.6aS",
                      "product_id": "CSAFPID-220688"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.13.8S",
                    "product": {
                      "name": "3.13.8S",
                      "product_id": "CSAFPID-227923"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.13.9S",
                    "product": {
                      "name": "3.13.9S",
                      "product_id": "CSAFPID-231454"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.13.10S",
                    "product": {
                      "name": "3.13.10S",
                      "product_id": "CSAFPID-234928"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.13S"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.14.0S",
                    "product": {
                      "name": "3.14.0S",
                      "product_id": "CSAFPID-206178"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.14.1S",
                    "product": {
                      "name": "3.14.1S",
                      "product_id": "CSAFPID-206181"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.14.2S",
                    "product": {
                      "name": "3.14.2S",
                      "product_id": "CSAFPID-206191"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.14.3S",
                    "product": {
                      "name": "3.14.3S",
                      "product_id": "CSAFPID-206192"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.14.4S",
                    "product": {
                      "name": "3.14.4S",
                      "product_id": "CSAFPID-206193"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.14S"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.15.0S",
                    "product": {
                      "name": "3.15.0S",
                      "product_id": "CSAFPID-206180"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.15.1S",
                    "product": {
                      "name": "3.15.1S",
                      "product_id": "CSAFPID-210079"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.15.2S",
                    "product": {
                      "name": "3.15.2S",
                      "product_id": "CSAFPID-212268"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.15.1cS",
                    "product": {
                      "name": "3.15.1cS",
                      "product_id": "CSAFPID-213700"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.15.3S",
                    "product": {
                      "name": "3.15.3S",
                      "product_id": "CSAFPID-213776"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.15.4S",
                    "product": {
                      "name": "3.15.4S",
                      "product_id": "CSAFPID-217264"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.15S"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.16.0S",
                    "product": {
                      "name": "3.16.0S",
                      "product_id": "CSAFPID-210081"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.1aS",
                    "product": {
                      "name": "3.16.1aS",
                      "product_id": "CSAFPID-213477"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.2S",
                    "product": {
                      "name": "3.16.2S",
                      "product_id": "CSAFPID-213478"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.0cS",
                    "product": {
                      "name": "3.16.0cS",
                      "product_id": "CSAFPID-213778"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.3S",
                    "product": {
                      "name": "3.16.3S",
                      "product_id": "CSAFPID-213779"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.4aS",
                    "product": {
                      "name": "3.16.4aS",
                      "product_id": "CSAFPID-220993"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.4bS",
                    "product": {
                      "name": "3.16.4bS",
                      "product_id": "CSAFPID-222257"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.4gS",
                    "product": {
                      "name": "3.16.4gS",
                      "product_id": "CSAFPID-222693"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.5S",
                    "product": {
                      "name": "3.16.5S",
                      "product_id": "CSAFPID-222694"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.4cS",
                    "product": {
                      "name": "3.16.4cS",
                      "product_id": "CSAFPID-222925"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.4dS",
                    "product": {
                      "name": "3.16.4dS",
                      "product_id": "CSAFPID-223252"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.4eS",
                    "product": {
                      "name": "3.16.4eS",
                      "product_id": "CSAFPID-224702"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.6S",
                    "product": {
                      "name": "3.16.6S",
                      "product_id": "CSAFPID-225099"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.5aS",
                    "product": {
                      "name": "3.16.5aS",
                      "product_id": "CSAFPID-225466"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.5bS",
                    "product": {
                      "name": "3.16.5bS",
                      "product_id": "CSAFPID-225832"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.7S",
                    "product": {
                      "name": "3.16.7S",
                      "product_id": "CSAFPID-228690"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.6bS",
                    "product": {
                      "name": "3.16.6bS",
                      "product_id": "CSAFPID-230303"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.7aS",
                    "product": {
                      "name": "3.16.7aS",
                      "product_id": "CSAFPID-233141"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.7bS",
                    "product": {
                      "name": "3.16.7bS",
                      "product_id": "CSAFPID-233447"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.8S",
                    "product": {
                      "name": "3.16.8S",
                      "product_id": "CSAFPID-238937"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.9S",
                    "product": {
                      "name": "3.16.9S",
                      "product_id": "CSAFPID-244912"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.10S",
                    "product": {
                      "name": "3.16.10S",
                      "product_id": "CSAFPID-258406"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.16S"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.17.0S",
                    "product": {
                      "name": "3.17.0S",
                      "product_id": "CSAFPID-212411"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.17.1S",
                    "product": {
                      "name": "3.17.1S",
                      "product_id": "CSAFPID-212412"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.17.2S",
                    "product": {
                      "name": "3.17.2S",
                      "product_id": "CSAFPID-217234"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.17.3S",
                    "product": {
                      "name": "3.17.3S",
                      "product_id": "CSAFPID-222942"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.17.4S",
                    "product": {
                      "name": "3.17.4S",
                      "product_id": "CSAFPID-227556"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.17S"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.2.1",
                    "product": {
                      "name": "16.2.1",
                      "product_id": "CSAFPID-213809"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.2.2",
                    "product": {
                      "name": "16.2.2",
                      "product_id": "CSAFPID-217253"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.2"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.3.1",
                    "product": {
                      "name": "16.3.1",
                      "product_id": "CSAFPID-213960"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.2",
                    "product": {
                      "name": "16.3.2",
                      "product_id": "CSAFPID-217255"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.3",
                    "product": {
                      "name": "16.3.3",
                      "product_id": "CSAFPID-217256"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.1a",
                    "product": {
                      "name": "16.3.1a",
                      "product_id": "CSAFPID-220802"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.4",
                    "product": {
                      "name": "16.3.4",
                      "product_id": "CSAFPID-222711"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.5",
                    "product": {
                      "name": "16.3.5",
                      "product_id": "CSAFPID-229124"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.6",
                    "product": {
                      "name": "16.3.6",
                      "product_id": "CSAFPID-231667"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.7",
                    "product": {
                      "name": "16.3.7",
                      "product_id": "CSAFPID-239264"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.8",
                    "product": {
                      "name": "16.3.8",
                      "product_id": "CSAFPID-251165"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.9",
                    "product": {
                      "name": "16.3.9",
                      "product_id": "CSAFPID-262389"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.10",
                    "product": {
                      "name": "16.3.10",
                      "product_id": "CSAFPID-273563"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.11",
                    "product": {
                      "name": "16.3.11",
                      "product_id": "CSAFPID-278402"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.3"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.4.1",
                    "product": {
                      "name": "16.4.1",
                      "product_id": "CSAFPID-214051"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.4.2",
                    "product": {
                      "name": "16.4.2",
                      "product_id": "CSAFPID-217257"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.4.3",
                    "product": {
                      "name": "16.4.3",
                      "product_id": "CSAFPID-231390"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.4"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.5.1",
                    "product": {
                      "name": "16.5.1",
                      "product_id": "CSAFPID-217259"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.5.1b",
                    "product": {
                      "name": "16.5.1b",
