Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-20162 (GCVE-0-2025-20162)
Vulnerability from cvelistv5 – Published: 2025-05-07 17:38 – Updated: 2025-05-07 19:42
VLAI
EPSS
Summary
A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service (DoS) condition.
This vulnerability is due to improper handling of DHCP request packets. An attacker could exploit this vulnerability by sending DHCP request packets to an affected device. A successful exploit could allow the attacker to cause packets to wedge in the queue, creating a DoS condition for downstream devices of the affected system and requiring that the system restart to drain the queue.
Note: This vulnerability can be exploited with either unicast or broadcast DHCP packets on a VLAN that does not have DHCP snooping enabled.
Severity
8.6 (High)
CWE
- CWE-400 - Uncontrolled Resource Consumption
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Cisco | Cisco IOS XE Software |
Affected:
16.11.1
Affected: 16.11.1a Affected: 16.11.2 Affected: 16.11.1s Affected: 16.12.1 Affected: 16.12.1s Affected: 16.12.1a Affected: 16.12.1c Affected: 16.12.2 Affected: 16.12.3 Affected: 16.12.8 Affected: 16.12.2s Affected: 16.12.4 Affected: 16.12.3s Affected: 16.12.5 Affected: 16.12.6 Affected: 16.12.7 Affected: 17.1.1 Affected: 17.1.1s Affected: 17.1.1t Affected: 17.1.3 Affected: 17.2.1 Affected: 17.2.1r Affected: 17.2.1v Affected: 17.2.2 Affected: 17.2.3 Affected: 17.3.1 Affected: 17.3.2 Affected: 17.3.3 Affected: 17.3.1a Affected: 17.3.4 Affected: 17.3.5 Affected: 17.3.4a Affected: 17.3.6 Affected: 17.3.7 Affected: 17.3.8 Affected: 17.3.8a Affected: 17.4.1 Affected: 17.4.2 Affected: 17.4.1a Affected: 17.4.1b Affected: 17.5.1 Affected: 17.5.1a Affected: 17.6.1 Affected: 17.6.2 Affected: 17.6.1a Affected: 17.6.3 Affected: 17.6.1y Affected: 17.6.3a Affected: 17.6.4 Affected: 17.6.5 Affected: 17.6.6 Affected: 17.6.6a Affected: 17.6.5a Affected: 17.6.7 Affected: 17.6.8 Affected: 17.6.8a Affected: 17.7.1 Affected: 17.7.1a Affected: 17.7.2 Affected: 17.10.1 Affected: 17.10.1a Affected: 17.8.1 Affected: 17.8.1a Affected: 17.9.1 Affected: 17.9.2 Affected: 17.9.1a Affected: 17.9.3 Affected: 17.9.2a Affected: 17.9.3a Affected: 17.9.4 Affected: 17.9.5 Affected: 17.9.4a Affected: 17.9.5a Affected: 17.9.6 Affected: 17.9.5e Affected: 17.9.5f Affected: 17.11.1 Affected: 17.11.1a Affected: 17.12.1 Affected: 17.12.1a Affected: 17.12.2 Affected: 17.12.3 Affected: 17.12.4 Affected: 17.12.3a Affected: 17.12.4a Affected: 17.12.4b Affected: 17.13.1 Affected: 17.13.1a Affected: 17.14.1 Affected: 17.14.1a Affected: 17.15.1 Affected: 17.15.1a |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-20162",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-05-07T18:56:53.926637Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-05-07T19:42:11.086Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Cisco IOS XE Software",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "16.11.1"
},
{
"status": "affected",
"version": "16.11.1a"
},
{
"status": "affected",
"version": "16.11.2"
},
{
"status": "affected",
"version": "16.11.1s"
},
{
"status": "affected",
"version": "16.12.1"
},
{
"status": "affected",
"version": "16.12.1s"
},
{
"status": "affected",
"version": "16.12.1a"
},
{
"status": "affected",
"version": "16.12.1c"
},
{
"status": "affected",
"version": "16.12.2"
},
{
"status": "affected",
"version": "16.12.3"
},
{
"status": "affected",
"version": "16.12.8"
},
{
"status": "affected",
"version": "16.12.2s"
},
{
"status": "affected",
"version": "16.12.4"
},
{
"status": "affected",
"version": "16.12.3s"
},
{
"status": "affected",
"version": "16.12.5"
},
{
"status": "affected",
"version": "16.12.6"
},
{
"status": "affected",
"version": "16.12.7"
},
{
"status": "affected",
"version": "17.1.1"
},
{
"status": "affected",
"version": "17.1.1s"
},
{
"status": "affected",
"version": "17.1.1t"
},
{
"status": "affected",
"version": "17.1.3"
},
{
"status": "affected",
"version": "17.2.1"
},
{
"status": "affected",
"version": "17.2.1r"
},
{
"status": "affected",
"version": "17.2.1v"
},
{
"status": "affected",
"version": "17.2.2"
},
{
"status": "affected",
"version": "17.2.3"
},
{
"status": "affected",
"version": "17.3.1"
},
{
"status": "affected",
"version": "17.3.2"
},
{
"status": "affected",
"version": "17.3.3"
},
{
"status": "affected",
"version": "17.3.1a"
},
{
"status": "affected",
"version": "17.3.4"
},
{
"status": "affected",
"version": "17.3.5"
},
{
"status": "affected",
"version": "17.3.4a"
},
{
"status": "affected",
"version": "17.3.6"
},
{
"status": "affected",
"version": "17.3.7"
},
{
"status": "affected",
"version": "17.3.8"
},
{
"status": "affected",
"version": "17.3.8a"
},
{
"status": "affected",
"version": "17.4.1"
},
{
"status": "affected",
"version": "17.4.2"
},
{
"status": "affected",
"version": "17.4.1a"
},
{
"status": "affected",
"version": "17.4.1b"
},
{
"status": "affected",
"version": "17.5.1"
},
{
"status": "affected",
"version": "17.5.1a"
},
{
"status": "affected",
"version": "17.6.1"
},
{
"status": "affected",
"version": "17.6.2"
},
{
"status": "affected",
"version": "17.6.1a"
},
{
"status": "affected",
"version": "17.6.3"
},
{
"status": "affected",
"version": "17.6.1y"
},
{
"status": "affected",
"version": "17.6.3a"
},
{
"status": "affected",
"version": "17.6.4"
},
{
"status": "affected",
"version": "17.6.5"
},
{
"status": "affected",
"version": "17.6.6"
},
{
"status": "affected",
"version": "17.6.6a"
},
{
"status": "affected",
"version": "17.6.5a"
},
{
"status": "affected",
"version": "17.6.7"
},
{
"status": "affected",
"version": "17.6.8"
},
{
"status": "affected",
"version": "17.6.8a"
},
{
"status": "affected",
"version": "17.7.1"
},
{
"status": "affected",
"version": "17.7.1a"
},
{
"status": "affected",
"version": "17.7.2"
},
{
"status": "affected",
"version": "17.10.1"
},
{
"status": "affected",
"version": "17.10.1a"
},
{
"status": "affected",
"version": "17.8.1"
},
{
"status": "affected",
"version": "17.8.1a"
},
{
"status": "affected",
"version": "17.9.1"
},
{
"status": "affected",
"version": "17.9.2"
},
{
"status": "affected",
"version": "17.9.1a"
},
{
"status": "affected",
"version": "17.9.3"
},
{
"status": "affected",
"version": "17.9.2a"
},
{
"status": "affected",
"version": "17.9.3a"
},
{
"status": "affected",
"version": "17.9.4"
},
{
"status": "affected",
"version": "17.9.5"
},
{
"status": "affected",
"version": "17.9.4a"
},
{
"status": "affected",
"version": "17.9.5a"
},
{
"status": "affected",
"version": "17.9.6"
},
{
"status": "affected",
"version": "17.9.5e"
},
{
"status": "affected",
"version": "17.9.5f"
},
{
"status": "affected",
"version": "17.11.1"
},
{
"status": "affected",
"version": "17.11.1a"
},
{
"status": "affected",
"version": "17.12.1"
},
{
"status": "affected",
"version": "17.12.1a"
},
{
"status": "affected",
"version": "17.12.2"
},
{
"status": "affected",
"version": "17.12.3"
},
{
"status": "affected",
"version": "17.12.4"
},
{
"status": "affected",
"version": "17.12.3a"
},
{
"status": "affected",
"version": "17.12.4a"
},
{
"status": "affected",
"version": "17.12.4b"
},
{
"status": "affected",
"version": "17.13.1"
},
{
"status": "affected",
"version": "17.13.1a"
},
{
"status": "affected",
"version": "17.14.1"
},
{
"status": "affected",
"version": "17.14.1a"
},
{
"status": "affected",
"version": "17.15.1"
},
{
"status": "affected",
"version": "17.15.1a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service (DoS) condition.\r\n\r This vulnerability is due to improper handling of DHCP request packets. An attacker could exploit this vulnerability by sending DHCP request packets to an affected device. A successful exploit could allow the attacker to cause packets to wedge in the queue, creating a DoS condition for downstream devices of the affected system and requiring that the system restart to drain the queue.\r\n\r Note: This vulnerability can be exploited with either unicast or broadcast DHCP packets on a VLAN that does not have DHCP snooping enabled."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-400",
"description": "Uncontrolled Resource Consumption",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-05-07T17:38:25.634Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
}
],
"source": {
"advisory": "cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks",
"defects": [
"CSCwm45385"
],
"discovery": "EXTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2025-20162",
"datePublished": "2025-05-07T17:38:25.634Z",
"dateReserved": "2024-10-10T19:15:13.217Z",
"dateUpdated": "2025-05-07T19:42:11.086Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2025-20162",
"date": "2026-05-25",
"epss": "0.00457",
"percentile": "0.64127"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2025-20162\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2025-05-07T18:15:37.663\",\"lastModified\":\"2025-07-11T14:58:36.330\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service (DoS) condition.\\r\\n\\r This vulnerability is due to improper handling of DHCP request packets. An attacker could exploit this vulnerability by sending DHCP request packets to an affected device. A successful exploit could allow the attacker to cause packets to wedge in the queue, creating a DoS condition for downstream devices of the affected system and requiring that the system restart to drain the queue.\\r\\n\\r Note: This vulnerability can be exploited with either unicast or broadcast DHCP packets on a VLAN that does not have DHCP snooping enabled.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la funci\u00f3n de seguridad de vigilancia DHCP del software Cisco IOS XE podr\u00eda permitir que un atacante remoto no autenticado provoque una cu\u00f1a de cola de interfaz completa, lo que podr\u00eda resultar en una denegaci\u00f3n de servicio (DoS). Esta vulnerabilidad se debe a la gesti\u00f3n incorrecta de los paquetes de solicitud DHCP. Un atacante podr\u00eda explotar esta vulnerabilidad enviando paquetes de solicitud DHCP a un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante provocar una cu\u00f1a de paquetes en la cola, creando una condici\u00f3n de DoS para los dispositivos posteriores del sistema afectado y requiriendo que el sistema se reinicie para vaciar la cola. Nota: Esta vulnerabilidad puede explotarse con paquetes DHCP de unidifusi\u00f3n o difusi\u00f3n en una VLAN que no tenga activada la vigilancia DHCP.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":4.0}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-400\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E91F8704-6DAD-474A-84EA-04E4AF7BB9B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"314C7763-A64D-4023-9F3F-9A821AE4151F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B53E377A-0296-4D7A-B97C-576B0026543D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C98DED36-D4B5-48D6-964E-EEEE97936700\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD98C9E8-3EA6-4160-970D-37C389576516\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9027A528-2588-4C06-810B-5BB313FE4323\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5019B59-508E-40B0-9C92-2C26F58E2FBE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5750264-2990-4942-85F4-DB9746C5CA2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9173AD6-6658-4267-AAA7-D50D0B657528\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F02EE9D-45B1-43D6-B05D-6FF19472216B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8FCB9440-F470-45D1-AAFA-01FB5D76B600\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B736F09-3B51-4B2A-92F6-602847001F15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E864BB1-FD23-4AB3-9138-5FD8B62EAF5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"838D6C2D-C131-4A9C-AAE5-5BF38E637E4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E306B09C-CB48-4067-B60C-5F738555EEAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B4D4659-A304-459F-8AB3-ED6D84B44C0F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C04DF35A-1B6F-420A-8D84-74EB41BF3700\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"211CC9B2-6108-4C50-AB31-DC527C43053E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"08DCCBA3-82D2-4444-B5D3-E5FC58D024F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"128F95D7-E49F-4B36-8F47-823C0298449E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E21B3881-37E9-4C00-9336-12C9C28D1B61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B270A04-9961-4E99-806B-441CD674AFBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5DD2403-113B-4100-8BD4-90E1927E6648\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAF73937-BCE2-4BEF-B4B0-83212DA4A6C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.4a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2DDB1E60-C2A9-4570-BE80-F3D478A53738\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B2902D8-3A7B-4C47-9BC6-8CA4C580A346\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"917BA05C-2A18-4C68-B508-85C2B5A94416\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06337791-7D8D-4EAA-BACC-4E270F377B3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"336A8630-653C-4E28-8DE1-76CDD8573980\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.8a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A1767AE-7D9F-4BAA-90E1-CF8314CD0B53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A6B707B-4543-41F1-83DF-49A93BF56FB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC8F611B-D347-4A21-90E6-56CF4D8A35A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9A92CE4-B4B0-4C14-AE11-8DFE511406F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"274E3E6F-4280-4EAE-B102-1BE57FE1F1D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"938B0720-8CA7-43BA-9708-5CE9EC7A565A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.5.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4BE7166-DBD3-4CE6-A14A-725FE896B85E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DE62C4B-7C06-4907-BADE-416C1618D2D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C60DF3F-DBD9-4BBF-812E-4BB0C47BDF3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.1y:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B80614B-6362-45F0-B305-2F137B053DCF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04D19D8C-FACF-49B4-BA99-CC3A3FDADAFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B78942C-BEE1-4D18-9075-8E1D991BF621\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.3a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B306D35-4A13-4D23-8EC2-D000E8ADCDA5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F21093D-1036-4F6B-B90F-ACE1EF99EA33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"280D24C6-A2BF-46E8-B512-6A3FA7833922\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.5a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F903F51-ABF4-49B0-A5BA-A6B51F79666F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3F244E7-8EE9-4E58-83FA-EEDD3C8F792D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.6a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5238B1D1-740D-4B37-A0CB-1B3343E55D05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27E0750C-A622-49D6-A8EF-B59E2F8F1912\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2258D93E-71AA-4964-A5DF-008E3479F2A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.8a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"608ACC60-143B-4835-B6AC-E6C3111B4078\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38B87B17-C653-40AC-8AE4-066BB1123C88\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.7.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9012A66E-82C4-4ACF-A4BB-37EC54B87B50\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"849C6FF1-F7C0-4021-BCA2-A791C87E4F37\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7592C7E3-3735-425F-A276-9EE03224CD5E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.8.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1103BE75-EB64-4A9A-801E-EDE6A1F861F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B0C2129-8149-4362-827C-A5494C9D398B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7452C7E9-6241-42C5-9A7F-13C0BD38A2B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D197445E-EC12-429C-BDD4-F63FA5C1B3E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.2a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD27DF50-9E81-4EC5-BA73-513F1DFB972C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EA3EAA-A379-467E-AF9A-FCFBACAE49C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.3a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4FC63AAF-758F-4A70-9738-96E75A0A1DDA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E67BE408-8DCF-491F-9EA9-E368565C1B49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.4a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9CFE98A-FBA5-4837-BBD9-3C875ECEBF1B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36A5F20F-3F38-4FB9-B49D-28569EB1A763\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.5a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D2264D7-5E89-4F50-B948-FAB41D07C8BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.5e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78EEDF40-2CDA-4147-A9F2-A5F4B8FF35EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.5f:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40CEA4FC-B946-4D54-A45B-686FC02D5411\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BDBE176-04ED-48F0-BA9F-45BECFEDBE2A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.10.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"42FAEC29-D754-49D6-85F1-F5DDFAF6E80F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.10.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCE76032-948F-444F-BA5D-72A34D1CD382\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.11.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F313F2EC-F3D6-4639-934C-402DDA3DA806\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.11.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AFB2CA6-8332-4E4D-BDB4-C3B770D3AD6C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1BF0778B-015D-481B-BAC0-40667F3453D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1EEBC0EB-0DBB-4530-AFC4-AA0036469656\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE165207-A066-44C1-B78A-6EFD80023204\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1098FCEA-6A9F-4634-A0EF-EC55ABCCEA3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.3a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53B97B06-206B-42F0-B68F-5C5136EAD2B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6281EB0F-EE0E-4B06-A7A1-29460A98A8CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.4a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07650346-67D7-4805-BF81-BB145304CC87\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.4b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C6C0D21-ABD5-42F1-B04B-745CA6115D07\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.13.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8577AF01-F2C7-48D3-AB0B-78BD63A60029\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.13.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD0D2D94-6470-4E4B-A1B1-0124F92AA793\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.14.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31789E98-7C8D-4C5A-8A3F-FC9AFE9A248C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.14.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A62648B-3273-4D75-8533-A5CBE1B1BCE0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.15.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0174C08C-8846-45AE-83ED-E9964348FA28\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.15.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E73D685D-A002-4D82-9B4C-1D6B5C0B0320\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-20162\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-05-07T18:56:53.926637Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-07T18:56:55.588Z\"}}], \"cna\": {\"source\": {\"defects\": [\"CSCwm45385\"], \"advisory\": \"cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks\", \"discovery\": \"EXTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.6, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco IOS XE Software\", \"versions\": [{\"status\": \"affected\", \"version\": \"16.11.1\"}, {\"status\": \"affected\", \"version\": \"16.11.1a\"}, {\"status\": \"affected\", \"version\": \"16.11.2\"}, {\"status\": \"affected\", \"version\": \"16.11.1s\"}, {\"status\": \"affected\", \"version\": \"16.12.1\"}, {\"status\": \"affected\", \"version\": \"16.12.1s\"}, {\"status\": \"affected\", \"version\": \"16.12.1a\"}, {\"status\": \"affected\", \"version\": \"16.12.1c\"}, {\"status\": \"affected\", \"version\": \"16.12.2\"}, {\"status\": \"affected\", \"version\": \"16.12.3\"}, {\"status\": \"affected\", \"version\": \"16.12.8\"}, {\"status\": \"affected\", \"version\": \"16.12.2s\"}, {\"status\": \"affected\", \"version\": \"16.12.4\"}, {\"status\": \"affected\", \"version\": \"16.12.3s\"}, {\"status\": \"affected\", \"version\": \"16.12.5\"}, {\"status\": \"affected\", \"version\": \"16.12.6\"}, {\"status\": \"affected\", \"version\": \"16.12.7\"}, {\"status\": \"affected\", \"version\": \"17.1.1\"}, {\"status\": \"affected\", \"version\": \"17.1.1s\"}, {\"status\": \"affected\", \"version\": \"17.1.1t\"}, {\"status\": \"affected\", \"version\": \"17.1.3\"}, {\"status\": \"affected\", \"version\": \"17.2.1\"}, {\"status\": \"affected\", \"version\": \"17.2.1r\"}, {\"status\": \"affected\", \"version\": \"17.2.1v\"}, {\"status\": \"affected\", \"version\": \"17.2.2\"}, {\"status\": \"affected\", \"version\": \"17.2.3\"}, {\"status\": \"affected\", \"version\": \"17.3.1\"}, {\"status\": \"affected\", \"version\": \"17.3.2\"}, {\"status\": \"affected\", \"version\": \"17.3.3\"}, {\"status\": \"affected\", \"version\": \"17.3.1a\"}, {\"status\": \"affected\", \"version\": \"17.3.4\"}, {\"status\": \"affected\", \"version\": \"17.3.5\"}, {\"status\": \"affected\", \"version\": \"17.3.4a\"}, {\"status\": \"affected\", \"version\": \"17.3.6\"}, {\"status\": \"affected\", \"version\": \"17.3.7\"}, {\"status\": \"affected\", \"version\": \"17.3.8\"}, {\"status\": \"affected\", \"version\": \"17.3.8a\"}, {\"status\": \"affected\", \"version\": \"17.4.1\"}, {\"status\": \"affected\", \"version\": \"17.4.2\"}, {\"status\": \"affected\", \"version\": \"17.4.1a\"}, {\"status\": \"affected\", \"version\": \"17.4.1b\"}, {\"status\": \"affected\", \"version\": \"17.5.1\"}, {\"status\": \"affected\", \"version\": \"17.5.1a\"}, {\"status\": \"affected\", \"version\": \"17.6.1\"}, {\"status\": \"affected\", \"version\": \"17.6.2\"}, {\"status\": \"affected\", \"version\": \"17.6.1a\"}, {\"status\": \"affected\", \"version\": \"17.6.3\"}, {\"status\": \"affected\", \"version\": \"17.6.1y\"}, {\"status\": \"affected\", \"version\": \"17.6.3a\"}, {\"status\": \"affected\", \"version\": \"17.6.4\"}, {\"status\": \"affected\", \"version\": \"17.6.5\"}, {\"status\": \"affected\", \"version\": \"17.6.6\"}, {\"status\": \"affected\", \"version\": \"17.6.6a\"}, {\"status\": \"affected\", \"version\": \"17.6.5a\"}, {\"status\": \"affected\", \"version\": \"17.6.7\"}, {\"status\": \"affected\", \"version\": \"17.6.8\"}, {\"status\": \"affected\", \"version\": \"17.6.8a\"}, {\"status\": \"affected\", \"version\": \"17.7.1\"}, {\"status\": \"affected\", \"version\": \"17.7.1a\"}, {\"status\": \"affected\", \"version\": \"17.7.2\"}, {\"status\": \"affected\", \"version\": \"17.10.1\"}, {\"status\": \"affected\", \"version\": \"17.10.1a\"}, {\"status\": \"affected\", \"version\": \"17.8.1\"}, {\"status\": \"affected\", \"version\": \"17.8.1a\"}, {\"status\": \"affected\", \"version\": \"17.9.1\"}, {\"status\": \"affected\", \"version\": \"17.9.2\"}, {\"status\": \"affected\", \"version\": \"17.9.1a\"}, {\"status\": \"affected\", \"version\": \"17.9.3\"}, {\"status\": \"affected\", \"version\": \"17.9.2a\"}, {\"status\": \"affected\", \"version\": \"17.9.3a\"}, {\"status\": \"affected\", \"version\": \"17.9.4\"}, {\"status\": \"affected\", \"version\": \"17.9.5\"}, {\"status\": \"affected\", \"version\": \"17.9.4a\"}, {\"status\": \"affected\", \"version\": \"17.9.5a\"}, {\"status\": \"affected\", \"version\": \"17.9.6\"}, {\"status\": \"affected\", \"version\": \"17.9.5e\"}, {\"status\": \"affected\", \"version\": \"17.9.5f\"}, {\"status\": \"affected\", \"version\": \"17.11.1\"}, {\"status\": \"affected\", \"version\": \"17.11.1a\"}, {\"status\": \"affected\", \"version\": \"17.12.1\"}, {\"status\": \"affected\", \"version\": \"17.12.1a\"}, {\"status\": \"affected\", \"version\": \"17.12.2\"}, {\"status\": \"affected\", \"version\": \"17.12.3\"}, {\"status\": \"affected\", \"version\": \"17.12.4\"}, {\"status\": \"affected\", \"version\": \"17.12.3a\"}, {\"status\": \"affected\", \"version\": \"17.12.4a\"}, {\"status\": \"affected\", \"version\": \"17.12.4b\"}, {\"status\": \"affected\", \"version\": \"17.13.1\"}, {\"status\": \"affected\", \"version\": \"17.13.1a\"}, {\"status\": \"affected\", \"version\": \"17.14.1\"}, {\"status\": \"affected\", \"version\": \"17.14.1a\"}, {\"status\": \"affected\", \"version\": \"17.15.1\"}, {\"status\": \"affected\", \"version\": \"17.15.1a\"}]}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks\", \"name\": \"cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service (DoS) condition.\\r\\n\\r This vulnerability is due to improper handling of DHCP request packets. An attacker could exploit this vulnerability by sending DHCP request packets to an affected device. A successful exploit could allow the attacker to cause packets to wedge in the queue, creating a DoS condition for downstream devices of the affected system and requiring that the system restart to drain the queue.\\r\\n\\r Note: This vulnerability can be exploited with either unicast or broadcast DHCP packets on a VLAN that does not have DHCP snooping enabled.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-400\", \"description\": \"Uncontrolled Resource Consumption\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2025-05-07T17:38:25.634Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-20162\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-07T19:42:11.086Z\", \"dateReserved\": \"2024-10-10T19:15:13.217Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2025-05-07T17:38:25.634Z\", \"assignerShortName\": \"cisco\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
CERTFR-2025-AVI-0378
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Cisco | Catalyst Center | Catalyst Center versions antérieures à 2.3.7.9 | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x antérieures à 20.15.2 | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions 20.16.x antérieures à 20.16.1 | ||
| Cisco | IOS XR | IOS XR versions antérieures à 24.3.2 | ||
| Cisco | WLC AireOS | WLC AireOS versions antérieures à 8.10.196.0 | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions antérieures à 20.9.7 | ||
| Cisco | IOS XE | IOS XE : Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des configurations vulnérables des équipements (cf. section Documentation). | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x antérieures à 20.12.5 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Catalyst Center versions ant\u00e9rieures \u00e0 2.3.7.9",
"product": {
"name": "Catalyst Center",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x ant\u00e9rieures \u00e0 20.15.2",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions 20.16.x ant\u00e9rieures \u00e0 20.16.1",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XR versions ant\u00e9rieures \u00e0 24.3.2",
"product": {
"name": "IOS XR",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "WLC AireOS versions ant\u00e9rieures \u00e0 8.10.196.0",
"product": {
"name": "WLC AireOS",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions ant\u00e9rieures \u00e0 20.9.7",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XE : Se r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des configurations vuln\u00e9rables des \u00e9quipements (cf. section Documentation).",
"product": {
"name": "IOS XE",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x ant\u00e9rieures \u00e0 20.12.5",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-20189",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20189"
},
{
"name": "CVE-2025-20192",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20192"
},
{
"name": "CVE-2025-20199",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20199"
},
{
"name": "CVE-2025-20191",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20191"
},
{
"name": "CVE-2025-20188",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20188"
},
{
"name": "CVE-2025-20198",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20198"
},
{
"name": "CVE-2025-20181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20181"
},
{
"name": "CVE-2025-20122",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20122"
},
{
"name": "CVE-2025-20202",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20202"
},
{
"name": "CVE-2025-20210",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20210"
},
{
"name": "CVE-2025-20162",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20162"
},
{
"name": "CVE-2025-20200",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20200"
},
{
"name": "CVE-2025-20154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20154"
},
{
"name": "CVE-2025-20140",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20140"
},
{
"name": "CVE-2025-20201",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20201"
},
{
"name": "CVE-2025-20186",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20186"
},
{
"name": "CVE-2025-20182",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20182"
},
{
"name": "CVE-2025-20197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20197"
},
{
"name": "CVE-2025-20164",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20164"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0378",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-05-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
"vendor_advisories": [
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-twamp-kV4FHugn",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-privesc-su7scvdp",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-privesc-su7scvdp"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sisf-dos-ZGwt4DdY",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sisf-dos-ZGwt4DdY"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-webui-cmdinj-gVn3OKNC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ios-http-privesc-wCRd5e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-http-privesc-wCRd5e3"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ewlc-cdp-dos-fpeks9K",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wlc-wncd-p6Gvt6HL",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-dnac-api-nBPZcJCM",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-api-nBPZcJCM"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-c2960-3560-sboot-ZtqADrHq",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-multiprod-ikev2-dos-gPctUqv2",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multiprod-ikev2-dos-gPctUqv2"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sdwan-priviesc-WCk7bmmt",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-priviesc-WCk7bmmt"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wlc-file-uplpd-rHZG9UfC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-file-uplpd-rHZG9UfC"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
}
]
}
CERTFR-2025-AVI-0378
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Cisco | Catalyst Center | Catalyst Center versions antérieures à 2.3.7.9 | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x antérieures à 20.15.2 | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions 20.16.x antérieures à 20.16.1 | ||
| Cisco | IOS XR | IOS XR versions antérieures à 24.3.2 | ||
| Cisco | WLC AireOS | WLC AireOS versions antérieures à 8.10.196.0 | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions antérieures à 20.9.7 | ||
| Cisco | IOS XE | IOS XE : Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des configurations vulnérables des équipements (cf. section Documentation). | ||
| Cisco | Catalyst SD-WAN | Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x antérieures à 20.12.5 |
References
| Title | Publication Time | Tags | |||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Catalyst Center versions ant\u00e9rieures \u00e0 2.3.7.9",
"product": {
"name": "Catalyst Center",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x ant\u00e9rieures \u00e0 20.15.2",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions 20.16.x ant\u00e9rieures \u00e0 20.16.1",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XR versions ant\u00e9rieures \u00e0 24.3.2",
"product": {
"name": "IOS XR",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "WLC AireOS versions ant\u00e9rieures \u00e0 8.10.196.0",
"product": {
"name": "WLC AireOS",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions ant\u00e9rieures \u00e0 20.9.7",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "IOS XE : Se r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des configurations vuln\u00e9rables des \u00e9quipements (cf. section Documentation).",
"product": {
"name": "IOS XE",
"vendor": {
"name": "Cisco",
"scada": false
}
}
},
{
"description": "Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x ant\u00e9rieures \u00e0 20.12.5",
"product": {
"name": "Catalyst SD-WAN",
"vendor": {
"name": "Cisco",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-20189",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20189"
},
{
"name": "CVE-2025-20192",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20192"
},
{
"name": "CVE-2025-20199",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20199"
},
{
"name": "CVE-2025-20191",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20191"
},
{
"name": "CVE-2025-20188",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20188"
},
{
"name": "CVE-2025-20198",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20198"
},
{
"name": "CVE-2025-20181",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20181"
},
{
"name": "CVE-2025-20122",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20122"
},
{
"name": "CVE-2025-20202",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20202"
},
{
"name": "CVE-2025-20210",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20210"
},
{
"name": "CVE-2025-20162",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20162"
},
{
"name": "CVE-2025-20200",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20200"
},
{
"name": "CVE-2025-20154",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20154"
},
{
"name": "CVE-2025-20140",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20140"
},
{
"name": "CVE-2025-20201",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20201"
},
{
"name": "CVE-2025-20186",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20186"
},
{
"name": "CVE-2025-20182",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20182"
},
{
"name": "CVE-2025-20197",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20197"
},
{
"name": "CVE-2025-20164",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-20164"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0378",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-05-09T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Cisco. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Cisco",
"vendor_advisories": [
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-ikev1-dos-XHk3HzFC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-twamp-kV4FHugn",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-privesc-su7scvdp",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-privesc-su7scvdp"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sisf-dos-ZGwt4DdY",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sisf-dos-ZGwt4DdY"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-webui-cmdinj-gVn3OKNC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ios-http-privesc-wCRd5e3",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-http-privesc-wCRd5e3"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-ewlc-cdp-dos-fpeks9K",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wlc-wncd-p6Gvt6HL",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-dnac-api-nBPZcJCM",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-api-nBPZcJCM"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-c2960-3560-sboot-ZtqADrHq",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-c2960-3560-sboot-ZtqADrHq"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-multiprod-ikev2-dos-gPctUqv2",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multiprod-ikev2-dos-gPctUqv2"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-sdwan-priviesc-WCk7bmmt",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-priviesc-WCk7bmmt"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-wlc-file-uplpd-rHZG9UfC",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-file-uplpd-rHZG9UfC"
},
{
"published_at": "2025-05-07",
"title": "Bulletin de s\u00e9curit\u00e9 Cisco cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
}
]
}
BDU:2025-10322
Vulnerability from fstec - Published: 07.05.2025
VLAI
Title
Уязвимость функции безопасности DHCP Snooping операционных систем Cisco IOS XE, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Description
Уязвимость функции безопасности DHCP Snooping операционных систем Cisco IOS XE связана с неконтролируемым расходом ресурсов. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании
Severity
Vendor
Cisco Systems Inc.