                      "product_id": "CSAFPID-226330"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.5.2",
                    "product": {
                      "name": "16.5.2",
                      "product_id": "CSAFPID-229187"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.5.3",
                    "product": {
                      "name": "16.5.3",
                      "product_id": "CSAFPID-232461"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.5"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.18.2aSP",
                    "product": {
                      "name": "3.18.2aSP",
                      "product_id": "CSAFPID-226160"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.18SP"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.6.1",
                    "product": {
                      "name": "16.6.1",
                      "product_id": "CSAFPID-218901"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.2",
                    "product": {
                      "name": "16.6.2",
                      "product_id": "CSAFPID-228706"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.3",
                    "product": {
                      "name": "16.6.3",
                      "product_id": "CSAFPID-231682"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.4",
                    "product": {
                      "name": "16.6.4",
                      "product_id": "CSAFPID-233155"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.5",
                    "product": {
                      "name": "16.6.5",
                      "product_id": "CSAFPID-241736"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.4s",
                    "product": {
                      "name": "16.6.4s",
                      "product_id": "CSAFPID-244900"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.6",
                    "product": {
                      "name": "16.6.6",
                      "product_id": "CSAFPID-252914"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.7",
                    "product": {
                      "name": "16.6.7",
                      "product_id": "CSAFPID-261241"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.8",
                    "product": {
                      "name": "16.6.8",
                      "product_id": "CSAFPID-277148"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.9",
                    "product": {
                      "name": "16.6.9",
                      "product_id": "CSAFPID-280801"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.10",
                    "product": {
                      "name": "16.6.10",
                      "product_id": "CSAFPID-283835"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.6"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.7.1",
                    "product": {
                      "name": "16.7.1",
                      "product_id": "CSAFPID-218903"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.7.2",
                    "product": {
                      "name": "16.7.2",
                      "product_id": "CSAFPID-236837"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.7.3",
                    "product": {
                      "name": "16.7.3",
                      "product_id": "CSAFPID-244070"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.7"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.8.1",
                    "product": {
                      "name": "16.8.1",
                      "product_id": "CSAFPID-218905"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.8.1s",
                    "product": {
                      "name": "16.8.1s",
                      "product_id": "CSAFPID-236834"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.8.2",
                    "product": {
                      "name": "16.8.2",
                      "product_id": "CSAFPID-244071"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.8.3",
                    "product": {
                      "name": "16.8.3",
                      "product_id": "CSAFPID-257984"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.8"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.9.1",
                    "product": {
                      "name": "16.9.1",
                      "product_id": "CSAFPID-225856"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.2",
                    "product": {
                      "name": "16.9.2",
                      "product_id": "CSAFPID-232008"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.1s",
                    "product": {
                      "name": "16.9.1s",
                      "product_id": "CSAFPID-244530"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.3",
                    "product": {
                      "name": "16.9.3",
                      "product_id": "CSAFPID-251075"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.2s",
                    "product": {
                      "name": "16.9.2s",
                      "product_id": "CSAFPID-252272"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.4",
                    "product": {
                      "name": "16.9.4",
                      "product_id": "CSAFPID-262390"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.3s",
                    "product": {
                      "name": "16.9.3s",
                      "product_id": "CSAFPID-262549"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.5",
                    "product": {
                      "name": "16.9.5",
                      "product_id": "CSAFPID-271798"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.6",
                    "product": {
                      "name": "16.9.6",
                      "product_id": "CSAFPID-277945"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.7",
                    "product": {
                      "name": "16.9.7",
                      "product_id": "CSAFPID-280651"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.8",
                    "product": {
                      "name": "16.9.8",
                      "product_id": "CSAFPID-280938"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.8a",
                    "product": {
                      "name": "16.9.8a",
                      "product_id": "CSAFPID-290562"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.9"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.10.1",
                    "product": {
                      "name": "16.10.1",
                      "product_id": "CSAFPID-225858"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.10.1a",
                    "product": {
                      "name": "16.10.1a",
                      "product_id": "CSAFPID-250629"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.10.1b",
                    "product": {
                      "name": "16.10.1b",
                      "product_id": "CSAFPID-252045"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.10.1s",
                    "product": {
                      "name": "16.10.1s",
                      "product_id": "CSAFPID-252913"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.10.1e",
                    "product": {
                      "name": "16.10.1e",
                      "product_id": "CSAFPID-257955"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.10.2",
                    "product": {
                      "name": "16.10.2",
                      "product_id": "CSAFPID-260917"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.10.3",
                    "product": {
                      "name": "16.10.3",
                      "product_id": "CSAFPID-273112"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.10"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.11.1",
                    "product": {
                      "name": "16.11.1",
                      "product_id": "CSAFPID-227918"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.11.1a",
                    "product": {
                      "name": "16.11.1a",
                      "product_id": "CSAFPID-252271"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.11.2",
                    "product": {
                      "name": "16.11.2",
                      "product_id": "CSAFPID-261240"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.11.1s",
                    "product": {
                      "name": "16.11.1s",
                      "product_id": "CSAFPID-261465"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.11.1c",
                    "product": {
                      "name": "16.11.1c",
                      "product_id": "CSAFPID-264096"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.11"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.12.1",
                    "product": {
                      "name": "16.12.1",
                      "product_id": "CSAFPID-227920"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.1s",
                    "product": {
                      "name": "16.12.1s",
                      "product_id": "CSAFPID-265735"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.1a",
                    "product": {
                      "name": "16.12.1a",
                      "product_id": "CSAFPID-265841"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.1c",
                    "product": {
                      "name": "16.12.1c",
                      "product_id": "CSAFPID-267110"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.2",
                    "product": {
                      "name": "16.12.2",
                      "product_id": "CSAFPID-267605"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.3",
                    "product": {
                      "name": "16.12.3",
                      "product_id": "CSAFPID-273445"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.8",
                    "product": {
                      "name": "16.12.8",
                      "product_id": "CSAFPID-273448"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.2s",
                    "product": {
                      "name": "16.12.2s",
                      "product_id": "CSAFPID-273509"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.2t",
                    "product": {
                      "name": "16.12.2t",
                      "product_id": "CSAFPID-275538"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.4",
                    "product": {
                      "name": "16.12.4",
                      "product_id": "CSAFPID-277147"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.3s",
                    "product": {
                      "name": "16.12.3s",
                      "product_id": "CSAFPID-277255"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.5",
                    "product": {
                      "name": "16.12.5",
                      "product_id": "CSAFPID-280463"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.6",
                    "product": {
                      "name": "16.12.6",
                      "product_id": "CSAFPID-280937"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.7",
                    "product": {
                      "name": "16.12.7",
                      "product_id": "CSAFPID-286031"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.14",
                    "product": {
                      "name": "16.12.14",