Software Name
Cisco IOS XE
Software Version
16.12.1 (Cisco IOS XE), 16.11.1 (Cisco IOS XE), 16.11.1a (Cisco IOS XE), 16.11.1s (Cisco IOS XE), 16.11.1c (Cisco IOS XE), 16.12.1a (Cisco IOS XE), 16.12.1c (Cisco IOS XE), 16.12.1s (Cisco IOS XE), 16.11.2 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.1.1 (Cisco IOS XE), 16.12.2 (Cisco IOS XE), 16.12.2s (Cisco IOS XE), 16.12.2t (Cisco IOS XE), 16.12.4 (Cisco IOS XE), 16.12.3s (Cisco IOS XE), 17.1.1s (Cisco IOS XE), 17.1.2 (Cisco IOS XE), 17.1.1t (Cisco IOS XE), 17.1.3 (Cisco IOS XE), 17.2.1r (Cisco IOS XE), 17.2.1v (Cisco IOS XE), 17.2.2 (Cisco IOS XE), 17.3.1 (Cisco IOS XE), 17.3.1a (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.9.1a (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.11.1a (Cisco IOS XE), 17.12.1 (Cisco IOS XE), 17.12.1a (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 17.10.1a (Cisco IOS XE), 16.12.3 (Cisco IOS XE), 16.12.8 (Cisco IOS XE), 16.12.5 (Cisco IOS XE), 16.12.6 (Cisco IOS XE), 16.12.7 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9.4 (Cisco IOS XE), 17.9.4a (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.6.6a (Cisco IOS XE), 17.6.6 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE), 17.2.3 (Cisco IOS XE), 17.3.4a (Cisco IOS XE), 17.4.1a (Cisco IOS XE), 17.4.1b (Cisco IOS XE), 17.4.1c (Cisco IOS XE), 17.4.2 (Cisco IOS XE), 17.5.1a (Cisco IOS XE), 17.5.1b (Cisco IOS XE), 17.5.1c (Cisco IOS XE), 17.6.1a (Cisco IOS XE), 17.6.3a (Cisco IOS XE), 17.7.1a (Cisco IOS XE), 17.7.2 (Cisco IOS XE), 17.8.1a (Cisco IOS XE), 17.9.2a (Cisco IOS XE), 17.9.3a (Cisco IOS XE), 17.12.2 (Cisco IOS XE), 17.6.1y (Cisco IOS XE), 17.9.5a (Cisco IOS XE), 17.12.3a (Cisco IOS XE), 17.13.1 (Cisco IOS XE), 17.13.1a (Cisco IOS XE), 17.14.1 (Cisco IOS XE), 17.14.1a (Cisco IOS XE), 17.6.7 (Cisco IOS XE), 17.9.5 (Cisco IOS XE), 17.12.3 (Cisco IOS XE), 17.9.5e (Cisco IOS XE), 17.9.5f (Cisco IOS XE), 17.12.4 (Cisco IOS XE), 17.12.4a (Cisco IOS XE), 17.12.4b (Cisco IOS XE), 17.6.8a (Cisco IOS XE), 17.15.1 (Cisco IOS XE), 17.15.1a (Cisco IOS XE), 17.6.8 (Cisco IOS XE), 17.9.6 (Cisco IOS XE)
Possible Mitigations
Использование рекомендаций:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks
Reference
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks
CWE
CWE-400
{
"CVSS 2.0": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
"CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"CVSS 4.0": null,
"remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
"remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
"\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems Inc.",
"\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "16.12.1 (Cisco IOS XE), 16.11.1 (Cisco IOS XE), 16.11.1a (Cisco IOS XE), 16.11.1s (Cisco IOS XE), 16.11.1c (Cisco IOS XE), 16.12.1a (Cisco IOS XE), 16.12.1c (Cisco IOS XE), 16.12.1s (Cisco IOS XE), 16.11.2 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.1.1 (Cisco IOS XE), 16.12.2 (Cisco IOS XE), 16.12.2s (Cisco IOS XE), 16.12.2t (Cisco IOS XE), 16.12.4 (Cisco IOS XE), 16.12.3s (Cisco IOS XE), 17.1.1s (Cisco IOS XE), 17.1.2 (Cisco IOS XE), 17.1.1t (Cisco IOS XE), 17.1.3 (Cisco IOS XE), 17.2.1r (Cisco IOS XE), 17.2.1v (Cisco IOS XE), 17.2.2 (Cisco IOS XE), 17.3.1 (Cisco IOS XE), 17.3.1a (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.9.1a (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.11.1a (Cisco IOS XE), 17.12.1 (Cisco IOS XE), 17.12.1a (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 17.10.1a (Cisco IOS XE), 16.12.3 (Cisco IOS XE), 16.12.8 (Cisco IOS XE), 16.12.5 (Cisco IOS XE), 16.12.6 (Cisco IOS XE), 16.12.7 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9.4 (Cisco IOS XE), 17.9.4a (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.6.6a (Cisco IOS XE), 17.6.6 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE), 17.2.3 (Cisco IOS XE), 17.3.4a (Cisco IOS XE), 17.4.1a (Cisco IOS XE), 17.4.1b (Cisco IOS XE), 17.4.1c (Cisco IOS XE), 17.4.2 (Cisco IOS XE), 17.5.1a (Cisco IOS XE), 17.5.1b (Cisco IOS XE), 17.5.1c (Cisco IOS XE), 17.6.1a (Cisco IOS XE), 17.6.3a (Cisco IOS XE), 17.7.1a (Cisco IOS XE), 17.7.2 (Cisco IOS XE), 17.8.1a (Cisco IOS XE), 17.9.2a (Cisco IOS XE), 17.9.3a (Cisco IOS XE), 17.12.2 (Cisco IOS XE), 17.6.1y (Cisco IOS XE), 17.9.5a (Cisco IOS XE), 17.12.3a (Cisco IOS XE), 17.13.1 (Cisco IOS XE), 17.13.1a (Cisco IOS XE), 17.14.1 (Cisco IOS XE), 17.14.1a (Cisco IOS XE), 17.6.7 (Cisco IOS XE), 17.9.5 (Cisco IOS XE), 17.12.3 (Cisco IOS XE), 17.9.5e (Cisco IOS XE), 17.9.5f (Cisco IOS XE), 17.12.4 (Cisco IOS XE), 17.12.4a (Cisco IOS XE), 17.12.4b (Cisco IOS XE), 17.6.8a (Cisco IOS XE), 17.15.1 (Cisco IOS XE), 17.15.1a (Cisco IOS XE), 17.6.8 (Cisco IOS XE), 17.9.6 (Cisco IOS XE)",
"\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks",
"\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "07.05.2025",
"\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "27.08.2025",
"\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "27.08.2025",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-10322",
"\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-20162",
"\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
"\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
"\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco IOS XE",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Cisco Systems Inc. Cisco IOS XE 16.12.1 , Cisco Systems Inc. Cisco IOS XE 16.11.1 , Cisco Systems Inc. Cisco IOS XE 16.11.1a , Cisco Systems Inc. Cisco IOS XE 16.11.1s , Cisco Systems Inc. Cisco IOS XE 16.11.1c , Cisco Systems Inc. Cisco IOS XE 16.12.1a , Cisco Systems Inc. Cisco IOS XE 16.12.1c , Cisco Systems Inc. Cisco IOS XE 16.12.1s , Cisco Systems Inc. Cisco IOS XE 16.11.2 , Cisco Systems Inc. Cisco IOS XE 17.2.1 , Cisco Systems Inc. Cisco IOS XE 17.1.1 , Cisco Systems Inc. Cisco IOS XE 16.12.2 , Cisco Systems Inc. Cisco IOS XE 16.12.2s , Cisco Systems Inc. Cisco IOS XE 16.12.2t , Cisco Systems Inc. Cisco IOS XE 16.12.4 , Cisco Systems Inc. Cisco IOS XE 16.12.3s , Cisco Systems Inc. Cisco IOS XE 17.1.1s , Cisco Systems Inc. Cisco IOS XE 17.1.2 , Cisco Systems Inc. Cisco IOS XE 17.1.1t , Cisco Systems Inc. Cisco IOS XE 17.1.3 , Cisco Systems Inc. Cisco IOS XE 17.2.1r , Cisco Systems Inc. Cisco IOS XE 17.2.1v , Cisco Systems Inc. Cisco IOS XE 17.2.2 , Cisco Systems Inc. Cisco IOS XE 17.3.1 , Cisco Systems Inc. Cisco IOS XE 17.3.1a , Cisco Systems Inc. Cisco IOS XE 17.6.1 , Cisco Systems Inc. Cisco IOS XE 17.9.1 , Cisco Systems Inc. Cisco IOS XE 17.9.1a , Cisco Systems Inc. Cisco IOS XE 17.11.1 , Cisco Systems Inc. Cisco IOS XE 17.11.1a , Cisco Systems Inc. Cisco IOS XE 17.12.1 , Cisco Systems Inc. Cisco IOS XE 17.12.1a , Cisco Systems Inc. Cisco IOS XE 17.10.1 , Cisco Systems Inc. Cisco IOS XE 17.10.1a , Cisco Systems Inc. Cisco IOS XE 16.12.3 , Cisco Systems Inc. Cisco IOS XE 16.12.8 , Cisco Systems Inc. Cisco IOS XE 16.12.5 , Cisco Systems Inc. Cisco IOS XE 16.12.6 , Cisco Systems Inc. Cisco IOS XE 16.12.7 , Cisco Systems Inc. Cisco IOS XE 17.8.1 , Cisco Systems Inc. Cisco IOS XE 17.9.2 , Cisco Systems Inc. Cisco IOS XE 17.9.3 , Cisco Systems Inc. Cisco IOS XE 17.9.4 , Cisco Systems Inc. Cisco IOS XE 17.9.4a , Cisco Systems Inc. Cisco IOS XE 17.7.1 , Cisco Systems Inc. Cisco IOS XE 17.6.5a , Cisco Systems Inc. Cisco IOS XE 17.6.6a , Cisco Systems Inc. Cisco IOS XE 17.6.6 , Cisco Systems Inc. Cisco IOS XE 17.6.2 , Cisco Systems Inc. Cisco IOS XE 17.6.3 , Cisco Systems Inc. Cisco IOS XE 17.6.4 , Cisco Systems Inc. Cisco IOS XE 17.6.5 , Cisco Systems Inc. Cisco IOS XE 17.3.2 , Cisco Systems Inc. Cisco IOS XE 17.3.3 , Cisco Systems Inc. Cisco IOS XE 17.3.4 , Cisco Systems Inc. Cisco IOS XE 17.3.5 , Cisco Systems Inc. Cisco IOS XE 17.3.6 , Cisco Systems Inc. Cisco IOS XE 17.3.7 , Cisco Systems Inc. Cisco IOS XE 17.3.8 , Cisco Systems Inc. Cisco IOS XE 17.3.8a , Cisco Systems Inc. Cisco IOS XE 17.4.1 , Cisco Systems Inc. Cisco IOS XE 17.5.1 , Cisco Systems Inc. Cisco IOS XE 17.2.3 , Cisco Systems Inc. Cisco IOS XE 17.3.4a , Cisco Systems Inc. Cisco IOS XE 17.4.1a , Cisco Systems Inc. Cisco IOS XE 17.4.1b , Cisco Systems Inc. Cisco IOS XE 17.4.1c , Cisco Systems Inc. Cisco IOS XE 17.4.2 , Cisco Systems Inc. Cisco IOS XE 17.5.1a , Cisco Systems Inc. Cisco IOS XE 17.5.1b , Cisco Systems Inc. Cisco IOS XE 17.5.1c , Cisco Systems Inc. Cisco IOS XE 17.6.1a , Cisco Systems Inc. Cisco IOS XE 17.6.3a , Cisco Systems Inc. Cisco IOS XE 17.7.1a , Cisco Systems Inc. Cisco IOS XE 17.7.2 , Cisco Systems Inc. Cisco IOS XE 17.8.1a , Cisco Systems Inc. Cisco IOS XE 17.9.2a , Cisco Systems Inc. Cisco IOS XE 17.9.3a , Cisco Systems Inc. Cisco IOS XE 17.12.2 , Cisco Systems Inc. Cisco IOS XE 17.6.1y , Cisco Systems Inc. Cisco IOS XE 17.9.5a , Cisco Systems Inc. Cisco IOS XE 17.12.3a , Cisco Systems Inc. Cisco IOS XE 17.13.1 , Cisco Systems Inc. Cisco IOS XE 17.13.1a , Cisco Systems Inc. Cisco IOS XE 17.14.1 , Cisco Systems Inc. Cisco IOS XE 17.14.1a , Cisco Systems Inc. Cisco IOS XE 17.6.7 , Cisco Systems Inc. Cisco IOS XE 17.9.5 , Cisco Systems Inc. Cisco IOS XE 17.12.3 , Cisco Systems Inc. Cisco IOS XE 17.9.5e , Cisco Systems Inc. Cisco IOS XE 17.9.5f , Cisco Systems Inc. Cisco IOS XE 17.12.4 , Cisco Systems Inc. Cisco IOS XE 17.12.4a , Cisco Systems Inc. Cisco IOS XE 17.12.4b , Cisco Systems Inc. Cisco IOS XE 17.6.8a , Cisco Systems Inc. Cisco IOS XE 17.15.1 , Cisco Systems Inc. Cisco IOS XE 17.15.1a , Cisco Systems Inc. Cisco IOS XE 17.6.8 , Cisco Systems Inc. Cisco IOS XE 17.9.6 ",
"\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DHCP Snooping \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0440\u0430\u0441\u0445\u043e\u0434\u043e\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0440\u0430\u0441\u0445\u043e\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u0430 (\u00ab\u0418\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u00bb) (CWE-400)",
"\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 DHCP Snooping \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c \u0440\u0430\u0441\u0445\u043e\u0434\u043e\u043c \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
"\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
"\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
"\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
"\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
"\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u0441\u0447\u0435\u0440\u043f\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432",
"\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks",
"\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
"\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
"\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-400",
"\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,6)"
}
CISCO-SA-IOSXE-DHCPSN-DOS-XBN8MTKS
Vulnerability from csaf_cisco - Published: 2025-05-07 16:00 - Updated: 2025-05-07 16:00Summary
Cisco IOS XE Software DHCP Snooping Denial of Service Vulnerability
Notes
Summary: A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service (DoS) condition.