                      "product_id": "CSAFPID-305303"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.12"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.1.1",
                    "product": {
                      "name": "17.1.1",
                      "product_id": "CSAFPID-245377"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.1.1s",
                    "product": {
                      "name": "17.1.1s",
                      "product_id": "CSAFPID-274818"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.1.2",
                    "product": {
                      "name": "17.1.2",
                      "product_id": "CSAFPID-277338"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.1.1t",
                    "product": {
                      "name": "17.1.1t",
                      "product_id": "CSAFPID-277348"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.1.3",
                    "product": {
                      "name": "17.1.3",
                      "product_id": "CSAFPID-280652"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.1"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.2.1",
                    "product": {
                      "name": "17.2.1",
                      "product_id": "CSAFPID-251225"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.2.1r",
                    "product": {
                      "name": "17.2.1r",
                      "product_id": "CSAFPID-277194"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.2.1v",
                    "product": {
                      "name": "17.2.1v",
                      "product_id": "CSAFPID-278002"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.2.2",
                    "product": {
                      "name": "17.2.2",
                      "product_id": "CSAFPID-278504"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.2.3",
                    "product": {
                      "name": "17.2.3",
                      "product_id": "CSAFPID-280939"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.2"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.3.1",
                    "product": {
                      "name": "17.3.1",
                      "product_id": "CSAFPID-254712"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.2",
                    "product": {
                      "name": "17.3.2",
                      "product_id": "CSAFPID-277099"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.3",
                    "product": {
                      "name": "17.3.3",
                      "product_id": "CSAFPID-278019"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.1a",
                    "product": {
                      "name": "17.3.1a",
                      "product_id": "CSAFPID-279338"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.4",
                    "product": {
                      "name": "17.3.4",
                      "product_id": "CSAFPID-282028"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.5",
                    "product": {
                      "name": "17.3.5",
                      "product_id": "CSAFPID-282115"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.4a",
                    "product": {
                      "name": "17.3.4a",
                      "product_id": "CSAFPID-284178"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.6",
                    "product": {
                      "name": "17.3.6",
                      "product_id": "CSAFPID-284331"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.7",
                    "product": {
                      "name": "17.3.7",
                      "product_id": "CSAFPID-290671"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.8",
                    "product": {
                      "name": "17.3.8",
                      "product_id": "CSAFPID-295398"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.8a",
                    "product": {
                      "name": "17.3.8a",
                      "product_id": "CSAFPID-300847"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.3"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.4.1",
                    "product": {
                      "name": "17.4.1",
                      "product_id": "CSAFPID-262588"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.4.2",
                    "product": {
                      "name": "17.4.2",
                      "product_id": "CSAFPID-278020"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.4.1a",
                    "product": {
                      "name": "17.4.1a",
                      "product_id": "CSAFPID-280770"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.4.1b",
                    "product": {
                      "name": "17.4.1b",
                      "product_id": "CSAFPID-280899"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.4.1c",
                    "product": {
                      "name": "17.4.1c",
                      "product_id": "CSAFPID-282116"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.4"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.5.1",
                    "product": {
                      "name": "17.5.1",
                      "product_id": "CSAFPID-262590"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.5.1a",
                    "product": {
                      "name": "17.5.1a",
                      "product_id": "CSAFPID-282046"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.5.1b",
                    "product": {
                      "name": "17.5.1b",
                      "product_id": "CSAFPID-290596"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.5.1c",
                    "product": {
                      "name": "17.5.1c",
                      "product_id": "CSAFPID-292698"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.5"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.6.1",
                    "product": {
                      "name": "17.6.1",
                      "product_id": "CSAFPID-262592"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.2",
                    "product": {
                      "name": "17.6.2",
                      "product_id": "CSAFPID-282117"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.1a",
                    "product": {
                      "name": "17.6.1a",
                      "product_id": "CSAFPID-284179"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.3",
                    "product": {
                      "name": "17.6.3",
                      "product_id": "CSAFPID-286409"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.1y",
                    "product": {
                      "name": "17.6.1y",
                      "product_id": "CSAFPID-286477"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.3a",
                    "product": {
                      "name": "17.6.3a",
                      "product_id": "CSAFPID-286594"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.4",
                    "product": {
                      "name": "17.6.4",
                      "product_id": "CSAFPID-287087"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.5",
                    "product": {
                      "name": "17.6.5",
                      "product_id": "CSAFPID-290660"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.6",
                    "product": {
                      "name": "17.6.6",
                      "product_id": "CSAFPID-292656"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.6a",
                    "product": {
                      "name": "17.6.6a",
                      "product_id": "CSAFPID-300848"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.5a",
                    "product": {
                      "name": "17.6.5a",
                      "product_id": "CSAFPID-300850"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.7",
                    "product": {
                      "name": "17.6.7",
                      "product_id": "CSAFPID-300851"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.8",
                    "product": {
                      "name": "17.6.8",
                      "product_id": "CSAFPID-301722"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.8a",
                    "product": {
                      "name": "17.6.8a",
                      "product_id": "CSAFPID-302974"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.6"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.7.1",
                    "product": {
                      "name": "17.7.1",
                      "product_id": "CSAFPID-277357"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.7.1a",
                    "product": {
                      "name": "17.7.1a",
                      "product_id": "CSAFPID-285329"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.7.2",
                    "product": {
                      "name": "17.7.2",
                      "product_id": "CSAFPID-286534"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.7"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.10.1",
                    "product": {
                      "name": "17.10.1",
                      "product_id": "CSAFPID-278018"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.10.1a",
                    "product": {
                      "name": "17.10.1a",
                      "product_id": "CSAFPID-290580"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.10"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.8.1",
                    "product": {
                      "name": "17.8.1",
                      "product_id": "CSAFPID-278023"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.8.1a",
                    "product": {
                      "name": "17.8.1a",
                      "product_id": "CSAFPID-286486"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.8"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.9.1",
                    "product": {
                      "name": "17.9.1",
                      "product_id": "CSAFPID-278025"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.2",
                    "product": {
                      "name": "17.9.2",
                      "product_id": "CSAFPID-288221"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.1a",
                    "product": {
                      "name": "17.9.1a",
                      "product_id": "CSAFPID-288247"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.3",
                    "product": {
                      "name": "17.9.3",
                      "product_id": "CSAFPID-290674"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.2a",
                    "product": {
                      "name": "17.9.2a",
                      "product_id": "CSAFPID-290675"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.3a",
                    "product": {
                      "name": "17.9.3a",
                      "product_id": "CSAFPID-295198"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.4",
                    "product": {
                      "name": "17.9.4",
                      "product_id": "CSAFPID-295412"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.5",
                    "product": {
                      "name": "17.9.5",
                      "product_id": "CSAFPID-300263"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.4a",
                    "product": {
                      "name": "17.9.4a",
                      "product_id": "CSAFPID-300845"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.5a",