This vulnerability is due to improper handling of DHCP request packets. An attacker could exploit this vulnerability by sending DHCP request packets to an affected device. A successful exploit could allow the attacker to cause packets to wedge in the queue, creating a DoS condition for downstream devices of the affected system and requiring that the system restart to drain the queue.
Note: This vulnerability can be exploited with either unicast or broadcast DHCP packets on a VLAN that does not have DHCP snooping enabled.
Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.
This advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279"].
Vulnerable Products: This vulnerability affects the following Cisco products if they are running a vulnerable release of Cisco IOS XE Software and have DHCP snooping enabled for at least one, but not all, VLANs that are configured on the device:
1100 Series Integrated Service Routers (ISRs)
Catalyst 8200 Series Edge Platforms
Catalyst 8300 Series Edge Platforms
Note: If the packet is received on a VLAN that has DHCP snooping enabled, the packet will not be held. If the packet is received on a VLAN that does not have DHCP snooping enabled, the packet will be held.
For information about which Cisco software releases are vulnerable, see the Fixed Software ["#fs"] section of this advisory.
Determine the Device Configuration
To determine whether DHCP snooping is enabled for some, but not all, VLANs on a device, run the show ip dhcp snooping command, as shown in the following example:
Router#show ip dhcp snooping
Switch DHCP snooping is enabled
Switch DHCP gleaning is disabled
DHCP snooping is configured on following VLANs:
2
DHCP snooping is operational on following VLANs:
2
Proxy bridge is configured on following VLANs:
none
Proxy bridge is operational on following VLANs:
none
DHCP snooping is configured on the following L3 Interfaces:
Insertion of option 82 is enabled
circuit-id default format: vlan-mod-port
remote-id: 4c77.6d2e.3bf1 (MAC)
Option 82 on untrusted port is not allowed
Verification of hwaddr field is enabled
Verification of giaddr field is enabled
DHCP snooping trust/rate is configured on the following Interfaces:
Interface Trusted Allow option Rate limit (pps)
----------------------- ------- ------------ ----------------
Router#
To view all active VLANs, use the show vlan command, as shown in the following example:
Router#show vlan
VLAN Name Status Ports
---- -------------------------------- --------- -------------------------------
1 default active Gi0/1/0, Gi0/1/1, Gi0/1/2
Gi0/1/3 2 VLAN0002 active
1002 fddi-default act/unsup
1003 token-ring-default act/unsup
1004 fddinet-default act/unsup
1005 trnet-default act/unsup
Products Confirmed Not Vulnerable: Cisco has confirmed that this vulnerability does not affect the following Cisco products:
IOS Software
IOS XR Software
ISR 1000 Series Routers
Meraki products
NX-OS Software
Details: Use a Temporary Measure to Allow Traffic to Pass Until the Device Can Be Reloaded
If this vulnerability has been exploited and the attack has stopped, administrators can set a maximum hold-queue value that is greater than the currently configured value for the affected interface to allow traffic to pass until the device can be reloaded. The following example shows how to set the value to 350 by using the hold-queue in interface configuration command:
Router# configure terminal
Router(config)# interface gigabitEthernet 1
Router(config-if)# hold-queue 350 in
Monitor and Detect Queue Wedges with Cisco IOS Embedded Event Manager
To monitor and detect interface queue wedges that are caused by this vulnerability, administrators can use a Cisco IOS Embedded Event Manager (EEM) policy that is based on Tool Command Language (Tcl). This policy would allow administrators to monitor interfaces for devices that are running Cisco IOS XE Software and detect when input queues are full. When Cisco IOS EEM detects potential exploitation of this vulnerability, the policy sends an alert to the network administrator, who can then decide to implement an upgrade, implement suitable mitigations, or reload the device to clear the input queue.
The Tcl script is available for download at Interface Input Queue Monitor ["https://supportforums.cisco.com/docs/DOC-19337"].
Indicators of Compromise: To identify an affected interface, run the following commands:
Router#show interfaces | include line|Input
GigabitEthernet1 is up, line protocol is up
Input queue: 376/375/0/0 (size/max/drops/flushes); Total output drops: 0
An input queue is wedged when the size value is greater than the max value.
Workarounds: There is a workaround that addresses this vulnerability. Administrators can enable DHCP snooping on all VLANs by using the ip dhcp snooping vlan ? command, as shown in the following example:
Device-1(config)#ip dhcp snooping vlan ?
WORD DHCP Snooping vlan first number or vlan range, example: 1,3-5,7,9-11
While this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment.
Fixed Software: Cisco has released free software updates ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu"] that address the vulnerability described in this advisory. Customers with service contracts that entitle them to regular software updates should obtain security fixes through their usual update channels.
Customers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:
https://www.cisco.com/c/en/us/products/end-user-license-agreement.html ["https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"]
Additionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.
The Cisco Support and Downloads page ["https://www.cisco.com/c/en/us/support/index.html"] on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool.
When considering software upgrades ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page ["https://www.cisco.com/go/psirt"], to determine exposure and a complete upgrade solution.
In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.
Customers Without Service Contracts
Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"]
Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.
Cisco IOS and IOS XE Software
To help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (“First Fixed”). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (“Combined First Fixed”).
To use the tool, go to the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"] page and follow the instructions. Alternatively, use the following form to determine whether a release is affected by any Cisco Security Advisory. To use the form, follow these steps:
Choose which advisories the tool will search—only this advisory, only advisories with a Critical or High Security Impact Rating (SIR) ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"], or all advisories.
Enter a release number—for example, 15.9(3)M2 or 17.3.3.
Click Check.
Only this advisory All Critical and High advisories All advisories
Vulnerability Policy: To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.
Exploitation and Public Announcements: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.
Source: This vulnerability was found during the resolution of a Cisco TAC support case.
Legal Disclaimer: THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.
A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.
8.6 (High)
Affected products
Known affected
102 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
16.11.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.1.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.2.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.11.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.11.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.11.1s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.4.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.5.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.11.1c
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.1s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.1c
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.8
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.2s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.1.1s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.2t
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.4
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.2.1r
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.3s
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.1.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.1.1t
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.7.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.2.1v
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.10.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.4.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.8.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.2.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.5
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.1.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.4.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.4.1b
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.6
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.2.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.4
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.5.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.5
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.4.1c
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.4a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.6
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.7.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.7
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.1y
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.8.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.7.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.3a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.11.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.4
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.10.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.5.1b
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.5
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.7
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.2a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.6
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.5.1c
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.11.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.3a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.13.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.14.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.8
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.4
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.5
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.2
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.4a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.3.8a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.6a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.5a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.7
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.3
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.15.1
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.13.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.5a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.14.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.4
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.8
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.6
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.3a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.15.1a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.6.8a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.4a
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.5e
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.4b
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.5f
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
16.12.14
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.9.7b
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
|
|
17.12.5c
Cisco / Cisco IOS XE Software
|
— |
Vendor Fix
fix
|
References
13 references
| URL | Category |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/c… | self |
| https://sec.cloudapps.cisco.com/security/center/v… | external |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
| https://supportforums.cisco.com/docs/DOC-19337 | external |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
| https://www.cisco.com/c/en/us/products/end-user-l… | external |
| https://www.cisco.com/c/en/us/support/index.html | external |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
| https://www.cisco.com/go/psirt | external |
| https://www.cisco.com/c/en/us/support/web/tsd-cis… | external |
| https://sec.cloudapps.cisco.com/security/center/s… | external |
| https://sec.cloudapps.cisco.com/security/center/r… | external |
| http://www.cisco.com/web/about/security/psirt/sec… | external |
Acknowledgments
{
"document": {
"acknowledgments": [
{
"summary": "This vulnerability was found during the resolution of a Cisco TAC support case."
}
],
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"notes": [
{
"category": "summary",
"text": "A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service (DoS) condition.\r\n\r\nThis vulnerability is due to improper handling of DHCP request packets. An attacker could exploit this vulnerability by sending DHCP request packets to an affected device. A successful exploit could allow the attacker to cause packets to wedge in the queue, creating a DoS condition for downstream devices of the affected system and requiring that the system restart to drain the queue.\r\n\r\nNote: This vulnerability can be exploited with either unicast or broadcast DHCP packets on a VLAN that does not have DHCP snooping enabled.\r\n\r\nCisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.\r\n\r\n\r\n\r\nThis advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [\"https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279\"].",
"title": "Summary"
},
{
"category": "general",
"text": "This vulnerability affects the following Cisco products if they are running a vulnerable release of Cisco IOS XE Software and have DHCP snooping enabled for at least one, but not all, VLANs that are configured on the device:\r\n\r\n1100 Series Integrated Service Routers (ISRs)\r\nCatalyst 8200 Series Edge Platforms\r\nCatalyst 8300 Series Edge Platforms\r\n\r\nNote: If the packet is received on a VLAN that has DHCP snooping enabled, the packet will not be held. If the packet is received on a VLAN that does not have DHCP snooping enabled, the packet will be held.\r\n\r\nFor information about which Cisco software releases are vulnerable, see the Fixed Software [\"#fs\"] section of this advisory.\r\n Determine the Device Configuration\r\nTo determine whether DHCP snooping is enabled for some, but not all, VLANs on a device, run the show ip dhcp snooping command, as shown in the following example:\r\n\r\n\r\nRouter#show ip dhcp snooping\r\nSwitch DHCP snooping is enabled\r\nSwitch DHCP gleaning is disabled\r\nDHCP snooping is configured on following VLANs:\r\n2\r\nDHCP snooping is operational on following VLANs:\r\n2\r\nProxy bridge is configured on following VLANs:\r\nnone\r\nProxy bridge is operational on following VLANs:\r\nnone\r\nDHCP snooping is configured on the following L3 Interfaces:\r\n\r\nInsertion of option 82 is enabled\r\n circuit-id default format: vlan-mod-port\r\n remote-id: 4c77.6d2e.3bf1 (MAC)\r\n\r\nOption 82 on untrusted port is not allowed\r\nVerification of hwaddr field is enabled\r\nVerification of giaddr field is enabled\r\n\r\nDHCP snooping trust/rate is configured on the following Interfaces:\r\n\r\nInterface Trusted Allow option Rate limit (pps)\r\n----------------------- ------- ------------ ----------------\r\nRouter#\r\n\r\nTo view all active VLANs, use the show vlan command, as shown in the following example:\r\n\r\n\r\nRouter#show vlan\r\nVLAN Name Status Ports\r\n---- -------------------------------- --------- -------------------------------\r\n1 default active Gi0/1/0, Gi0/1/1, Gi0/1/2\r\n Gi0/1/3 2 VLAN0002 active\r\n1002 fddi-default act/unsup\r\n1003 token-ring-default act/unsup\r\n1004 fddinet-default act/unsup\r\n1005 trnet-default act/unsup",
"title": "Vulnerable Products"
},
{
"category": "general",
"text": "Cisco has confirmed that this vulnerability does not affect the following Cisco products:\r\n\r\nIOS Software\r\nIOS XR Software\r\nISR 1000 Series Routers\r\nMeraki products\r\nNX-OS Software",
"title": "Products Confirmed Not Vulnerable"
},
{
"category": "general",
"text": "Use a Temporary Measure to Allow Traffic to Pass Until the Device Can Be Reloaded\r\n\r\nIf this vulnerability has been exploited and the attack has stopped, administrators can set a maximum hold-queue value that is greater than the currently configured value for the affected interface to allow traffic to pass until the device can be reloaded. The following example shows how to set the value to 350 by using the hold-queue in interface configuration command:\r\n\r\n\r\nRouter# configure terminal\r\nRouter(config)# interface gigabitEthernet 1\r\nRouter(config-if)# hold-queue 350 in\r\n\r\nMonitor and Detect Queue Wedges with Cisco IOS Embedded Event Manager\r\n\r\nTo monitor and detect interface queue wedges that are caused by this vulnerability, administrators can use a Cisco IOS Embedded Event Manager (EEM) policy that is based on Tool Command Language (Tcl). This policy would allow administrators to monitor interfaces for devices that are running Cisco IOS XE Software and detect when input queues are full. When Cisco IOS EEM detects potential exploitation of this vulnerability, the policy sends an alert to the network administrator, who can then decide to implement an upgrade, implement suitable mitigations, or reload the device to clear the input queue.\r\n\r\nThe Tcl script is available for download at Interface Input Queue Monitor [\"https://supportforums.cisco.com/docs/DOC-19337\"].",
"title": "Details"
},
{
"category": "general",
"text": "To identify an affected interface, run the following commands:\r\n\r\n\r\nRouter#show interfaces | include line|Input\r\nGigabitEthernet1 is up, line protocol is up\r\nInput queue: 376/375/0/0 (size/max/drops/flushes); Total output drops: 0\r\n\r\nAn input queue is wedged when the size value is greater than the max value.",
"title": "Indicators of Compromise"
},
{
"category": "general",
"text": "There is a workaround that addresses this vulnerability. Administrators can enable DHCP snooping on all VLANs by using the ip dhcp snooping vlan ? command, as shown in the following example:\r\n\r\n\r\nDevice-1(config)#ip dhcp snooping vlan ?\r\nWORD DHCP Snooping vlan first number or vlan range, example: 1,3-5,7,9-11\r\n\r\nWhile this workaround has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment.",
"title": "Workarounds"
},
{
"category": "general",
"text": "Cisco has released free software updates [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu\"] that address the vulnerability described in this advisory. Customers with service contracts that entitle them to regular software updates should obtain security fixes through their usual update channels.\r\n\r\nCustomers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:\r\nhttps://www.cisco.com/c/en/us/products/end-user-license-agreement.html [\"https://www.cisco.com/c/en/us/products/end-user-license-agreement.html\"]\r\n\r\nAdditionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.\r\n\r\nThe Cisco Support and Downloads page [\"https://www.cisco.com/c/en/us/support/index.html\"] on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool.\r\n\r\nWhen considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page [\"https://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.\r\n Customers Without Service Contracts\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]\r\n\r\nCustomers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n Cisco IOS and IOS XE Software\r\nTo help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (\u201cFirst Fixed\u201d). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (\u201cCombined First Fixed\u201d).\r\n\r\nTo use the tool, go to the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"] page and follow the instructions. Alternatively, use the following form to determine whether a release is affected by any Cisco Security Advisory. To use the form, follow these steps:\r\n\r\nChoose which advisories the tool will search\u2014only this advisory, only advisories with a Critical or High Security Impact Rating (SIR) [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr\"], or all advisories.\r\nEnter a release number\u2014for example, 15.9(3)M2 or 17.3.3.\r\nClick Check.\r\n\r\n Only this advisory All Critical and High advisories All advisories",
"title": "Fixed Software"
},
{
"category": "general",
"text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
"title": "Vulnerability Policy"
},
{
"category": "general",
"text": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
"title": "Exploitation and Public Announcements"
},
{
"category": "general",
"text": "This vulnerability was found during the resolution of a Cisco TAC support case.",
"title": "Source"
},
{
"category": "legal_disclaimer",
"text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
"title": "Legal Disclaimer"
}
],
"publisher": {
"category": "vendor",
"contact_details": "psirt@cisco.com",
"issuing_authority": "Cisco PSIRT",
"name": "Cisco",
"namespace": "https://wwww.cisco.com"
},
"references": [
{
"category": "self",
"summary": "Cisco IOS XE Software DHCP Snooping Denial of Service Vulnerability",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
},
{
"category": "external",
"summary": "Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication",
"url": "https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279"
},
{
"category": "external",
"summary": "Cisco Security Vulnerability Policy",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
},
{
"category": "external",
"summary": "Interface Input Queue Monitor",
"url": "https://supportforums.cisco.com/docs/DOC-19337"
},
{
"category": "external",
"summary": "free software updates",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu"
},
{
"category": "external",
"summary": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html",
"url": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"
},
{
"category": "external",
"summary": "Cisco Support and Downloads page",
"url": "https://www.cisco.com/c/en/us/support/index.html"
},
{
"category": "external",
"summary": "considering software upgrades",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"
},
{
"category": "external",
"summary": "Cisco Security Advisories page",
"url": "https://www.cisco.com/go/psirt"
},
{
"category": "external",
"summary": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html",
"url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
},
{
"category": "external",
"summary": "Cisco Software Checker",
"url": "https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"
},
{
"category": "external",
"summary": "Security Impact Rating (SIR)",
"url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"
},
{
"category": "external",
"summary": "Security Vulnerability Policy",
"url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"
}
],
"title": "Cisco IOS XE Software DHCP Snooping Denial of Service Vulnerability",
"tracking": {
"current_release_date": "2025-05-07T16:00:00+00:00",
"generator": {
"date": "2025-05-07T16:00:01+00:00",
"engine": {
"name": "TVCE"
}
},
"id": "cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks",
"initial_release_date": "2025-05-07T16:00:00+00:00",
"revision_history": [
{
"date": "2025-05-07T15:53:19+00:00",
"number": "1.0.0",
"summary": "Initial public release."
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"branches": [
{
"category": "service_pack",
"name": "16.11.1",
"product": {
"name": "16.11.1",
"product_id": "CSAFPID-227918"
}
},
{
"category": "service_pack",
"name": "16.11.1a",
"product": {
"name": "16.11.1a",
"product_id": "CSAFPID-252271"
}
},
{
"category": "service_pack",
"name": "16.11.2",
"product": {
"name": "16.11.2",
"product_id": "CSAFPID-261240"
}
},
{
"category": "service_pack",
"name": "16.11.1s",
"product": {
"name": "16.11.1s",
"product_id": "CSAFPID-261465"
}
},
{
"category": "service_pack",
"name": "16.11.1c",
"product": {
"name": "16.11.1c",
"product_id": "CSAFPID-264096"
}
}
],
"category": "product_version",
"name": "16.11"
},
{
"branches": [
{
"category": "service_pack",
"name": "16.12.1",
"product": {
"name": "16.12.1",
"product_id": "CSAFPID-227920"
}
},
{
"category": "service_pack",
"name": "16.12.1s",
"product": {
"name": "16.12.1s",
"product_id": "CSAFPID-265735"
}
},
{
"category": "service_pack",
"name": "16.12.1a",
"product": {
"name": "16.12.1a",
"product_id": "CSAFPID-265841"
}
},
{
"category": "service_pack",
"name": "16.12.1c",
"product": {
"name": "16.12.1c",
"product_id": "CSAFPID-267110"
}
},
{
"category": "service_pack",
"name": "16.12.2",
"product": {
"name": "16.12.2",
"product_id": "CSAFPID-267605"
}
},
{
"category": "service_pack",
"name": "16.12.3",
"product": {
"name": "16.12.3",
"product_id": "CSAFPID-273445"
}
},
{
"category": "service_pack",
"name": "16.12.8",
"product": {
"name": "16.12.8",
"product_id": "CSAFPID-273448"
}
},
{
"category": "service_pack",
"name": "16.12.2s",
"product": {
"name": "16.12.2s",
"product_id": "CSAFPID-273509"
}
},
{
"category": "service_pack",
"name": "16.12.2t",
"product": {
"name": "16.12.2t",
"product_id": "CSAFPID-275538"
}
},
{
"category": "service_pack",
"name": "16.12.4",
"product": {
"name": "16.12.4",
"product_id": "CSAFPID-277147"
}
},
{
"category": "service_pack",
"name": "16.12.3s",
"product": {
"name": "16.12.3s",
"product_id": "CSAFPID-277255"
}
},
{
"category": "service_pack",
"name": "16.12.5",
"product": {
"name": "16.12.5",
"product_id": "CSAFPID-280463"
}
},
{
"category": "service_pack",
"name": "16.12.6",
"product": {
"name": "16.12.6",
"product_id": "CSAFPID-280937"
}
},
{
"category": "service_pack",
"name": "16.12.7",
"product": {
"name": "16.12.7",
"product_id": "CSAFPID-286031"
}
},
{
"category": "service_pack",
"name": "16.12.14",
"product": {
"name": "16.12.14",
"product_id": "CSAFPID-305303"
}
}
],
"category": "product_version",
"name": "16.12"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.1.1",
"product": {
"name": "17.1.1",
"product_id": "CSAFPID-245377"
}
},
{
"category": "service_pack",
"name": "17.1.1s",
"product": {
"name": "17.1.1s",
"product_id": "CSAFPID-274818"
}
},
{
"category": "service_pack",
"name": "17.1.2",
"product": {
"name": "17.1.2",
"product_id": "CSAFPID-277338"
}
},
{
"category": "service_pack",
"name": "17.1.1t",
"product": {
"name": "17.1.1t",
"product_id": "CSAFPID-277348"
}
},
{
"category": "service_pack",
"name": "17.1.3",
"product": {
"name": "17.1.3",
"product_id": "CSAFPID-280652"
}
}
],
"category": "product_version",
"name": "17.1"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.2.1",
"product": {
"name": "17.2.1",
"product_id": "CSAFPID-251225"
}
},
{
"category": "service_pack",
"name": "17.2.1r",
"product": {
"name": "17.2.1r",
"product_id": "CSAFPID-277194"
}
},
{
"category": "service_pack",
"name": "17.2.1v",
"product": {
"name": "17.2.1v",
"product_id": "CSAFPID-278002"
}
},
{
"category": "service_pack",
"name": "17.2.2",
"product": {
"name": "17.2.2",
"product_id": "CSAFPID-278504"
}
},
{
"category": "service_pack",
"name": "17.2.3",
"product": {
"name": "17.2.3",
"product_id": "CSAFPID-280939"
}
}
],
"category": "product_version",
"name": "17.2"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.3.1",
"product": {
"name": "17.3.1",
"product_id": "CSAFPID-254712"
}
},
{
"category": "service_pack",
"name": "17.3.2",
"product": {
"name": "17.3.2",
"product_id": "CSAFPID-277099"
}
},
{
"category": "service_pack",
"name": "17.3.3",
"product": {
"name": "17.3.3",
"product_id": "CSAFPID-278019"
}
},
{
"category": "service_pack",
"name": "17.3.1a",
"product": {
"name": "17.3.1a",
"product_id": "CSAFPID-279338"
}
},
{
"category": "service_pack",
"name": "17.3.4",
"product": {
"name": "17.3.4",
"product_id": "CSAFPID-282028"
}
},
{
"category": "service_pack",
"name": "17.3.5",
"product": {
"name": "17.3.5",
"product_id": "CSAFPID-282115"
}
},
{
"category": "service_pack",
"name": "17.3.4a",
"product": {
"name": "17.3.4a",
"product_id": "CSAFPID-284178"
}
},
{
"category": "service_pack",
"name": "17.3.6",
"product": {
"name": "17.3.6",
"product_id": "CSAFPID-284331"
}
},
{
"category": "service_pack",
"name": "17.3.7",
"product": {
"name": "17.3.7",
"product_id": "CSAFPID-290671"
}
},
{
"category": "service_pack",
"name": "17.3.8",
"product": {
"name": "17.3.8",
"product_id": "CSAFPID-295398"
}
},
{
"category": "service_pack",
"name": "17.3.8a",
"product": {
"name": "17.3.8a",
"product_id": "CSAFPID-300847"
}
}
],
"category": "product_version",
"name": "17.3"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.4.1",
"product": {
"name": "17.4.1",
"product_id": "CSAFPID-262588"
}
},
{
"category": "service_pack",
"name": "17.4.2",
"product": {
"name": "17.4.2",
"product_id": "CSAFPID-278020"
}
},
{
"category": "service_pack",
"name": "17.4.1a",
"product": {
"name": "17.4.1a",
"product_id": "CSAFPID-280770"
}
},
{
"category": "service_pack",
"name": "17.4.1b",
"product": {
"name": "17.4.1b",
"product_id": "CSAFPID-280899"
}
},
{
"category": "service_pack",
"name": "17.4.1c",
"product": {
"name": "17.4.1c",
"product_id": "CSAFPID-282116"
}
}
],
"category": "product_version",
"name": "17.4"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.5.1",
"product": {
"name": "17.5.1",
"product_id": "CSAFPID-262590"
}
},
{
"category": "service_pack",
"name": "17.5.1a",
"product": {
"name": "17.5.1a",
"product_id": "CSAFPID-282046"
}
},
{
"category": "service_pack",
"name": "17.5.1b",
"product": {
"name": "17.5.1b",
"product_id": "CSAFPID-290596"
}
},
{
"category": "service_pack",
"name": "17.5.1c",
"product": {
"name": "17.5.1c",
"product_id": "CSAFPID-292698"
}
}
],
"category": "product_version",
"name": "17.5"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.6.1",
"product": {
"name": "17.6.1",
"product_id": "CSAFPID-262592"
}
},
{
"category": "service_pack",
"name": "17.6.2",
"product": {
"name": "17.6.2",
"product_id": "CSAFPID-282117"
}
},
{
"category": "service_pack",
"name": "17.6.1a",
"product": {
"name": "17.6.1a",
"product_id": "CSAFPID-284179"
}
},
{
"category": "service_pack",
"name": "17.6.3",
"product": {
"name": "17.6.3",
"product_id": "CSAFPID-286409"
}
},
{
"category": "service_pack",
"name": "17.6.1y",
"product": {
"name": "17.6.1y",
"product_id": "CSAFPID-286477"
}
},
{
"category": "service_pack",
"name": "17.6.3a",
"product": {
"name": "17.6.3a",
"product_id": "CSAFPID-286594"
}
},
{
"category": "service_pack",
"name": "17.6.4",
"product": {
"name": "17.6.4",
"product_id": "CSAFPID-287087"
}
},
{
"category": "service_pack",
"name": "17.6.5",
"product": {
"name": "17.6.5",
"product_id": "CSAFPID-290660"
}
},
{
"category": "service_pack",
"name": "17.6.6",
"product": {
"name": "17.6.6",
"product_id": "CSAFPID-292656"
}
},
{
"category": "service_pack",
"name": "17.6.6a",
"product": {
"name": "17.6.6a",
"product_id": "CSAFPID-300848"
}
},
{
"category": "service_pack",
"name": "17.6.5a",
"product": {
"name": "17.6.5a",
"product_id": "CSAFPID-300850"
}
},
{
"category": "service_pack",
"name": "17.6.7",
"product": {
"name": "17.6.7",
"product_id": "CSAFPID-300851"
}
},
{
"category": "service_pack",
"name": "17.6.8",
"product": {
"name": "17.6.8",
"product_id": "CSAFPID-301722"
}
},
{
"category": "service_pack",
"name": "17.6.8a",
"product": {
"name": "17.6.8a",
"product_id": "CSAFPID-302974"
}
}
],
"category": "product_version",
"name": "17.6"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.7.1",
"product": {
"name": "17.7.1",
"product_id": "CSAFPID-277357"
}
},
{
"category": "service_pack",
"name": "17.7.1a",
"product": {
"name": "17.7.1a",
"product_id": "CSAFPID-285329"
}
},
{
"category": "service_pack",
"name": "17.7.2",
"product": {
"name": "17.7.2",
"product_id": "CSAFPID-286534"
}
}
],
"category": "product_version",
"name": "17.7"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.10.1",
"product": {
"name": "17.10.1",
"product_id": "CSAFPID-278018"
}
},
{
"category": "service_pack",
"name": "17.10.1a",
"product": {
"name": "17.10.1a",
"product_id": "CSAFPID-290580"
}
}
],
"category": "product_version",
"name": "17.10"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.8.1",
"product": {
"name": "17.8.1",
"product_id": "CSAFPID-278023"
}
},
{
"category": "service_pack",
"name": "17.8.1a",
"product": {
"name": "17.8.1a",
"product_id": "CSAFPID-286486"
}
}
],
"category": "product_version",
"name": "17.8"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.9.1",
"product": {
"name": "17.9.1",
"product_id": "CSAFPID-278025"
}
},
{
"category": "service_pack",
"name": "17.9.2",
"product": {
"name": "17.9.2",
"product_id": "CSAFPID-288221"
}
},
{
"category": "service_pack",
"name": "17.9.1a",
"product": {
"name": "17.9.1a",
"product_id": "CSAFPID-288247"
}
},
{
"category": "service_pack",
"name": "17.9.3",
"product": {
"name": "17.9.3",
"product_id": "CSAFPID-290674"
}
},
{
"category": "service_pack",
"name": "17.9.2a",
"product": {
"name": "17.9.2a",
"product_id": "CSAFPID-290675"
}
},
{
"category": "service_pack",
"name": "17.9.3a",
"product": {
"name": "17.9.3a",
"product_id": "CSAFPID-295198"
}
},
{
"category": "service_pack",
"name": "17.9.4",
"product": {
"name": "17.9.4",
"product_id": "CSAFPID-295412"
}
},
{
"category": "service_pack",
"name": "17.9.5",
"product": {
"name": "17.9.5",
"product_id": "CSAFPID-300263"
}
},
{
"category": "service_pack",