                    "product": {
                      "name": "17.9.5a",
                      "product_id": "CSAFPID-301278"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.5b",
                    "product": {
                      "name": "17.9.5b",
                      "product_id": "CSAFPID-301619"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.5c",
                    "product": {
                      "name": "17.9.5c",
                      "product_id": "CSAFPID-302644"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.5d",
                    "product": {
                      "name": "17.9.5d",
                      "product_id": "CSAFPID-302784"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.5e",
                    "product": {
                      "name": "17.9.5e",
                      "product_id": "CSAFPID-303047"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.5f",
                    "product": {
                      "name": "17.9.5f",
                      "product_id": "CSAFPID-303316"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.7b",
                    "product": {
                      "name": "17.9.7b",
                      "product_id": "CSAFPID-306388"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.9"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.11.1",
                    "product": {
                      "name": "17.11.1",
                      "product_id": "CSAFPID-286799"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.11.1a",
                    "product": {
                      "name": "17.11.1a",
                      "product_id": "CSAFPID-294838"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.11"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.12.1",
                    "product": {
                      "name": "17.12.1",
                      "product_id": "CSAFPID-286801"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.12.1a",
                    "product": {
                      "name": "17.12.1a",
                      "product_id": "CSAFPID-300012"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.12.2",
                    "product": {
                      "name": "17.12.2",
                      "product_id": "CSAFPID-300834"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.12.3",
                    "product": {
                      "name": "17.12.3",
                      "product_id": "CSAFPID-300936"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.12.2a",
                    "product": {
                      "name": "17.12.2a",
                      "product_id": "CSAFPID-300948"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.12.3a",
                    "product": {
                      "name": "17.12.3a",
                      "product_id": "CSAFPID-302628"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.12.5c",
                    "product": {
                      "name": "17.12.5c",
                      "product_id": "CSAFPID-306389"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.12"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.13.1",
                    "product": {
                      "name": "17.13.1",
                      "product_id": "CSAFPID-295359"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.13.1a",
                    "product": {
                      "name": "17.13.1a",
                      "product_id": "CSAFPID-300947"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.13"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.14.1",
                    "product": {
                      "name": "17.14.1",
                      "product_id": "CSAFPID-295361"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.14.1a",
                    "product": {
                      "name": "17.14.1a",
                      "product_id": "CSAFPID-301611"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.14"
              }
            ],
            "category": "product_family",
            "name": "Cisco IOS XE Software"
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-20192",
      "ids": [
        {
          "system_name": "Cisco Bug ID",
          "text": "CSCwi26594"
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Complete.",
          "title": "Affected Product Comprehensiveness"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-201495",
          "CSAFPID-206174",
          "CSAFPID-206175",
          "CSAFPID-206178",
          "CSAFPID-206180",
          "CSAFPID-206181",
          "CSAFPID-206191",
          "CSAFPID-206192",
          "CSAFPID-206193",
          "CSAFPID-210078",
          "CSAFPID-210079",
          "CSAFPID-210081",
          "CSAFPID-212268",
          "CSAFPID-212411",
          "CSAFPID-212412",
          "CSAFPID-213475",
          "CSAFPID-213477",
          "CSAFPID-213478",
          "CSAFPID-213557",
          "CSAFPID-213700",
          "CSAFPID-213776",
          "CSAFPID-213778",
          "CSAFPID-213779",
          "CSAFPID-213809",
          "CSAFPID-213960",
          "CSAFPID-214051",
          "CSAFPID-217234",
          "CSAFPID-217253",
          "CSAFPID-217255",
          "CSAFPID-217256",
          "CSAFPID-217257",
          "CSAFPID-217259",
          "CSAFPID-217262",
          "CSAFPID-217263",
          "CSAFPID-217264",
          "CSAFPID-218901",
          "CSAFPID-218903",
          "CSAFPID-218905",
          "CSAFPID-220688",
          "CSAFPID-220802",
          "CSAFPID-220993",
          "CSAFPID-222257",
          "CSAFPID-222693",
          "CSAFPID-222694",
          "CSAFPID-222711",
          "CSAFPID-222925",
          "CSAFPID-222942",
          "CSAFPID-223252",
          "CSAFPID-224702",
          "CSAFPID-225099",
          "CSAFPID-225466",
          "CSAFPID-225832",
          "CSAFPID-225856",
          "CSAFPID-225858",
          "CSAFPID-226160",
          "CSAFPID-226330",
          "CSAFPID-227556",
          "CSAFPID-227918",
          "CSAFPID-227920",
          "CSAFPID-227923",
          "CSAFPID-228690",
          "CSAFPID-228706",
          "CSAFPID-229124",
          "CSAFPID-229187",
          "CSAFPID-230303",
          "CSAFPID-231390",
          "CSAFPID-231454",
          "CSAFPID-231667",
          "CSAFPID-231682",
          "CSAFPID-232008",
          "CSAFPID-232461",
          "CSAFPID-233141",
          "CSAFPID-233155",
          "CSAFPID-233447",
          "CSAFPID-234928",
          "CSAFPID-236834",
          "CSAFPID-236837",
          "CSAFPID-238937",
          "CSAFPID-239264",
          "CSAFPID-241736",
          "CSAFPID-244070",
          "CSAFPID-244071",
          "CSAFPID-244530",
          "CSAFPID-244900",
          "CSAFPID-244912",
          "CSAFPID-245377",
          "CSAFPID-250629",
          "CSAFPID-251075",
          "CSAFPID-251165",
          "CSAFPID-251225",
          "CSAFPID-252045",
          "CSAFPID-252271",
          "CSAFPID-252272",
          "CSAFPID-252913",
          "CSAFPID-252914",
          "CSAFPID-254712",
          "CSAFPID-257955",
          "CSAFPID-257984",
          "CSAFPID-258406",
          "CSAFPID-260917",
          "CSAFPID-261240",
          "CSAFPID-261241",
          "CSAFPID-261465",
          "CSAFPID-262389",
          "CSAFPID-262390",
          "CSAFPID-262549",
          "CSAFPID-262588",
          "CSAFPID-262590",
          "CSAFPID-262592",
          "CSAFPID-264096",
          "CSAFPID-265735",
          "CSAFPID-265841",
          "CSAFPID-267110",
          "CSAFPID-267605",
          "CSAFPID-271798",
          "CSAFPID-273112",
          "CSAFPID-273445",
          "CSAFPID-273448",
          "CSAFPID-273509",
          "CSAFPID-273563",
          "CSAFPID-274818",
          "CSAFPID-275538",
          "CSAFPID-277099",
          "CSAFPID-277147",
          "CSAFPID-277148",
          "CSAFPID-277194",
          "CSAFPID-277255",
          "CSAFPID-277338",
          "CSAFPID-277348",
          "CSAFPID-277357",
          "CSAFPID-277945",
          "CSAFPID-278002",
          "CSAFPID-278018",
          "CSAFPID-278019",
          "CSAFPID-278020",
          "CSAFPID-278023",
          "CSAFPID-278025",
          "CSAFPID-278402",
          "CSAFPID-278504",
          "CSAFPID-279338",
          "CSAFPID-280463",
          "CSAFPID-280651",
          "CSAFPID-280652",
          "CSAFPID-280770",
          "CSAFPID-280801",
          "CSAFPID-280899",
          "CSAFPID-280937",
          "CSAFPID-280938",
          "CSAFPID-280939",
          "CSAFPID-282028",
          "CSAFPID-282046",
          "CSAFPID-282115",
          "CSAFPID-282116",
          "CSAFPID-282117",
          "CSAFPID-283835",
          "CSAFPID-284178",
          "CSAFPID-284179",
          "CSAFPID-284331",
          "CSAFPID-285329",
          "CSAFPID-286031",
          "CSAFPID-286409",
          "CSAFPID-286477",
          "CSAFPID-286486",
          "CSAFPID-286534",
          "CSAFPID-286594",
          "CSAFPID-286799",
          "CSAFPID-286801",
          "CSAFPID-287087",
          "CSAFPID-288221",
          "CSAFPID-288247",
          "CSAFPID-290562",
          "CSAFPID-290580",
          "CSAFPID-290596",
          "CSAFPID-290660",
          "CSAFPID-290671",
          "CSAFPID-290674",
          "CSAFPID-290675",
          "CSAFPID-292656",
          "CSAFPID-292698",
          "CSAFPID-294838",
          "CSAFPID-295198",
          "CSAFPID-295359",
          "CSAFPID-295361",
          "CSAFPID-295398",
          "CSAFPID-295412",
          "CSAFPID-300012",
          "CSAFPID-300263",
          "CSAFPID-300834",
          "CSAFPID-300845",
          "CSAFPID-300847",
          "CSAFPID-300848",
          "CSAFPID-300850",
          "CSAFPID-300851",
          "CSAFPID-300936",
          "CSAFPID-300947",
          "CSAFPID-300948",
          "CSAFPID-301278",
          "CSAFPID-301611",
          "CSAFPID-301619",
          "CSAFPID-301722",
          "CSAFPID-302628",
          "CSAFPID-302644",
          "CSAFPID-302784",
          "CSAFPID-302974",
          "CSAFPID-303047",
          "CSAFPID-303316",
          "CSAFPID-305303",
          "CSAFPID-306388",
          "CSAFPID-306389"
        ]
      },
      "release_date": "2025-05-07T16:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Cisco has released software updates that address this vulnerability.",
          "product_ids": [
            "CSAFPID-201495",
            "CSAFPID-206174",
            "CSAFPID-206175",
            "CSAFPID-206178",
            "CSAFPID-206180",
            "CSAFPID-206181",
            "CSAFPID-206191",
            "CSAFPID-206192",
            "CSAFPID-206193",
            "CSAFPID-210078",
            "CSAFPID-210079",
            "CSAFPID-210081",
            "CSAFPID-212268",
            "CSAFPID-212411",
            "CSAFPID-212412",
            "CSAFPID-213475",
            "CSAFPID-213477",
            "CSAFPID-213478",
            "CSAFPID-213557",
            "CSAFPID-213700",
            "CSAFPID-213776",
            "CSAFPID-213778",
            "CSAFPID-213779",
            "CSAFPID-213809",
            "CSAFPID-213960",
            "CSAFPID-214051",
            "CSAFPID-217234",
            "CSAFPID-217253",
            "CSAFPID-217255",
            "CSAFPID-217256",
            "CSAFPID-217257",
            "CSAFPID-217259",
            "CSAFPID-217262",
            "CSAFPID-217263",
            "CSAFPID-217264",
            "CSAFPID-218901",
            "CSAFPID-218903",
            "CSAFPID-218905",