"name": "17.9.4a",
"product": {
"name": "17.9.4a",
"product_id": "CSAFPID-300845"
}
},
{
"category": "service_pack",
"name": "17.9.5a",
"product": {
"name": "17.9.5a",
"product_id": "CSAFPID-301278"
}
},
{
"category": "service_pack",
"name": "17.9.6",
"product": {
"name": "17.9.6",
"product_id": "CSAFPID-301723"
}
},
{
"category": "service_pack",
"name": "17.9.5e",
"product": {
"name": "17.9.5e",
"product_id": "CSAFPID-303047"
}
},
{
"category": "service_pack",
"name": "17.9.5f",
"product": {
"name": "17.9.5f",
"product_id": "CSAFPID-303316"
}
},
{
"category": "service_pack",
"name": "17.9.7b",
"product": {
"name": "17.9.7b",
"product_id": "CSAFPID-306388"
}
}
],
"category": "product_version",
"name": "17.9"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.11.1",
"product": {
"name": "17.11.1",
"product_id": "CSAFPID-286799"
}
},
{
"category": "service_pack",
"name": "17.11.1a",
"product": {
"name": "17.11.1a",
"product_id": "CSAFPID-294838"
}
}
],
"category": "product_version",
"name": "17.11"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.12.1",
"product": {
"name": "17.12.1",
"product_id": "CSAFPID-286801"
}
},
{
"category": "service_pack",
"name": "17.12.1a",
"product": {
"name": "17.12.1a",
"product_id": "CSAFPID-300012"
}
},
{
"category": "service_pack",
"name": "17.12.2",
"product": {
"name": "17.12.2",
"product_id": "CSAFPID-300834"
}
},
{
"category": "service_pack",
"name": "17.12.3",
"product": {
"name": "17.12.3",
"product_id": "CSAFPID-300936"
}
},
{
"category": "service_pack",
"name": "17.12.4",
"product": {
"name": "17.12.4",
"product_id": "CSAFPID-301716"
}
},
{
"category": "service_pack",
"name": "17.12.3a",
"product": {
"name": "17.12.3a",
"product_id": "CSAFPID-302628"
}
},
{
"category": "service_pack",
"name": "17.12.4a",
"product": {
"name": "17.12.4a",
"product_id": "CSAFPID-303024"
}
},
{
"category": "service_pack",
"name": "17.12.4b",
"product": {
"name": "17.12.4b",
"product_id": "CSAFPID-303308"
}
},
{
"category": "service_pack",
"name": "17.12.5c",
"product": {
"name": "17.12.5c",
"product_id": "CSAFPID-306389"
}
}
],
"category": "product_version",
"name": "17.12"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.13.1",
"product": {
"name": "17.13.1",
"product_id": "CSAFPID-295359"
}
},
{
"category": "service_pack",
"name": "17.13.1a",
"product": {
"name": "17.13.1a",
"product_id": "CSAFPID-300947"
}
}
],
"category": "product_version",
"name": "17.13"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.14.1",
"product": {
"name": "17.14.1",
"product_id": "CSAFPID-295361"
}
},
{
"category": "service_pack",
"name": "17.14.1a",
"product": {
"name": "17.14.1a",
"product_id": "CSAFPID-301611"
}
}
],
"category": "product_version",
"name": "17.14"
},
{
"branches": [
{
"category": "service_pack",
"name": "17.15.1",
"product": {
"name": "17.15.1",
"product_id": "CSAFPID-300938"
}
},
{
"category": "service_pack",
"name": "17.15.1a",
"product": {
"name": "17.15.1a",
"product_id": "CSAFPID-302682"
}
}
],
"category": "product_version",
"name": "17.15"
}
],
"category": "product_family",
"name": "Cisco IOS XE Software"
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-20162",
"ids": [
{
"system_name": "Cisco Bug ID",
"text": "CSCwm45385"
}
],
"notes": [
{
"category": "other",
"text": "Complete.",
"title": "Affected Product Comprehensiveness"
}
],
"product_status": {
"known_affected": [
"CSAFPID-227918",
"CSAFPID-227920",
"CSAFPID-245377",
"CSAFPID-251225",
"CSAFPID-252271",
"CSAFPID-254712",
"CSAFPID-261240",
"CSAFPID-261465",
"CSAFPID-262588",
"CSAFPID-262590",
"CSAFPID-262592",
"CSAFPID-264096",
"CSAFPID-265735",
"CSAFPID-265841",
"CSAFPID-267110",
"CSAFPID-267605",
"CSAFPID-273445",
"CSAFPID-273448",
"CSAFPID-273509",
"CSAFPID-274818",
"CSAFPID-275538",
"CSAFPID-277099",
"CSAFPID-277147",
"CSAFPID-277194",
"CSAFPID-277255",
"CSAFPID-277338",
"CSAFPID-277348",
"CSAFPID-277357",
"CSAFPID-278002",
"CSAFPID-278018",
"CSAFPID-278019",
"CSAFPID-278020",
"CSAFPID-278023",
"CSAFPID-278025",
"CSAFPID-278504",
"CSAFPID-279338",
"CSAFPID-280463",
"CSAFPID-280652",
"CSAFPID-280770",
"CSAFPID-280899",
"CSAFPID-280937",
"CSAFPID-280939",
"CSAFPID-282028",
"CSAFPID-282046",
"CSAFPID-282115",
"CSAFPID-282116",
"CSAFPID-282117",
"CSAFPID-284178",
"CSAFPID-284179",
"CSAFPID-284331",
"CSAFPID-285329",
"CSAFPID-286031",
"CSAFPID-286409",
"CSAFPID-286477",
"CSAFPID-286486",
"CSAFPID-286534",
"CSAFPID-286594",
"CSAFPID-286799",
"CSAFPID-286801",
"CSAFPID-287087",
"CSAFPID-288221",
"CSAFPID-288247",
"CSAFPID-290580",
"CSAFPID-290596",
"CSAFPID-290660",
"CSAFPID-290671",
"CSAFPID-290674",
"CSAFPID-290675",
"CSAFPID-292656",
"CSAFPID-292698",
"CSAFPID-294838",
"CSAFPID-295198",
"CSAFPID-295359",
"CSAFPID-295361",
"CSAFPID-295398",
"CSAFPID-295412",
"CSAFPID-300012",
"CSAFPID-300263",
"CSAFPID-300834",
"CSAFPID-300845",
"CSAFPID-300847",
"CSAFPID-300848",
"CSAFPID-300850",
"CSAFPID-300851",
"CSAFPID-300936",
"CSAFPID-300938",
"CSAFPID-300947",
"CSAFPID-301278",
"CSAFPID-301611",
"CSAFPID-301716",
"CSAFPID-301722",
"CSAFPID-301723",
"CSAFPID-302628",
"CSAFPID-302682",
"CSAFPID-302974",
"CSAFPID-303024",
"CSAFPID-303047",
"CSAFPID-303308",
"CSAFPID-303316",
"CSAFPID-305303",
"CSAFPID-306388",
"CSAFPID-306389"
]
},
"release_date": "2025-05-07T16:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"details": "Cisco has released software updates that address this vulnerability.",
"product_ids": [
"CSAFPID-227918",
"CSAFPID-227920",
"CSAFPID-245377",
"CSAFPID-251225",
"CSAFPID-252271",
"CSAFPID-254712",
"CSAFPID-261240",
"CSAFPID-261465",
"CSAFPID-262588",
"CSAFPID-262590",
"CSAFPID-262592",
"CSAFPID-264096",
"CSAFPID-265735",
"CSAFPID-265841",
"CSAFPID-267110",
"CSAFPID-267605",
"CSAFPID-273445",
"CSAFPID-273448",
"CSAFPID-273509",
"CSAFPID-274818",
"CSAFPID-275538",
"CSAFPID-277099",
"CSAFPID-277147",
"CSAFPID-277194",
"CSAFPID-277255",
"CSAFPID-277338",
"CSAFPID-277348",
"CSAFPID-277357",
"CSAFPID-278002",
"CSAFPID-278018",
"CSAFPID-278019",
"CSAFPID-278020",
"CSAFPID-278023",
"CSAFPID-278025",
"CSAFPID-278504",
"CSAFPID-279338",
"CSAFPID-280463",
"CSAFPID-280652",
"CSAFPID-280770",
"CSAFPID-280899",
"CSAFPID-280937",
"CSAFPID-280939",
"CSAFPID-282028",
"CSAFPID-282046",
"CSAFPID-282115",
"CSAFPID-282116",
"CSAFPID-282117",
"CSAFPID-284178",
"CSAFPID-284179",
"CSAFPID-284331",
"CSAFPID-285329",
"CSAFPID-286031",
"CSAFPID-286409",
"CSAFPID-286477",
"CSAFPID-286486",
"CSAFPID-286534",
"CSAFPID-286594",
"CSAFPID-286799",
"CSAFPID-286801",
"CSAFPID-287087",
"CSAFPID-288221",
"CSAFPID-288247",
"CSAFPID-290580",
"CSAFPID-290596",
"CSAFPID-290660",
"CSAFPID-290671",
"CSAFPID-290674",
"CSAFPID-290675",
"CSAFPID-292656",
"CSAFPID-292698",
"CSAFPID-294838",
"CSAFPID-295198",
"CSAFPID-295359",
"CSAFPID-295361",
"CSAFPID-295398",
"CSAFPID-295412",
"CSAFPID-300012",
"CSAFPID-300263",
"CSAFPID-300834",
"CSAFPID-300845",
"CSAFPID-300847",
"CSAFPID-300848",
"CSAFPID-300850",
"CSAFPID-300851",
"CSAFPID-300936",
"CSAFPID-300938",
"CSAFPID-300947",
"CSAFPID-301278",
"CSAFPID-301611",
"CSAFPID-301716",
"CSAFPID-301722",
"CSAFPID-301723",
"CSAFPID-302628",
"CSAFPID-302682",
"CSAFPID-302974",
"CSAFPID-303024",
"CSAFPID-303047",
"CSAFPID-303308",
"CSAFPID-303316",
"CSAFPID-305303",
"CSAFPID-306388",
"CSAFPID-306389"
],
"url": "https://software.cisco.com"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-227918",
"CSAFPID-227920",
"CSAFPID-245377",
"CSAFPID-251225",
"CSAFPID-252271",
"CSAFPID-254712",
"CSAFPID-261240",
"CSAFPID-261465",
"CSAFPID-262588",
"CSAFPID-262590",
"CSAFPID-262592",
"CSAFPID-264096",
"CSAFPID-265735",
"CSAFPID-265841",
"CSAFPID-267110",
"CSAFPID-267605",
"CSAFPID-273445",
"CSAFPID-273448",
"CSAFPID-273509",
"CSAFPID-274818",
"CSAFPID-275538",
"CSAFPID-277099",
"CSAFPID-277147",
"CSAFPID-277194",
"CSAFPID-277255",
"CSAFPID-277338",
"CSAFPID-277348",
"CSAFPID-277357",
"CSAFPID-278002",
"CSAFPID-278018",
"CSAFPID-278019",
"CSAFPID-278020",
"CSAFPID-278023",
"CSAFPID-278025",
"CSAFPID-278504",
"CSAFPID-279338",
"CSAFPID-280463",
"CSAFPID-280652",
"CSAFPID-280770",
"CSAFPID-280899",
"CSAFPID-280937",
"CSAFPID-280939",
"CSAFPID-282028",
"CSAFPID-282046",
"CSAFPID-282115",
"CSAFPID-282116",
"CSAFPID-282117",
"CSAFPID-284178",
"CSAFPID-284179",
"CSAFPID-284331",
"CSAFPID-285329",
"CSAFPID-286031",
"CSAFPID-286409",
"CSAFPID-286477",
"CSAFPID-286486",
"CSAFPID-286534",
"CSAFPID-286594",
"CSAFPID-286799",
"CSAFPID-286801",
"CSAFPID-287087",
"CSAFPID-288221",
"CSAFPID-288247",
"CSAFPID-290580",
"CSAFPID-290596",
"CSAFPID-290660",
"CSAFPID-290671",
"CSAFPID-290674",
"CSAFPID-290675",
"CSAFPID-292656",
"CSAFPID-292698",
"CSAFPID-294838",
"CSAFPID-295198",
"CSAFPID-295359",
"CSAFPID-295361",
"CSAFPID-295398",
"CSAFPID-295412",
"CSAFPID-300012",
"CSAFPID-300263",
"CSAFPID-300834",
"CSAFPID-300845",
"CSAFPID-300847",
"CSAFPID-300848",
"CSAFPID-300850",
"CSAFPID-300851",
"CSAFPID-300936",
"CSAFPID-300938",
"CSAFPID-300947",
"CSAFPID-301278",
"CSAFPID-301611",
"CSAFPID-301716",
"CSAFPID-301722",
"CSAFPID-301723",
"CSAFPID-302628",
"CSAFPID-302682",
"CSAFPID-302974",
"CSAFPID-303024",
"CSAFPID-303047",
"CSAFPID-303308",
"CSAFPID-303316",
"CSAFPID-305303",
"CSAFPID-306388",
"CSAFPID-306389"
]
}
],
"title": "Cisco IOS XE DHCP Snooping Denial of Service Vulnerability"
}
]
}
FKIE_CVE-2025-20162
Vulnerability from fkie_nvd - Published: 2025-05-07 18:15 - Updated: 2025-07-11 14:58
Severity
Summary
A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service (DoS) condition.
This vulnerability is due to improper handling of DHCP request packets. An attacker could exploit this vulnerability by sending DHCP request packets to an affected device. A successful exploit could allow the attacker to cause packets to wedge in the queue, creating a DoS condition for downstream devices of the affected system and requiring that the system restart to drain the queue.
Note: This vulnerability can be exploited with either unicast or broadcast DHCP packets on a VLAN that does not have DHCP snooping enabled.