            "CSAFPID-220688",
            "CSAFPID-220802",
            "CSAFPID-220993",
            "CSAFPID-222257",
            "CSAFPID-222693",
            "CSAFPID-222694",
            "CSAFPID-222711",
            "CSAFPID-222925",
            "CSAFPID-222942",
            "CSAFPID-223252",
            "CSAFPID-224702",
            "CSAFPID-225099",
            "CSAFPID-225466",
            "CSAFPID-225832",
            "CSAFPID-225856",
            "CSAFPID-225858",
            "CSAFPID-226160",
            "CSAFPID-226330",
            "CSAFPID-227556",
            "CSAFPID-227918",
            "CSAFPID-227920",
            "CSAFPID-227923",
            "CSAFPID-228690",
            "CSAFPID-228706",
            "CSAFPID-229124",
            "CSAFPID-229187",
            "CSAFPID-230303",
            "CSAFPID-231390",
            "CSAFPID-231454",
            "CSAFPID-231667",
            "CSAFPID-231682",
            "CSAFPID-232008",
            "CSAFPID-232461",
            "CSAFPID-233141",
            "CSAFPID-233155",
            "CSAFPID-233447",
            "CSAFPID-234928",
            "CSAFPID-236834",
            "CSAFPID-236837",
            "CSAFPID-238937",
            "CSAFPID-239264",
            "CSAFPID-241736",
            "CSAFPID-244070",
            "CSAFPID-244071",
            "CSAFPID-244530",
            "CSAFPID-244900",
            "CSAFPID-244912",
            "CSAFPID-245377",
            "CSAFPID-250629",
            "CSAFPID-251075",
            "CSAFPID-251165",
            "CSAFPID-251225",
            "CSAFPID-252045",
            "CSAFPID-252271",
            "CSAFPID-252272",
            "CSAFPID-252913",
            "CSAFPID-252914",
            "CSAFPID-254712",
            "CSAFPID-257955",
            "CSAFPID-257984",
            "CSAFPID-258406",
            "CSAFPID-260917",
            "CSAFPID-261240",
            "CSAFPID-261241",
            "CSAFPID-261465",
            "CSAFPID-262389",
            "CSAFPID-262390",
            "CSAFPID-262549",
            "CSAFPID-262588",
            "CSAFPID-262590",
            "CSAFPID-262592",
            "CSAFPID-264096",
            "CSAFPID-265735",
            "CSAFPID-265841",
            "CSAFPID-267110",
            "CSAFPID-267605",
            "CSAFPID-271798",
            "CSAFPID-273112",
            "CSAFPID-273445",
            "CSAFPID-273448",
            "CSAFPID-273509",
            "CSAFPID-273563",
            "CSAFPID-274818",
            "CSAFPID-275538",
            "CSAFPID-277099",
            "CSAFPID-277147",
            "CSAFPID-277148",
            "CSAFPID-277194",
            "CSAFPID-277255",
            "CSAFPID-277338",
            "CSAFPID-277348",
            "CSAFPID-277357",
            "CSAFPID-277945",
            "CSAFPID-278002",
            "CSAFPID-278018",
            "CSAFPID-278019",
            "CSAFPID-278020",
            "CSAFPID-278023",
            "CSAFPID-278025",
            "CSAFPID-278402",
            "CSAFPID-278504",
            "CSAFPID-279338",
            "CSAFPID-280463",
            "CSAFPID-280651",
            "CSAFPID-280652",
            "CSAFPID-280770",
            "CSAFPID-280801",
            "CSAFPID-280899",
            "CSAFPID-280937",
            "CSAFPID-280938",
            "CSAFPID-280939",
            "CSAFPID-282028",
            "CSAFPID-282046",
            "CSAFPID-282115",
            "CSAFPID-282116",
            "CSAFPID-282117",
            "CSAFPID-283835",
            "CSAFPID-284178",
            "CSAFPID-284179",
            "CSAFPID-284331",
            "CSAFPID-285329",
            "CSAFPID-286031",
            "CSAFPID-286409",
            "CSAFPID-286477",
            "CSAFPID-286486",
            "CSAFPID-286534",
            "CSAFPID-286594",
            "CSAFPID-286799",
            "CSAFPID-286801",
            "CSAFPID-287087",
            "CSAFPID-288221",
            "CSAFPID-288247",
            "CSAFPID-290562",
            "CSAFPID-290580",
            "CSAFPID-290596",
            "CSAFPID-290660",
            "CSAFPID-290671",
            "CSAFPID-290674",
            "CSAFPID-290675",
            "CSAFPID-292656",
            "CSAFPID-292698",
            "CSAFPID-294838",
            "CSAFPID-295198",
            "CSAFPID-295359",
            "CSAFPID-295361",
            "CSAFPID-295398",
            "CSAFPID-295412",
            "CSAFPID-300012",
            "CSAFPID-300263",
            "CSAFPID-300834",
            "CSAFPID-300845",
            "CSAFPID-300847",
            "CSAFPID-300848",
            "CSAFPID-300850",
            "CSAFPID-300851",
            "CSAFPID-300936",
            "CSAFPID-300947",
            "CSAFPID-300948",
            "CSAFPID-301278",
            "CSAFPID-301611",
            "CSAFPID-301619",
            "CSAFPID-301722",
            "CSAFPID-302628",
            "CSAFPID-302644",
            "CSAFPID-302784",
            "CSAFPID-302974",
            "CSAFPID-303047",
            "CSAFPID-303316",
            "CSAFPID-305303",
            "CSAFPID-306388",
            "CSAFPID-306389"
          ],
          "url": "https://software.cisco.com"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-201495",
            "CSAFPID-206174",
            "CSAFPID-206175",
            "CSAFPID-206178",
            "CSAFPID-206180",
            "CSAFPID-206181",
            "CSAFPID-206191",
            "CSAFPID-206192",
            "CSAFPID-206193",
            "CSAFPID-210078",
            "CSAFPID-210079",
            "CSAFPID-210081",
            "CSAFPID-212268",
            "CSAFPID-212411",
            "CSAFPID-212412",
            "CSAFPID-213475",
            "CSAFPID-213477",
            "CSAFPID-213478",
            "CSAFPID-213557",
            "CSAFPID-213700",
            "CSAFPID-213776",
            "CSAFPID-213778",
            "CSAFPID-213779",
            "CSAFPID-213809",
            "CSAFPID-213960",
            "CSAFPID-214051",
            "CSAFPID-217234",
            "CSAFPID-217253",
            "CSAFPID-217255",
            "CSAFPID-217256",
            "CSAFPID-217257",
            "CSAFPID-217259",
            "CSAFPID-217262",
            "CSAFPID-217263",
            "CSAFPID-217264",
            "CSAFPID-218901",
            "CSAFPID-218903",
            "CSAFPID-218905",
            "CSAFPID-220688",
            "CSAFPID-220802",
            "CSAFPID-220993",
            "CSAFPID-222257",
            "CSAFPID-222693",
            "CSAFPID-222694",
            "CSAFPID-222711",
            "CSAFPID-222925",
            "CSAFPID-222942",
            "CSAFPID-223252",
            "CSAFPID-224702",
            "CSAFPID-225099",
            "CSAFPID-225466",
            "CSAFPID-225832",
            "CSAFPID-225856",
            "CSAFPID-225858",
            "CSAFPID-226160",
            "CSAFPID-226330",
            "CSAFPID-227556",
            "CSAFPID-227918",
            "CSAFPID-227920",
            "CSAFPID-227923",
            "CSAFPID-228690",
            "CSAFPID-228706",
            "CSAFPID-229124",
            "CSAFPID-229187",
            "CSAFPID-230303",
            "CSAFPID-231390",
            "CSAFPID-231454",
            "CSAFPID-231667",
            "CSAFPID-231682",
            "CSAFPID-232008",
            "CSAFPID-232461",
            "CSAFPID-233141",
            "CSAFPID-233155",
            "CSAFPID-233447",
            "CSAFPID-234928",
            "CSAFPID-236834",
            "CSAFPID-236837",
            "CSAFPID-238937",
            "CSAFPID-239264",
            "CSAFPID-241736",
            "CSAFPID-244070",
            "CSAFPID-244071",
            "CSAFPID-244530",
            "CSAFPID-244900",
            "CSAFPID-244912",
            "CSAFPID-245377",
            "CSAFPID-250629",
            "CSAFPID-251075",
            "CSAFPID-251165",
            "CSAFPID-251225",
            "CSAFPID-252045",
            "CSAFPID-252271",
            "CSAFPID-252272",
            "CSAFPID-252913",
            "CSAFPID-252914",
            "CSAFPID-254712",
            "CSAFPID-257955",
            "CSAFPID-257984",
            "CSAFPID-258406",
            "CSAFPID-260917",
            "CSAFPID-261240",
            "CSAFPID-261241",
            "CSAFPID-261465",
            "CSAFPID-262389",
            "CSAFPID-262390",
            "CSAFPID-262549",
            "CSAFPID-262588",
            "CSAFPID-262590",
            "CSAFPID-262592",
            "CSAFPID-264096",
            "CSAFPID-265735",
            "CSAFPID-265841",
            "CSAFPID-267110",
            "CSAFPID-267605",
            "CSAFPID-271798",
            "CSAFPID-273112",
            "CSAFPID-273445",
            "CSAFPID-273448",
            "CSAFPID-273509",
            "CSAFPID-273563",
            "CSAFPID-274818",
            "CSAFPID-275538",
            "CSAFPID-277099",
            "CSAFPID-277147",
            "CSAFPID-277148",
            "CSAFPID-277194",
            "CSAFPID-277255",
            "CSAFPID-277338",
            "CSAFPID-277348",
            "CSAFPID-277357",
            "CSAFPID-277945",
            "CSAFPID-278002",
            "CSAFPID-278018",
            "CSAFPID-278019",
            "CSAFPID-278020",
            "CSAFPID-278023",
            "CSAFPID-278025",
            "CSAFPID-278402",
            "CSAFPID-278504",
            "CSAFPID-279338",
            "CSAFPID-280463",
            "CSAFPID-280651",
            "CSAFPID-280652",
            "CSAFPID-280770",
            "CSAFPID-280801",
            "CSAFPID-280899",
            "CSAFPID-280937",
            "CSAFPID-280938",
            "CSAFPID-280939",
            "CSAFPID-282028",
            "CSAFPID-282046",
            "CSAFPID-282115",
            "CSAFPID-282116",
            "CSAFPID-282117",
            "CSAFPID-283835",
            "CSAFPID-284178",
            "CSAFPID-284179",
            "CSAFPID-284331",
            "CSAFPID-285329",
            "CSAFPID-286031",
            "CSAFPID-286409",
            "CSAFPID-286477",
            "CSAFPID-286486",
            "CSAFPID-286534",
            "CSAFPID-286594",
            "CSAFPID-286799",
            "CSAFPID-286801",
            "CSAFPID-287087",
            "CSAFPID-288221",
            "CSAFPID-288247",
            "CSAFPID-290562",
            "CSAFPID-290580",
            "CSAFPID-290596",
            "CSAFPID-290660",
            "CSAFPID-290671",
            "CSAFPID-290674",
            "CSAFPID-290675",
            "CSAFPID-292656",
            "CSAFPID-292698",
            "CSAFPID-294838",
            "CSAFPID-295198",
            "CSAFPID-295359",
            "CSAFPID-295361",
            "CSAFPID-295398",
            "CSAFPID-295412",
            "CSAFPID-300012",
            "CSAFPID-300263",
            "CSAFPID-300834",
            "CSAFPID-300845",
            "CSAFPID-300847",
            "CSAFPID-300848",
            "CSAFPID-300850",
            "CSAFPID-300851",
            "CSAFPID-300936",
            "CSAFPID-300947",
            "CSAFPID-300948",
            "CSAFPID-301278",
            "CSAFPID-301611",
            "CSAFPID-301619",
            "CSAFPID-301722",
            "CSAFPID-302628",
            "CSAFPID-302644",
            "CSAFPID-302784",
            "CSAFPID-302974",
            "CSAFPID-303047",
            "CSAFPID-303316",
            "CSAFPID-305303",
            "CSAFPID-306388",
            "CSAFPID-306389"
          ]
        }
      ],
      "title": "Cisco IOS XE Software Internet Key Exchange Version 1 Denial of Service Vulnerability"
    }
  ]
}

FKIE_CVE-2025-20192

Vulnerability from fkie_nvd - Published: 2025-05-07 18:15 - Updated: 2026-06-17 08:41

Severity

7.7 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Summary

References

	URL	Tags
	psirt@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Cisco IOS XE Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.13.0S"
            },
            {
              "status": "affected",
              "version": "3.13.1S"
            },
            {
              "status": "affected",
              "version": "3.13.2S"
            },
            {
              "status": "affected",
              "version": "3.13.3S"
            },
            {
              "status": "affected",
              "version": "3.13.4S"
            },
            {
              "status": "affected",
              "version": "3.13.5S"
            },
            {
              "status": "affected",
              "version": "3.13.6S"
            },
            {
              "status": "affected",
              "version": "3.13.7S"
            },
            {
              "status": "affected",
              "version": "3.13.6aS"
            },
            {
              "status": "affected",
              "version": "3.13.8S"
            },
            {
              "status": "affected",
              "version": "3.13.9S"
            },
            {
              "status": "affected",
              "version": "3.13.10S"
            },
            {
              "status": "affected",
              "version": "3.14.0S"
            },
            {
              "status": "affected",
              "version": "3.14.1S"
            },
            {
              "status": "affected",
              "version": "3.14.2S"
            },
            {
              "status": "affected",
              "version": "3.14.3S"
            },
            {
              "status": "affected",
              "version": "3.14.4S"
            },
            {
              "status": "affected",
              "version": "3.15.0S"
            },
            {
              "status": "affected",
              "version": "3.15.1S"
            },
            {
              "status": "affected",
              "version": "3.15.2S"
            },
            {
              "status": "affected",
              "version": "3.15.1cS"
            },
            {
              "status": "affected",
              "version": "3.15.3S"
            },
            {
              "status": "affected",
              "version": "3.15.4S"
            },
            {
              "status": "affected",
              "version": "3.16.0S"
            },
            {
              "status": "affected",
              "version": "3.16.1aS"
            },
            {
              "status": "affected",
              "version": "3.16.2S"
            },
            {
              "status": "affected",
              "version": "3.16.0cS"
            },
            {
              "status": "affected",
              "version": "3.16.3S"
            },
            {
              "status": "affected",
              "version": "3.16.4aS"
            },
            {
              "status": "affected",
              "version": "3.16.4bS"
            },
            {
              "status": "affected",
              "version": "3.16.5S"
            },
            {
              "status": "affected",
              "version": "3.16.4dS"
            },
            {
              "status": "affected",
              "version": "3.16.6S"
            },
            {
              "status": "affected",
              "version": "3.16.7S"
            },
            {
              "status": "affected",
              "version": "3.16.6bS"
            },
            {
              "status": "affected",
              "version": "3.16.7aS"
            },
            {
              "status": "affected",
              "version": "3.16.7bS"
            },
            {
              "status": "affected",
              "version": "3.16.8S"
            },
            {
              "status": "affected",
              "version": "3.16.9S"
            },
            {
              "status": "affected",
              "version": "3.16.10S"
            },
            {
              "status": "affected",
              "version": "3.17.0S"
            },
            {
              "status": "affected",
              "version": "3.17.1S"
            },
            {
              "status": "affected",
              "version": "3.17.2S"
            },
            {
              "status": "affected",
              "version": "3.17.3S"
            },
            {
              "status": "affected",
              "version": "3.17.4S"
            },
            {
              "status": "affected",
              "version": "16.2.1"
            },
            {
              "status": "affected",
              "version": "16.2.2"
            },
            {
              "status": "affected",
              "version": "16.3.1"
            },
            {
              "status": "affected",
              "version": "16.3.2"
            },
            {
              "status": "affected",
              "version": "16.3.3"
            },
            {
              "status": "affected",
              "version": "16.3.1a"
            },
            {
              "status": "affected",
              "version": "16.3.4"
            },
            {
              "status": "affected",
              "version": "16.3.5"
            },
            {
              "status": "affected",
              "version": "16.3.6"
            },
            {
              "status": "affected",
              "version": "16.3.7"
            },
            {
              "status": "affected",
              "version": "16.3.8"
            },
            {
              "status": "affected",
              "version": "16.3.9"
            },
            {
              "status": "affected",
              "version": "16.3.10"
            },
            {
              "status": "affected",
              "version": "16.3.11"
            },
            {
              "status": "affected",
              "version": "16.4.1"
            },
            {
              "status": "affected",
              "version": "16.4.2"
            },
            {
              "status": "affected",
              "version": "16.4.3"
            },
            {
              "status": "affected",
              "version": "16.5.1"
            },
            {
              "status": "affected",
              "version": "16.5.1b"
            },
            {
              "status": "affected",
              "version": "16.5.2"
            },
            {
              "status": "affected",
              "version": "16.5.3"
            },
            {
              "status": "affected",
              "version": "3.18.2aSP"
            },
            {
              "status": "affected",
              "version": "16.6.1"
            },
            {
              "status": "affected",
              "version": "16.6.2"
            },
            {
              "status": "affected",
              "version": "16.6.3"
            },
            {
              "status": "affected",
              "version": "16.6.4"
            },
            {
              "status": "affected",
              "version": "16.6.5"
            },
            {
              "status": "affected",
              "version": "16.6.6"
            },
            {
              "status": "affected",
              "version": "16.6.7"
            },
            {
              "status": "affected",
              "version": "16.6.8"
            },
            {
              "status": "affected",
              "version": "16.6.9"
            },
            {
              "status": "affected",
              "version": "16.6.10"
            },
            {
              "status": "affected",
              "version": "16.7.1"
            },
            {
              "status": "affected",
              "version": "16.7.2"
            },
            {
              "status": "affected",
              "version": "16.7.3"
            },
            {
              "status": "affected",
              "version": "16.8.1"
            },
            {
              "status": "affected",
              "version": "16.8.1s"
            },
            {
              "status": "affected",
              "version": "16.8.2"
            },
            {
              "status": "affected",
              "version": "16.8.3"
            },
            {
              "status": "affected",
              "version": "16.9.1"
            },
            {
              "status": "affected",
              "version": "16.9.2"
            },
            {
              "status": "affected",
              "version": "16.9.1s"
            },
            {
              "status": "affected",
              "version": "16.9.3"
            },
            {
              "status": "affected",
              "version": "16.9.4"
            },
            {
              "status": "affected",
              "version": "16.9.5"
            },
            {
              "status": "affected",
              "version": "16.9.6"
            },
            {
              "status": "affected",
              "version": "16.9.7"
            },
            {
              "status": "affected",
              "version": "16.9.8"
            },
            {
              "status": "affected",
              "version": "16.10.1"
            },
            {
              "status": "affected",
              "version": "16.10.1a"
            },
            {
              "status": "affected",
              "version": "16.10.1b"
            },
            {
              "status": "affected",
              "version": "16.10.1s"
            },
            {
              "status": "affected",
              "version": "16.10.1e"
            },
            {
              "status": "affected",
              "version": "16.10.2"
            },
            {
              "status": "affected",
              "version": "16.10.3"
            },
            {
              "status": "affected",
              "version": "16.11.1"
            },
            {
              "status": "affected",
              "version": "16.11.1a"
            },
            {
              "status": "affected",
              "version": "16.11.2"
            },
            {
              "status": "affected",
              "version": "16.11.1s"
            },
            {
              "status": "affected",
              "version": "16.12.1"
            },
            {
              "status": "affected",
              "version": "16.12.1s"
            },
            {
              "status": "affected",
              "version": "16.12.1a"
            },
            {
              "status": "affected",
              "version": "16.12.1c"
            },
            {
              "status": "affected",
              "version": "16.12.2"
            },
            {
              "status": "affected",
              "version": "16.12.3"
            },
            {
              "status": "affected",
              "version": "16.12.8"
            },
            {
              "status": "affected",
              "version": "16.12.2s"
            },
            {
              "status": "affected",
              "version": "16.12.4"
            },
            {
              "status": "affected",
              "version": "16.12.3s"
            },
            {
              "status": "affected",
              "version": "16.12.5"
            },
            {
              "status": "affected",
              "version": "16.12.6"
            },
            {
              "status": "affected",
              "version": "16.12.7"
            },
            {
              "status": "affected",
              "version": "17.1.1"
            },
            {
              "status": "affected",
              "version": "17.1.1s"
            },
            {
              "status": "affected",
              "version": "17.1.1t"
            },
            {
              "status": "affected",
              "version": "17.1.3"
            },
            {
              "status": "affected",
              "version": "17.2.1"
            },
            {
              "status": "affected",
              "version": "17.2.1r"
            },
            {
              "status": "affected",
              "version": "17.2.1v"
            },
            {
              "status": "affected",
              "version": "17.2.2"
            },
            {
              "status": "affected",
              "version": "17.2.3"
            },
            {
              "status": "affected",
              "version": "17.3.1"
            },
            {
              "status": "affected",
              "version": "17.3.2"
            },
            {
              "status": "affected",
              "version": "17.3.3"
            },
            {
              "status": "affected",
              "version": "17.3.1a"
            },
            {
              "status": "affected",
              "version": "17.3.4"
            },
            {
              "status": "affected",
              "version": "17.3.5"
            },
            {
              "status": "affected",
              "version": "17.3.4a"
            },
            {
              "status": "affected",
              "version": "17.3.6"
            },
            {
              "status": "affected",
              "version": "17.3.7"
            },
            {
              "status": "affected",
              "version": "17.3.8"
            },
            {
              "status": "affected",
              "version": "17.3.8a"
            },
            {
              "status": "affected",
              "version": "17.4.1"
            },
            {
              "status": "affected",
              "version": "17.4.2"
            },
            {
              "status": "affected",
              "version": "17.4.1a"
            },
            {
              "status": "affected",
              "version": "17.4.1b"
            },
            {
              "status": "affected",
              "version": "17.5.1"
            },
            {
              "status": "affected",
              "version": "17.5.1a"
            },
            {
              "status": "affected",
              "version": "17.6.1"
            },
            {
              "status": "affected",
              "version": "17.6.2"
            },
            {
              "status": "affected",
              "version": "17.6.1a"
            },
            {
              "status": "affected",
              "version": "17.6.3"
            },
            {
              "status": "affected",
              "version": "17.6.1y"
            },
            {
              "status": "affected",
              "version": "17.6.3a"
            },
            {
              "status": "affected",
              "version": "17.6.4"
            },
            {
              "status": "affected",
              "version": "17.6.5"
            },
            {
              "status": "affected",
              "version": "17.6.6"
            },
            {
              "status": "affected",
              "version": "17.6.6a"
            },
            {
              "status": "affected",
              "version": "17.6.5a"
            },
            {
              "status": "affected",
              "version": "17.6.7"
            },
            {
              "status": "affected",
              "version": "17.6.8"
            },
            {
              "status": "affected",
              "version": "17.6.8a"
            },
            {
              "status": "affected",
              "version": "17.7.1"
            },
            {
              "status": "affected",
              "version": "17.7.1a"
            },
            {
              "status": "affected",
              "version": "17.7.2"
            },
            {
              "status": "affected",
              "version": "17.10.1"
            },
            {
              "status": "affected",
              "version": "17.10.1a"
            },
            {
              "status": "affected",
              "version": "17.8.1"
            },
            {
              "status": "affected",
              "version": "17.8.1a"
            },
            {
              "status": "affected",
              "version": "17.9.1"
            },
            {
              "status": "affected",
              "version": "17.9.2"
            },
            {
              "status": "affected",
              "version": "17.9.1a"
            },
            {
              "status": "affected",
              "version": "17.9.3"
            },
            {
              "status": "affected",
              "version": "17.9.2a"
            },
            {
              "status": "affected",
              "version": "17.9.3a"
            },
            {
              "status": "affected",
              "version": "17.9.4"
            },
            {
              "status": "affected",
              "version": "17.9.5"
            },
            {
              "status": "affected",
              "version": "17.9.4a"
            },
            {
              "status": "affected",
              "version": "17.9.5a"
            },
            {
              "status": "affected",
              "version": "17.9.5b"
            },
            {
              "status": "affected",
              "version": "17.9.5e"
            },
            {
              "status": "affected",
              "version": "17.9.5f"
            },
            {
              "status": "affected",
              "version": "17.11.1"
            },
            {
              "status": "affected",
              "version": "17.11.1a"
            },
            {
              "status": "affected",
              "version": "17.12.1"
            },
            {
              "status": "affected",
              "version": "17.12.1a"
            },
            {
              "status": "affected",
              "version": "17.12.2"
            },
            {
              "status": "affected",
              "version": "17.12.3"
            },
            {
              "status": "affected",
              "version": "17.12.2a"
            },
            {
              "status": "affected",
              "version": "17.12.3a"
            },
            {
              "status": "affected",
              "version": "17.13.1"
            },
            {
              "status": "affected",
              "version": "17.13.1a"
            },
            {
              "status": "affected",
              "version": "17.14.1"
            },
            {
              "status": "affected",
              "version": "17.14.1a"
            }
          ]
        }
      ],
      "source": "psirt@cisco.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.\r\n\r This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en la implementaci\u00f3n de Intercambio de Claves por Internet versi\u00f3n 1 (IKEv1) del software Cisco IOS XE podr\u00eda permitir que un atacante remoto autenticado provoque una denegaci\u00f3n de servicio (DoS). El atacante debe tener credenciales VPN IKEv1 v\u00e1lidas para explotar esta vulnerabilidad. Esta vulnerabilidad se debe a una validaci\u00f3n incorrecta de los par\u00e1metros de fase 2 de IKEv1 antes de que la solicitud de creaci\u00f3n de la asociaci\u00f3n de seguridad IPsec se transfiera al acelerador criptogr\u00e1fico de hardware de un dispositivo afectado. Un atacante podr\u00eda explotar esta vulnerabilidad enviando mensajes IKEv1 manipulados al dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante provocar la recarga del dispositivo."
    }
  ],
  "id": "CVE-2025-20192",
  "lastModified": "2026-06-17T08:41:01.700",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.7,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.1,
        "impactScore": 4.0,
        "source": "psirt@cisco.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-20192",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-05-07T18:56:00.580521Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-05-07T18:15:39.280",
  "references": [
    {
      "source": "psirt@cisco.com",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-232"
        }
      ],
      "source": "psirt@cisco.com",
      "type": "Secondary"
    }
  ]
}