References
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| cisco | ios_xe | 16.11.1 | |
| cisco | ios_xe | 16.11.1a | |
| cisco | ios_xe | 16.11.1s | |
| cisco | ios_xe | 16.11.2 | |
| cisco | ios_xe | 16.12.1 | |
| cisco | ios_xe | 16.12.1a | |
| cisco | ios_xe | 16.12.1c | |
| cisco | ios_xe | 16.12.1s | |
| cisco | ios_xe | 16.12.2 | |
| cisco | ios_xe | 16.12.2s | |
| cisco | ios_xe | 16.12.3 | |
| cisco | ios_xe | 16.12.3s | |
| cisco | ios_xe | 16.12.4 | |
| cisco | ios_xe | 16.12.5 | |
| cisco | ios_xe | 16.12.6 | |
| cisco | ios_xe | 16.12.7 | |
| cisco | ios_xe | 16.12.8 | |
| cisco | ios_xe | 17.1.1 | |
| cisco | ios_xe | 17.1.1s | |
| cisco | ios_xe | 17.1.1t | |
| cisco | ios_xe | 17.1.3 | |
| cisco | ios_xe | 17.2.1 | |
| cisco | ios_xe | 17.2.1r | |
| cisco | ios_xe | 17.2.1v | |
| cisco | ios_xe | 17.2.2 | |
| cisco | ios_xe | 17.2.3 | |
| cisco | ios_xe | 17.3.1 | |
| cisco | ios_xe | 17.3.1a | |
| cisco | ios_xe | 17.3.2 | |
| cisco | ios_xe | 17.3.3 | |
| cisco | ios_xe | 17.3.4 | |
| cisco | ios_xe | 17.3.4a | |
| cisco | ios_xe | 17.3.5 | |
| cisco | ios_xe | 17.3.6 | |
| cisco | ios_xe | 17.3.7 | |
| cisco | ios_xe | 17.3.8 | |
| cisco | ios_xe | 17.3.8a | |
| cisco | ios_xe | 17.4.1 | |
| cisco | ios_xe | 17.4.1a | |
| cisco | ios_xe | 17.4.1b | |
| cisco | ios_xe | 17.4.2 | |
| cisco | ios_xe | 17.5.1 | |
| cisco | ios_xe | 17.5.1a | |
| cisco | ios_xe | 17.6.1 | |
| cisco | ios_xe | 17.6.1a | |
| cisco | ios_xe | 17.6.1y | |
| cisco | ios_xe | 17.6.2 | |
| cisco | ios_xe | 17.6.3 | |
| cisco | ios_xe | 17.6.3a | |
| cisco | ios_xe | 17.6.4 | |
| cisco | ios_xe | 17.6.5 | |
| cisco | ios_xe | 17.6.5a | |
| cisco | ios_xe | 17.6.6 | |
| cisco | ios_xe | 17.6.6a | |
| cisco | ios_xe | 17.6.7 | |
| cisco | ios_xe | 17.6.8 | |
| cisco | ios_xe | 17.6.8a | |
| cisco | ios_xe | 17.7.1 | |
| cisco | ios_xe | 17.7.1a | |
| cisco | ios_xe | 17.7.2 | |
| cisco | ios_xe | 17.8.1 | |
| cisco | ios_xe | 17.8.1a | |
| cisco | ios_xe | 17.9.1 | |
| cisco | ios_xe | 17.9.1a | |
| cisco | ios_xe | 17.9.2 | |
| cisco | ios_xe | 17.9.2a | |
| cisco | ios_xe | 17.9.3 | |
| cisco | ios_xe | 17.9.3a | |
| cisco | ios_xe | 17.9.4 | |
| cisco | ios_xe | 17.9.4a | |
| cisco | ios_xe | 17.9.5 | |
| cisco | ios_xe | 17.9.5a | |
| cisco | ios_xe | 17.9.5e | |
| cisco | ios_xe | 17.9.5f | |
| cisco | ios_xe | 17.9.6 | |
| cisco | ios_xe | 17.10.1 | |
| cisco | ios_xe | 17.10.1a | |
| cisco | ios_xe | 17.11.1 | |
| cisco | ios_xe | 17.11.1a | |
| cisco | ios_xe | 17.12.1 | |
| cisco | ios_xe | 17.12.1a | |
| cisco | ios_xe | 17.12.2 | |
| cisco | ios_xe | 17.12.3 | |
| cisco | ios_xe | 17.12.3a | |
| cisco | ios_xe | 17.12.4 | |
| cisco | ios_xe | 17.12.4a | |
| cisco | ios_xe | 17.12.4b | |
| cisco | ios_xe | 17.13.1 | |
| cisco | ios_xe | 17.13.1a | |
| cisco | ios_xe | 17.14.1 | |
| cisco | ios_xe | 17.14.1a | |
| cisco | ios_xe | 17.15.1 | |
| cisco | ios_xe | 17.15.1a |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "314C7763-A64D-4023-9F3F-9A821AE4151F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
"matchCriteriaId": "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
"matchCriteriaId": "B53E377A-0296-4D7A-B97C-576B0026543D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
"matchCriteriaId": "C98DED36-D4B5-48D6-964E-EEEE97936700",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "CD98C9E8-3EA6-4160-970D-37C389576516",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
"matchCriteriaId": "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
"matchCriteriaId": "9027A528-2588-4C06-810B-5BB313FE4323",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
"matchCriteriaId": "E5019B59-508E-40B0-9C92-2C26F58E2FBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
"matchCriteriaId": "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
"matchCriteriaId": "D5750264-2990-4942-85F4-DB9746C5CA2B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
"matchCriteriaId": "B9173AD6-6658-4267-AAA7-D50D0B657528",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
"matchCriteriaId": "7F02EE9D-45B1-43D6-B05D-6FF19472216B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.5:*:*:*:*:*:*:*",
"matchCriteriaId": "8FCB9440-F470-45D1-AAFA-01FB5D76B600",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.6:*:*:*:*:*:*:*",
"matchCriteriaId": "5B736F09-3B51-4B2A-92F6-602847001F15",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.7:*:*:*:*:*:*:*",
"matchCriteriaId": "5E864BB1-FD23-4AB3-9138-5FD8B62EAF5B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:16.12.8:*:*:*:*:*:*:*",
"matchCriteriaId": "838D6C2D-C131-4A9C-AAE5-5BF38E637E4B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E306B09C-CB48-4067-B60C-5F738555EEAC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
"matchCriteriaId": "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
"matchCriteriaId": "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*",
"matchCriteriaId": "8B4D4659-A304-459F-8AB3-ED6D84B44C0F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
"matchCriteriaId": "C04DF35A-1B6F-420A-8D84-74EB41BF3700",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
"matchCriteriaId": "211CC9B2-6108-4C50-AB31-DC527C43053E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
"matchCriteriaId": "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
"matchCriteriaId": "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "128F95D7-E49F-4B36-8F47-823C0298449E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "E21B3881-37E9-4C00-9336-12C9C28D1B61",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "2B270A04-9961-4E99-806B-441CD674AFBD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "C5DD2403-113B-4100-8BD4-90E1927E6648",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4:*:*:*:*:*:*:*",
"matchCriteriaId": "DAF73937-BCE2-4BEF-B4B0-83212DA4A6C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4a:*:*:*:*:*:*:*",
"matchCriteriaId": "2DDB1E60-C2A9-4570-BE80-F3D478A53738",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5:*:*:*:*:*:*:*",
"matchCriteriaId": "6B2902D8-3A7B-4C47-9BC6-8CA4C580A346",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.3.6:*:*:*:*:*:*:*",
"matchCriteriaId": "917BA05C-2A18-4C68-B508-85C2B5A94416",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.3.7:*:*:*:*:*:*:*",
"matchCriteriaId": "06337791-7D8D-4EAA-BACC-4E270F377B3E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.3.8:*:*:*:*:*:*:*",
"matchCriteriaId": "336A8630-653C-4E28-8DE1-76CDD8573980",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.3.8a:*:*:*:*:*:*:*",
"matchCriteriaId": "0A1767AE-7D9F-4BAA-90E1-CF8314CD0B53",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5A6B707B-4543-41F1-83DF-49A93BF56FB1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "DC8F611B-D347-4A21-90E6-56CF4D8A35A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*",
"matchCriteriaId": "D9A92CE4-B4B0-4C14-AE11-8DFE511406F3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.4.2:*:*:*:*:*:*:*",
"matchCriteriaId": "274E3E6F-4280-4EAE-B102-1BE57FE1F1D2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1:*:*:*:*:*:*:*",
"matchCriteriaId": "938B0720-8CA7-43BA-9708-5CE9EC7A565A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "D4BE7166-DBD3-4CE6-A14A-725FE896B85E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1:*:*:*:*:*:*:*",
"matchCriteriaId": "4DE62C4B-7C06-4907-BADE-416C1618D2D9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "0C60DF3F-DBD9-4BBF-812E-4BB0C47BDF3C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1y:*:*:*:*:*:*:*",
"matchCriteriaId": "1B80614B-6362-45F0-B305-2F137B053DCF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*",
"matchCriteriaId": "04D19D8C-FACF-49B4-BA99-CC3A3FDADAFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*",
"matchCriteriaId": "0B78942C-BEE1-4D18-9075-8E1D991BF621",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3a:*:*:*:*:*:*:*",
"matchCriteriaId": "5B306D35-4A13-4D23-8EC2-D000E8ADCDA5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.4:*:*:*:*:*:*:*",
"matchCriteriaId": "9F21093D-1036-4F6B-B90F-ACE1EF99EA33",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5:*:*:*:*:*:*:*",
"matchCriteriaId": "280D24C6-A2BF-46E8-B512-6A3FA7833922",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5a:*:*:*:*:*:*:*",
"matchCriteriaId": "1F903F51-ABF4-49B0-A5BA-A6B51F79666F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.6:*:*:*:*:*:*:*",
"matchCriteriaId": "E3F244E7-8EE9-4E58-83FA-EEDD3C8F792D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.6a:*:*:*:*:*:*:*",
"matchCriteriaId": "5238B1D1-740D-4B37-A0CB-1B3343E55D05",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.7:*:*:*:*:*:*:*",
"matchCriteriaId": "27E0750C-A622-49D6-A8EF-B59E2F8F1912",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.8:*:*:*:*:*:*:*",
"matchCriteriaId": "2258D93E-71AA-4964-A5DF-008E3479F2A4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.6.8a:*:*:*:*:*:*:*",
"matchCriteriaId": "608ACC60-143B-4835-B6AC-E6C3111B4078",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "38B87B17-C653-40AC-8AE4-066BB1123C88",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "9012A66E-82C4-4ACF-A4BB-37EC54B87B50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "849C6FF1-F7C0-4021-BCA2-A791C87E4F37",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "7592C7E3-3735-425F-A276-9EE03224CD5E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "1103BE75-EB64-4A9A-801E-EDE6A1F861F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "5B0C2129-8149-4362-827C-A5494C9D398B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "7452C7E9-6241-42C5-9A7F-13C0BD38A2B4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2:*:*:*:*:*:*:*",
"matchCriteriaId": "D197445E-EC12-429C-BDD4-F63FA5C1B3E3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2a:*:*:*:*:*:*:*",
"matchCriteriaId": "BD27DF50-9E81-4EC5-BA73-513F1DFB972C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3:*:*:*:*:*:*:*",
"matchCriteriaId": "51EA3EAA-A379-467E-AF9A-FCFBACAE49C7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3a:*:*:*:*:*:*:*",
"matchCriteriaId": "4FC63AAF-758F-4A70-9738-96E75A0A1DDA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.4:*:*:*:*:*:*:*",
"matchCriteriaId": "E67BE408-8DCF-491F-9EA9-E368565C1B49",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.4a:*:*:*:*:*:*:*",
"matchCriteriaId": "D9CFE98A-FBA5-4837-BBD9-3C875ECEBF1B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5:*:*:*:*:*:*:*",
"matchCriteriaId": "36A5F20F-3F38-4FB9-B49D-28569EB1A763",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5a:*:*:*:*:*:*:*",
"matchCriteriaId": "4D2264D7-5E89-4F50-B948-FAB41D07C8BA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5e:*:*:*:*:*:*:*",
"matchCriteriaId": "78EEDF40-2CDA-4147-A9F2-A5F4B8FF35EC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5f:*:*:*:*:*:*:*",
"matchCriteriaId": "40CEA4FC-B946-4D54-A45B-686FC02D5411",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.9.6:*:*:*:*:*:*:*",
"matchCriteriaId": "7BDBE176-04ED-48F0-BA9F-45BECFEDBE2A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1:*:*:*:*:*:*:*",
"matchCriteriaId": "42FAEC29-D754-49D6-85F1-F5DDFAF6E80F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "CCE76032-948F-444F-BA5D-72A34D1CD382",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1:*:*:*:*:*:*:*",
"matchCriteriaId": "F313F2EC-F3D6-4639-934C-402DDA3DA806",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "4AFB2CA6-8332-4E4D-BDB4-C3B770D3AD6C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1BF0778B-015D-481B-BAC0-40667F3453D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "1EEBC0EB-0DBB-4530-AFC4-AA0036469656",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.12.2:*:*:*:*:*:*:*",
"matchCriteriaId": "EE165207-A066-44C1-B78A-6EFD80023204",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.12.3:*:*:*:*:*:*:*",
"matchCriteriaId": "1098FCEA-6A9F-4634-A0EF-EC55ABCCEA3E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.12.3a:*:*:*:*:*:*:*",
"matchCriteriaId": "53B97B06-206B-42F0-B68F-5C5136EAD2B1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4:*:*:*:*:*:*:*",
"matchCriteriaId": "6281EB0F-EE0E-4B06-A7A1-29460A98A8CA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4a:*:*:*:*:*:*:*",
"matchCriteriaId": "07650346-67D7-4805-BF81-BB145304CC87",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4b:*:*:*:*:*:*:*",
"matchCriteriaId": "9C6C0D21-ABD5-42F1-B04B-745CA6115D07",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.13.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8577AF01-F2C7-48D3-AB0B-78BD63A60029",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.13.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "CD0D2D94-6470-4E4B-A1B1-0124F92AA793",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.14.1:*:*:*:*:*:*:*",
"matchCriteriaId": "31789E98-7C8D-4C5A-8A3F-FC9AFE9A248C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.14.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "7A62648B-3273-4D75-8533-A5CBE1B1BCE0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1:*:*:*:*:*:*:*",
"matchCriteriaId": "0174C08C-8846-45AE-83ED-E9964348FA28",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:ios_xe:17.15.1a:*:*:*:*:*:*:*",
"matchCriteriaId": "E73D685D-A002-4D82-9B4C-1D6B5C0B0320",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service (DoS) condition.\r\n\r This vulnerability is due to improper handling of DHCP request packets. An attacker could exploit this vulnerability by sending DHCP request packets to an affected device. A successful exploit could allow the attacker to cause packets to wedge in the queue, creating a DoS condition for downstream devices of the affected system and requiring that the system restart to drain the queue.\r\n\r Note: This vulnerability can be exploited with either unicast or broadcast DHCP packets on a VLAN that does not have DHCP snooping enabled."
},
{
"lang": "es",
"value": "Una vulnerabilidad en la funci\u00f3n de seguridad de vigilancia DHCP del software Cisco IOS XE podr\u00eda permitir que un atacante remoto no autenticado provoque una cu\u00f1a de cola de interfaz completa, lo que podr\u00eda resultar en una denegaci\u00f3n de servicio (DoS). Esta vulnerabilidad se debe a la gesti\u00f3n incorrecta de los paquetes de solicitud DHCP. Un atacante podr\u00eda explotar esta vulnerabilidad enviando paquetes de solicitud DHCP a un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante provocar una cu\u00f1a de paquetes en la cola, creando una condici\u00f3n de DoS para los dispositivos posteriores del sistema afectado y requiriendo que el sistema se reinicie para vaciar la cola. Nota: Esta vulnerabilidad puede explotarse con paquetes DHCP de unidifusi\u00f3n o difusi\u00f3n en una VLAN que no tenga activada la vigilancia DHCP."
}
],
"id": "CVE-2025-20162",
"lastModified": "2025-07-11T14:58:36.330",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 3.9,
"impactScore": 4.0,
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
},
"published": "2025-05-07T18:15:37.663",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-400"
}
],
"source": "psirt@cisco.com",
"type": "Secondary"
}
]
}
GHSA-P84X-683Q-C49J
Vulnerability from github – Published: 2025-05-07 18:30 – Updated: 2025-05-07 18:30
VLAI
Details
A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service (DoS) condition.
This vulnerability is due to improper handling of DHCP request packets. An attacker could exploit this vulnerability by sending DHCP request packets to an affected device. A successful exploit could allow the attacker to cause packets to wedge in the queue, creating a DoS condition for downstream devices of the affected system and requiring that the system restart to drain the queue.
Note: This vulnerability can be exploited with either unicast or broadcast DHCP packets on a VLAN that does not have DHCP snooping enabled.
Severity
8.6 (High)
{
"affected": [],
"aliases": [
"CVE-2025-20162"
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-05-07T18:15:37Z",
"severity": "HIGH"
},
"details": "A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service (DoS) condition.\n\n This vulnerability is due to improper handling of DHCP request packets. An attacker could exploit this vulnerability by sending DHCP request packets to an affected device. A successful exploit could allow the attacker to cause packets to wedge in the queue, creating a DoS condition for downstream devices of the affected system and requiring that the system restart to drain the queue.\n\n Note: This vulnerability can be exploited with either unicast or broadcast DHCP packets on a VLAN that does not have DHCP snooping enabled.",
"id": "GHSA-p84x-683q-c49j",
"modified": "2025-05-07T18:30:49Z",
"published": "2025-05-07T18:30:48Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20162"
},
{
"type": "WEB",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
NCSC-2025-0146
Vulnerability from csaf_ncscnl - Published: 2025-05-08 08:43 - Updated: 2025-05-08 08:43Summary
Kwetsbaarheden verholpen in Cisco IOS XE Software
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Cisco heeft kwetsbaarheden verholpen in Cisco IOS XE Software.
Interpretaties: De kwetsbaarheden in Cisco IOS XE Software omvatten verschillende problemen, waaronder onvoldoende invoervalidatie en onjuist geheugenbeheer. Deze kwetsbaarheden kunnen worden misbruikt door ongeauthenticeerde aanvallers om Denial-of-Service (DoS) situaties te veroorzaken, ongeautoriseerde toegang te verkrijgen, en zelfs om configuraties te manipuleren. Kwetsbare systemen kunnen onverwacht opnieuw opstarten of kunnen worden blootgesteld aan ongeautoriseerde commando-injectie-aanvallen, wat de integriteit en beschikbaarheid van netwerken in gevaar kan brengen.