GHSA-FFCC-CQG6-6F7V

Vulnerability from github – Published: 2025-05-07 18:30 – Updated: 2025-05-07 18:30

Details

This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.

Severity

7.7 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-20192"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-232"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-05-07T18:15:39Z",
    "severity": "HIGH"
  },
  "details": "A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability.\n\n This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.",
  "id": "GHSA-ffcc-cqg6-6f7v",
  "modified": "2025-05-07T18:30:49Z",
  "published": "2025-05-07T18:30:49Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20192"
    },
    {
      "type": "WEB",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2025-0146

Vulnerability from csaf_ncscnl - Published: 2025-05-08 08:43 - Updated: 2025-05-08 08:43

Summary

Kwetsbaarheden verholpen in Cisco IOS XE Software

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Cisco heeft kwetsbaarheden verholpen in Cisco IOS XE Software.

Interpretaties: De kwetsbaarheden in Cisco IOS XE Software omvatten verschillende problemen, waaronder onvoldoende invoervalidatie en onjuist geheugenbeheer. Deze kwetsbaarheden kunnen worden misbruikt door ongeauthenticeerde aanvallers om Denial-of-Service (DoS) situaties te veroorzaken, ongeautoriseerde toegang te verkrijgen, en zelfs om configuraties te manipuleren. Kwetsbare systemen kunnen onverwacht opnieuw opstarten of kunnen worden blootgesteld aan ongeautoriseerde commando-injectie-aanvallen, wat de integriteit en beschikbaarheid van netwerken in gevaar kan brengen.

Oplossingen: Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-762: Mismatched Memory Management Routines

CWE-805: Buffer Access with Incorrect Length Value

CWE-347: Improper Verification of Cryptographic Signature

CWE-232: Improper Handling of Undefined Values

CWE-798: Use of Hard-coded Credentials

CWE-352: Cross-Site Request Forgery (CSRF)

CWE-284: Improper Access Control

CWE-400: Uncontrolled Resource Consumption

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-787: Out-of-bounds Write

CWE-789: Memory Allocation with Excessive Size Value

CWE-20: Improper Input Validation

CVE-2025-20137

4.7 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

CWE-284 - Improper Access Control

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20140

7.4 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-789 - Memory Allocation with Excessive Size Value

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20154

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20162

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20181

6.8 (Medium)


                        
                          CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20182

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20186

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20188

10.0 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE-798 - Use of Hard-coded Credentials

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20189

7.4 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-762 - Mismatched Memory Management Routines

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20190

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CWE-284 - Improper Access Control

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20192

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-232 - Improper Handling of Undefined Values

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20194

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20202

7.4 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-805 - Buffer Access with Incorrect Length Value

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

References

23 references

URL	Category
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Cisco heeft kwetsbaarheden verholpen in Cisco IOS XE Software.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden in Cisco IOS XE Software omvatten verschillende problemen, waaronder onvoldoende invoervalidatie en onjuist geheugenbeheer. Deze kwetsbaarheden kunnen worden misbruikt door ongeauthenticeerde aanvallers om Denial-of-Service (DoS) situaties te veroorzaken, ongeautoriseerde toegang te verkrijgen, en zelfs om configuraties te manipuleren. Kwetsbare systemen kunnen onverwacht opnieuw opstarten of kunnen worden blootgesteld aan ongeautoriseerde commando-injectie-aanvallen, wat de integriteit en beschikbaarheid van netwerken in gevaar kan brengen.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Mismatched Memory Management Routines",
        "title": "CWE-762"
      },
      {
        "category": "general",
        "text": "Buffer Access with Incorrect Length Value",
        "title": "CWE-805"
      },
      {
        "category": "general",
        "text": "Improper Verification of Cryptographic Signature",
        "title": "CWE-347"
      },
      {
        "category": "general",
        "text": "Improper Handling of Undefined Values",
        "title": "CWE-232"
      },
      {
        "category": "general",
        "text": "Use of Hard-coded Credentials",
        "title": "CWE-798"
      },
      {
        "category": "general",
        "text": "Cross-Site Request Forgery (CSRF)",
        "title": "CWE-352"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
        "title": "CWE-78"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Memory Allocation with Excessive Size Value",
        "title": "CWE-789"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-user-del-hQxMpUDj"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-file-uplpd-rHZG9UfC"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Cisco IOS XE Software",
    "tracking": {
      "current_release_date": "2025-05-08T08:43:57.415709Z",
      "generator": {
        "date": "2025-02-25T15:15:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.0"
        }
      },
      "id": "NCSC-2025-0146",
      "initial_release_date": "2025-05-08T08:43:57.415709Z",
      "revision_history": [
        {
          "date": "2025-05-08T08:43:57.415709Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.1.3",
                "product": {
                  "name": "vers:cisco/16.1.3",
                  "product_id": "CSAFPID-2714930"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.10.3",
                "product": {
                  "name": "vers:cisco/16.10.3",
                  "product_id": "CSAFPID-2715313"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.11.2",
                "product": {
                  "name": "vers:cisco/16.11.2",
                  "product_id": "CSAFPID-2715043"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.12.9",
                "product": {
                  "name": "vers:cisco/16.12.9",
                  "product_id": "CSAFPID-2715520"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.10bs",
                "product": {
                  "name": "vers:cisco/3.16.10bs",
                  "product_id": "CSAFPID-2715459"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.10s",
                "product": {
                  "name": "vers:cisco/3.16.10s",
                  "product_id": "CSAFPID-2715039"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.2.2",
                "product": {
                  "name": "vers:cisco/16.2.2",
                  "product_id": "CSAFPID-2714932"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.3.11",
                "product": {
                  "name": "vers:cisco/16.3.11",
                  "product_id": "CSAFPID-2715445"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.4.3",
                "product": {
                  "name": "vers:cisco/16.4.3",
                  "product_id": "CSAFPID-2715031"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.5.3",
                "product": {
                  "name": "vers:cisco/16.5.3",
                  "product_id": "CSAFPID-2715164"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.6.10",
                "product": {
                  "name": "vers:cisco/16.6.10",
                  "product_id": "CSAFPID-2715478"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.7bs",
                "product": {
                  "name": "vers:cisco/3.16.7bs",
                  "product_id": "CSAFPID-2715170"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.7s",
                "product": {
                  "name": "vers:cisco/3.16.7s",
                  "product_id": "CSAFPID-2715017"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.8.3",
                "product": {
                  "name": "vers:cisco/16.8.3",
                  "product_id": "CSAFPID-2714865"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.9s",
                "product": {
                  "name": "vers:cisco/3.16.9s",
                  "product_id": "CSAFPID-2714842"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.10.9s",
                "product": {
                  "name": "vers:cisco/3.10.9s",
                  "product_id": "CSAFPID-2714989"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.11.9e",
                "product": {
                  "name": "vers:cisco/3.11.9e",
                  "product_id": "CSAFPID-2715536"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.12.4s",
                "product": {
                  "name": "vers:cisco/3.12.4s",
                  "product_id": "CSAFPID-2714784"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.13.9s",
                "product": {
                  "name": "vers:cisco/3.13.9s",
                  "product_id": "CSAFPID-2715032"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.14.4s",
                "product": {
                  "name": "vers:cisco/3.14.4s",
                  "product_id": "CSAFPID-2714746"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.15.4s",
                "product": {
                  "name": "vers:cisco/3.15.4s",
                  "product_id": "CSAFPID-2714941"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.2as",
                "product": {
                  "name": "vers:cisco/3.16.2as",
                  "product_id": "CSAFPID-2714791"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.2bs",
                "product": {
                  "name": "vers:cisco/3.16.2bs",
                  "product_id": "CSAFPID-2714942"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.2s",
                "product": {
                  "name": "vers:cisco/3.16.2s",
                  "product_id": "CSAFPID-2714788"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.3as",
                "product": {
                  "name": "vers:cisco/3.16.3as",
                  "product_id": "CSAFPID-2714943"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.3s",
                "product": {
                  "name": "vers:cisco/3.16.3s",
                  "product_id": "CSAFPID-2714798"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4s",
                "product": {
                  "name": "vers:cisco/3.16.4s",
                  "product_id": "CSAFPID-2714944"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4gs",
                "product": {
                  "name": "vers:cisco/3.16.4gs",
                  "product_id": "CSAFPID-2714974"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4es",
                "product": {
                  "name": "vers:cisco/3.16.4es",
                  "product_id": "CSAFPID-2714985"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4ds",
                "product": {
                  "name": "vers:cisco/3.16.4ds",
                  "product_id": "CSAFPID-2714983"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4cs",
                "product": {
                  "name": "vers:cisco/3.16.4cs",
                  "product_id": "CSAFPID-2714978"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4bs",
                "product": {
                  "name": "vers:cisco/3.16.4bs",
                  "product_id": "CSAFPID-2714971"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4as",
                "product": {
                  "name": "vers:cisco/3.16.4as",
                  "product_id": "CSAFPID-2714967"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.5as",
                "product": {
                  "name": "vers:cisco/3.16.5as",
                  "product_id": "CSAFPID-2714992"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.5bs",
                "product": {
                  "name": "vers:cisco/3.16.5bs",
                  "product_id": "CSAFPID-2714996"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.5s",
                "product": {
                  "name": "vers:cisco/3.16.5s",
                  "product_id": "CSAFPID-2714975"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.6bs",
                "product": {
                  "name": "vers:cisco/3.16.6bs",
                  "product_id": "CSAFPID-2715025"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.6s",
                "product": {
                  "name": "vers:cisco/3.16.6s",
                  "product_id": "CSAFPID-2714987"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.7as",
                "product": {
                  "name": "vers:cisco/3.16.7as",
                  "product_id": "CSAFPID-2715168"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.8s",
                "product": {
                  "name": "vers:cisco/3.16.8s",
                  "product_id": "CSAFPID-2715178"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.1as",
                "product": {
                  "name": "vers:cisco/3.16.1as",
                  "product_id": "CSAFPID-2714787"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.1s",
                "product": {
                  "name": "vers:cisco/3.16.1s",
                  "product_id": "CSAFPID-2714773"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco IOS XE Software"
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-20137",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20137",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20137.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20137"
    },
    {
      "cve": "CVE-2025-20140",
      "cwe": {
        "id": "CWE-789",
        "name": "Memory Allocation with Excessive Size Value"
      },
      "notes": [
        {
          "category": "other",
          "text": "Memory Allocation with Excessive Size Value",
          "title": "CWE-789"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20140",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20140.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20140"
    },
    {
      "cve": "CVE-2025-20154",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20154",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20154.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20154"
    },
    {
      "cve": "CVE-2025-20162",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20162",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20162.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20162"
    },
    {
      "cve": "CVE-2025-20181",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Verification of Cryptographic Signature",
          "title": "CWE-347"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20181",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20181.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20181"
    },
    {
      "cve": "CVE-2025-20182",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20182",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20182.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20182"
    },
    {
      "cve": "CVE-2025-20186",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "title": "CWE-78"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20186",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20186.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20186"
    },
    {
      "cve": "CVE-2025-20188",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Hard-coded Credentials",
          "title": "CWE-798"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20188",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20188.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20188"
    },
    {
      "cve": "CVE-2025-20189",
      "cwe": {
        "id": "CWE-762",
        "name": "Mismatched Memory Management Routines"
      },
      "notes": [
        {
          "category": "other",
          "text": "Mismatched Memory Management Routines",
          "title": "CWE-762"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20189",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20189.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20189"
    },
    {
      "cve": "CVE-2025-20190",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20190",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20190.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20190"
    },
    {
      "cve": "CVE-2025-20192",
      "cwe": {
        "id": "CWE-232",
        "name": "Improper Handling of Undefined Values"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Handling of Undefined Values",
          "title": "CWE-232"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20192",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20192.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20192"
    },
    {
      "cve": "CVE-2025-20194",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "title": "CWE-78"
        },
        {
          "category": "other",
          "text": "Cross-Site Request Forgery (CSRF)",
          "title": "CWE-352"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20194",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20194.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20194"
    },
    {
      "cve": "CVE-2025-20202",
      "cwe": {
        "id": "CWE-805",
        "name": "Buffer Access with Incorrect Length Value"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Access with Incorrect Length Value",
          "title": "CWE-805"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20202",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20202.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20202"
    }
  ]
}

WID-SEC-W-2025-0979

Vulnerability from csaf_certbund - Published: 2025-05-07 22:00 - Updated: 2025-05-07 22:00

Summary

Cisco IOS XE Software: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.

Angriff: Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco IOS XE Software ausnutzen, um Dateien zu manipulieren, erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen und vertrauliche Informationen preiszugeben.

Betroffene Betriebssysteme: - CISCO Appliance

CVE-2025-20155

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Cisco IOS XE Software Cisco / IOS XE	`cpe:/o:cisco:ios_xe:software`	Software

CVE-2025-20162

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Cisco IOS XE Software Cisco / IOS XE	`cpe:/o:cisco:ios_xe:software`	Software

CVE-2025-20192

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Cisco IOS XE Software Cisco / IOS XE	`cpe:/o:cisco:ios_xe:software`	Software

CVE-2025-20214

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Cisco IOS XE Software Cisco / IOS XE	`cpe:/o:cisco:ios_xe:software`	Software

CVE-2025-20197

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Cisco IOS XE Software Cisco / IOS XE	`cpe:/o:cisco:ios_xe:software`	Software

CVE-2025-20198

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Cisco IOS XE Software Cisco / IOS XE	`cpe:/o:cisco:ios_xe:software`	Software

CVE-2025-20199

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Cisco IOS XE Software Cisco / IOS XE	`cpe:/o:cisco:ios_xe:software`	Software

CVE-2025-20200

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Cisco IOS XE Software Cisco / IOS XE	`cpe:/o:cisco:ios_xe:software`	Software

CVE-2025-20201

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Cisco IOS XE Software Cisco / IOS XE	`cpe:/o:cisco:ios_xe:software`	Software

References

7 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das f\u00fcr Cisco Ger\u00e4te wie z. B. Router und Switches eingesetzt wird.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco IOS XE Software ausnutzen, um Dateien zu manipulieren, erh\u00f6hte Rechte zu erlangen, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und vertrauliche Informationen preiszugeben.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- CISCO Appliance",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-0979 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0979.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-0979 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0979"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-iosxe-privesc-su7scvdp vom 2025-05-07",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-privesc-su7scvdp"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-bootstrap-KfgxYgdh vom 2025-05-07",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bootstrap-KfgxYgdh"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks vom 2025-05-07",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-iosxe-ikev1-dos-XHk3HzFC vom 2025-05-07",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-netconf-nacm-bypass-TGZV9pmQ vom 2025-05-07",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-netconf-nacm-bypass-TGZV9pmQ"
      }
    ],
    "source_lang": "en-US",
    "title": "Cisco IOS XE Software: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-05-07T22:00:00.000+00:00",
      "generator": {
        "date": "2025-05-08T10:59:15.841+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2025-0979",
      "initial_release_date": "2025-05-07T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-05-07T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "Software",
                "product": {
                  "name": "Cisco IOS XE Software",
                  "product_id": "T043497",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:cisco:ios_xe:software"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "IOS XE"
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-20155",
      "product_status": {
        "known_affected": [
          "T043497"
        ]
      },
      "release_date": "2025-05-07T22:00:00.000+00:00",
      "title": "CVE-2025-20155"
    },
    {
      "cve": "CVE-2025-20162",
      "product_status": {
        "known_affected": [
          "T043497"
        ]
      },
      "release_date": "2025-05-07T22:00:00.000+00:00",
      "title": "CVE-2025-20162"
    },
    {
      "cve": "CVE-2025-20192",
      "product_status": {
        "known_affected": [
          "T043497"
        ]
      },
      "release_date": "2025-05-07T22:00:00.000+00:00",
      "title": "CVE-2025-20192"
    },
    {
      "cve": "CVE-2025-20214",
      "product_status": {
        "known_affected": [
          "T043497"
        ]
      },
      "release_date": "2025-05-07T22:00:00.000+00:00",
      "title": "CVE-2025-20214"
    },
    {
      "cve": "CVE-2025-20197",
      "product_status": {
        "known_affected": [
          "T043497"
        ]
      },
      "release_date": "2025-05-07T22:00:00.000+00:00",
      "title": "CVE-2025-20197"
    },
    {
      "cve": "CVE-2025-20198",
      "product_status": {
        "known_affected": [
          "T043497"
        ]
      },
      "release_date": "2025-05-07T22:00:00.000+00:00",
      "title": "CVE-2025-20198"
    },
    {
      "cve": "CVE-2025-20199",
      "product_status": {
        "known_affected": [
          "T043497"
        ]
      },
      "release_date": "2025-05-07T22:00:00.000+00:00",
      "title": "CVE-2025-20199"
    },
    {
      "cve": "CVE-2025-20200",
      "product_status": {
        "known_affected": [
          "T043497"
        ]
      },
      "release_date": "2025-05-07T22:00:00.000+00:00",
      "title": "CVE-2025-20200"
    },
    {
      "cve": "CVE-2025-20201",
      "product_status": {
        "known_affected": [
          "T043497"
        ]
      },
      "release_date": "2025-05-07T22:00:00.000+00:00",
      "title": "CVE-2025-20201"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-20192 (GCVE-0-2025-20192)

Solutions

Solutions

Tags

Sightings

Nomenclature