Oplossingen: Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-762: Mismatched Memory Management Routines
CWE-805: Buffer Access with Incorrect Length Value
CWE-347: Improper Verification of Cryptographic Signature
CWE-232: Improper Handling of Undefined Values
CWE-798: Use of Hard-coded Credentials
CWE-352: Cross-Site Request Forgery (CSRF)
CWE-284: Improper Access Control
CWE-400: Uncontrolled Resource Consumption
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-787: Out-of-bounds Write
CWE-789: Memory Allocation with Excessive Size Value
CWE-20: Improper Input Validation
4.7 (Medium)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
7.4 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
8.6 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
8.6 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
6.8 (Medium)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
8.6 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
8.8 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
10.0 (Critical)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
7.4 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
6.5 (Medium)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
7.7 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
5.4 (Medium)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
7.4 (High)
Affected products
Known affected
42 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:cisco/16.1.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.1.3 | ||
|
vers:cisco/16.10.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.10.3 | ||
|
vers:cisco/16.11.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.11.2 | ||
|
vers:cisco/16.12.9
Cisco / Cisco IOS XE Software
|
vers:cisco/16.12.9 | ||
|
vers:cisco/3.16.10bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10bs | ||
|
vers:cisco/3.16.10s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.10s | ||
|
vers:cisco/16.2.2
Cisco / Cisco IOS XE Software
|
vers:cisco/16.2.2 | ||
|
vers:cisco/16.3.11
Cisco / Cisco IOS XE Software
|
vers:cisco/16.3.11 | ||
|
vers:cisco/16.4.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.4.3 | ||
|
vers:cisco/16.5.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.5.3 | ||
|
vers:cisco/16.6.10
Cisco / Cisco IOS XE Software
|
vers:cisco/16.6.10 | ||
|
vers:cisco/3.16.7bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7bs | ||
|
vers:cisco/3.16.7s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7s | ||
|
vers:cisco/16.8.3
Cisco / Cisco IOS XE Software
|
vers:cisco/16.8.3 | ||
|
vers:cisco/3.16.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.9s | ||
|
vers:cisco/3.10.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.10.9s | ||
|
vers:cisco/3.11.9e
Cisco / Cisco IOS XE Software
|
vers:cisco/3.11.9e | ||
|
vers:cisco/3.12.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.12.4s | ||
|
vers:cisco/3.13.9s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.13.9s | ||
|
vers:cisco/3.14.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.14.4s | ||
|
vers:cisco/3.15.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.15.4s | ||
|
vers:cisco/3.16.2as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2as | ||
|
vers:cisco/3.16.2bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2bs | ||
|
vers:cisco/3.16.2s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.2s | ||
|
vers:cisco/3.16.3as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3as | ||
|
vers:cisco/3.16.3s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.3s | ||
|
vers:cisco/3.16.4s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4s | ||
|
vers:cisco/3.16.4gs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4gs | ||
|
vers:cisco/3.16.4es
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4es | ||
|
vers:cisco/3.16.4ds
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4ds | ||
|
vers:cisco/3.16.4cs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4cs | ||
|
vers:cisco/3.16.4bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4bs | ||
|
vers:cisco/3.16.4as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.4as | ||
|
vers:cisco/3.16.5as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5as | ||
|
vers:cisco/3.16.5bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5bs | ||
|
vers:cisco/3.16.5s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.5s | ||
|
vers:cisco/3.16.6bs
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6bs | ||
|
vers:cisco/3.16.6s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.6s | ||
|
vers:cisco/3.16.7as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.7as | ||
|
vers:cisco/3.16.8s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.8s | ||
|
vers:cisco/3.16.1as
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1as | ||
|
vers:cisco/3.16.1s
Cisco / Cisco IOS XE Software
|
vers:cisco/3.16.1s |
References
23 references
| URL | Category |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
| https://api.ncsc.nl/velma/v1/vulnerabilities/2025… | self |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Cisco heeft kwetsbaarheden verholpen in Cisco IOS XE Software.",
"title": "Feiten"
},
{
"category": "description",
"text": "De kwetsbaarheden in Cisco IOS XE Software omvatten verschillende problemen, waaronder onvoldoende invoervalidatie en onjuist geheugenbeheer. Deze kwetsbaarheden kunnen worden misbruikt door ongeauthenticeerde aanvallers om Denial-of-Service (DoS) situaties te veroorzaken, ongeautoriseerde toegang te verkrijgen, en zelfs om configuraties te manipuleren. Kwetsbare systemen kunnen onverwacht opnieuw opstarten of kunnen worden blootgesteld aan ongeautoriseerde commando-injectie-aanvallen, wat de integriteit en beschikbaarheid van netwerken in gevaar kan brengen.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Mismatched Memory Management Routines",
"title": "CWE-762"
},
{
"category": "general",
"text": "Buffer Access with Incorrect Length Value",
"title": "CWE-805"
},
{
"category": "general",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
},
{
"category": "general",
"text": "Improper Handling of Undefined Values",
"title": "CWE-232"
},
{
"category": "general",
"text": "Use of Hard-coded Credentials",
"title": "CWE-798"
},
{
"category": "general",
"text": "Cross-Site Request Forgery (CSRF)",
"title": "CWE-352"
},
{
"category": "general",
"text": "Improper Access Control",
"title": "CWE-284"
},
{
"category": "general",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "general",
"text": "Out-of-bounds Write",
"title": "CWE-787"
},
{
"category": "general",
"text": "Memory Allocation with Excessive Size Value",
"title": "CWE-789"
},
{
"category": "general",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-user-del-hQxMpUDj"
},
{
"category": "external",
"summary": "Reference - cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-file-uplpd-rHZG9UfC"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn"
},
{
"category": "external",
"summary": "Reference - cisco; cveprojectv5; nvd",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL"
}
],
"title": "Kwetsbaarheden verholpen in Cisco IOS XE Software",
"tracking": {
"current_release_date": "2025-05-08T08:43:57.415709Z",
"generator": {
"date": "2025-02-25T15:15:00Z",
"engine": {
"name": "V.A.",
"version": "1.0"
}
},
"id": "NCSC-2025-0146",
"initial_release_date": "2025-05-08T08:43:57.415709Z",
"revision_history": [
{
"date": "2025-05-08T08:43:57.415709Z",
"number": "1.0.0",
"summary": "Initiele versie"
}
],
"status": "final",
"version": "1.0.0"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:cisco/16.1.3",
"product": {
"name": "vers:cisco/16.1.3",
"product_id": "CSAFPID-2714930"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.10.3",
"product": {
"name": "vers:cisco/16.10.3",
"product_id": "CSAFPID-2715313"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.11.2",
"product": {
"name": "vers:cisco/16.11.2",
"product_id": "CSAFPID-2715043"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.12.9",
"product": {
"name": "vers:cisco/16.12.9",
"product_id": "CSAFPID-2715520"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.10bs",
"product": {
"name": "vers:cisco/3.16.10bs",
"product_id": "CSAFPID-2715459"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.10s",
"product": {
"name": "vers:cisco/3.16.10s",
"product_id": "CSAFPID-2715039"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.2.2",
"product": {
"name": "vers:cisco/16.2.2",
"product_id": "CSAFPID-2714932"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.3.11",
"product": {
"name": "vers:cisco/16.3.11",
"product_id": "CSAFPID-2715445"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.4.3",
"product": {
"name": "vers:cisco/16.4.3",
"product_id": "CSAFPID-2715031"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.5.3",
"product": {
"name": "vers:cisco/16.5.3",
"product_id": "CSAFPID-2715164"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.6.10",
"product": {
"name": "vers:cisco/16.6.10",
"product_id": "CSAFPID-2715478"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.7bs",
"product": {
"name": "vers:cisco/3.16.7bs",
"product_id": "CSAFPID-2715170"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.7s",
"product": {
"name": "vers:cisco/3.16.7s",
"product_id": "CSAFPID-2715017"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/16.8.3",
"product": {
"name": "vers:cisco/16.8.3",
"product_id": "CSAFPID-2714865"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.9s",
"product": {
"name": "vers:cisco/3.16.9s",
"product_id": "CSAFPID-2714842"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.10.9s",
"product": {
"name": "vers:cisco/3.10.9s",
"product_id": "CSAFPID-2714989"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.11.9e",
"product": {
"name": "vers:cisco/3.11.9e",
"product_id": "CSAFPID-2715536"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.12.4s",
"product": {
"name": "vers:cisco/3.12.4s",
"product_id": "CSAFPID-2714784"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.13.9s",
"product": {
"name": "vers:cisco/3.13.9s",
"product_id": "CSAFPID-2715032"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.14.4s",
"product": {
"name": "vers:cisco/3.14.4s",
"product_id": "CSAFPID-2714746"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.15.4s",
"product": {
"name": "vers:cisco/3.15.4s",
"product_id": "CSAFPID-2714941"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.2as",
"product": {
"name": "vers:cisco/3.16.2as",
"product_id": "CSAFPID-2714791"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.2bs",
"product": {
"name": "vers:cisco/3.16.2bs",
"product_id": "CSAFPID-2714942"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.2s",
"product": {
"name": "vers:cisco/3.16.2s",
"product_id": "CSAFPID-2714788"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.3as",
"product": {
"name": "vers:cisco/3.16.3as",
"product_id": "CSAFPID-2714943"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.3s",
"product": {
"name": "vers:cisco/3.16.3s",
"product_id": "CSAFPID-2714798"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4s",
"product": {
"name": "vers:cisco/3.16.4s",
"product_id": "CSAFPID-2714944"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4gs",
"product": {
"name": "vers:cisco/3.16.4gs",
"product_id": "CSAFPID-2714974"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4es",
"product": {
"name": "vers:cisco/3.16.4es",
"product_id": "CSAFPID-2714985"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4ds",
"product": {
"name": "vers:cisco/3.16.4ds",
"product_id": "CSAFPID-2714983"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4cs",
"product": {
"name": "vers:cisco/3.16.4cs",
"product_id": "CSAFPID-2714978"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4bs",
"product": {
"name": "vers:cisco/3.16.4bs",
"product_id": "CSAFPID-2714971"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.4as",
"product": {
"name": "vers:cisco/3.16.4as",
"product_id": "CSAFPID-2714967"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.5as",
"product": {
"name": "vers:cisco/3.16.5as",
"product_id": "CSAFPID-2714992"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.5bs",
"product": {
"name": "vers:cisco/3.16.5bs",
"product_id": "CSAFPID-2714996"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.5s",
"product": {
"name": "vers:cisco/3.16.5s",
"product_id": "CSAFPID-2714975"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.6bs",
"product": {
"name": "vers:cisco/3.16.6bs",
"product_id": "CSAFPID-2715025"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.6s",
"product": {
"name": "vers:cisco/3.16.6s",
"product_id": "CSAFPID-2714987"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.7as",
"product": {
"name": "vers:cisco/3.16.7as",
"product_id": "CSAFPID-2715168"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.8s",
"product": {
"name": "vers:cisco/3.16.8s",
"product_id": "CSAFPID-2715178"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.1as",
"product": {
"name": "vers:cisco/3.16.1as",
"product_id": "CSAFPID-2714787"
}
},
{
"category": "product_version_range",
"name": "vers:cisco/3.16.1s",
"product": {
"name": "vers:cisco/3.16.1s",
"product_id": "CSAFPID-2714773"
}
}
],
"category": "product_name",
"name": "Cisco IOS XE Software"
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-20137",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20137",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20137.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20137"
},
{
"cve": "CVE-2025-20140",
"cwe": {
"id": "CWE-789",
"name": "Memory Allocation with Excessive Size Value"
},
"notes": [
{
"category": "other",
"text": "Memory Allocation with Excessive Size Value",
"title": "CWE-789"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20140",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20140.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20140"
},
{
"cve": "CVE-2025-20154",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "other",
"text": "Improper Input Validation",
"title": "CWE-20"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20154",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20154.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20154"
},
{
"cve": "CVE-2025-20162",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "other",
"text": "Uncontrolled Resource Consumption",
"title": "CWE-400"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20162",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20162.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20162"
},
{
"cve": "CVE-2025-20181",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "other",
"text": "Improper Verification of Cryptographic Signature",
"title": "CWE-347"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20181",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20181.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20181"
},
{
"cve": "CVE-2025-20182",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "other",
"text": "Out-of-bounds Write",
"title": "CWE-787"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20182",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20182.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20182"
},
{
"cve": "CVE-2025-20186",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20186",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20186.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20186"
},
{
"cve": "CVE-2025-20188",
"cwe": {
"id": "CWE-798",
"name": "Use of Hard-coded Credentials"
},
"notes": [
{
"category": "other",
"text": "Use of Hard-coded Credentials",
"title": "CWE-798"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20188",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20188.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 10.0,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20188"
},
{
"cve": "CVE-2025-20189",
"cwe": {
"id": "CWE-762",
"name": "Mismatched Memory Management Routines"
},
"notes": [
{
"category": "other",
"text": "Mismatched Memory Management Routines",
"title": "CWE-762"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20189",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20189.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20189"
},
{
"cve": "CVE-2025-20190",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "other",
"text": "Improper Access Control",
"title": "CWE-284"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20190",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20190.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20190"
},
{
"cve": "CVE-2025-20192",
"cwe": {
"id": "CWE-232",
"name": "Improper Handling of Undefined Values"
},
"notes": [
{
"category": "other",
"text": "Improper Handling of Undefined Values",
"title": "CWE-232"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20192",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20192.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20192"
},
{
"cve": "CVE-2025-20194",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "other",
"text": "Cross-Site Request Forgery (CSRF)",
"title": "CWE-352"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20194",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20194.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20194"
},
{
"cve": "CVE-2025-20202",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"notes": [
{
"category": "other",
"text": "Buffer Access with Incorrect Length Value",
"title": "CWE-805"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-20202",
"url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20202.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2714930",
"CSAFPID-2715313",
"CSAFPID-2715043",
"CSAFPID-2715520",
"CSAFPID-2715459",
"CSAFPID-2715039",
"CSAFPID-2714932",
"CSAFPID-2715445",
"CSAFPID-2715031",
"CSAFPID-2715164",
"CSAFPID-2715478",
"CSAFPID-2715170",
"CSAFPID-2715017",
"CSAFPID-2714865",
"CSAFPID-2714842",
"CSAFPID-2714989",
"CSAFPID-2715536",
"CSAFPID-2714784",
"CSAFPID-2715032",
"CSAFPID-2714746",
"CSAFPID-2714941",
"CSAFPID-2714791",
"CSAFPID-2714942",
"CSAFPID-2714788",
"CSAFPID-2714943",
"CSAFPID-2714798",
"CSAFPID-2714944",
"CSAFPID-2714974",
"CSAFPID-2714985",
"CSAFPID-2714983",
"CSAFPID-2714978",
"CSAFPID-2714971",
"CSAFPID-2714967",
"CSAFPID-2714992",
"CSAFPID-2714996",
"CSAFPID-2714975",
"CSAFPID-2715025",
"CSAFPID-2714987",
"CSAFPID-2715168",
"CSAFPID-2715178",
"CSAFPID-2714787",
"CSAFPID-2714773"
]
}
],
"title": "CVE-2025-20202"
}
]
}
WID-SEC-W-2025-0979
Vulnerability from csaf_certbund - Published: 2025-05-07 22:00 - Updated: 2025-05-07 22:00Summary
Cisco IOS XE Software: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.
Angriff: Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco IOS XE Software ausnutzen, um Dateien zu manipulieren, erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen und vertrauliche Informationen preiszugeben.
Betroffene Betriebssysteme: - CISCO Appliance
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
Affected products
Known affected
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Cisco IOS XE Software
Cisco / IOS XE
|
cpe:/o:cisco:ios_xe:software
|
Software |
References
7 references
| URL | Category |
|---|---|
| https://wid.cert-bund.de/.well-known/csaf/white/2… | self |
| https://wid.cert-bund.de/portal/wid/securityadvis… | self |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
| https://sec.cloudapps.cisco.com/security/center/c… | external |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das f\u00fcr Cisco Ger\u00e4te wie z. B. Router und Switches eingesetzt wird.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Cisco IOS XE Software ausnutzen, um Dateien zu manipulieren, erh\u00f6hte Rechte zu erlangen, Sicherheitsma\u00dfnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuf\u00fchren und vertrauliche Informationen preiszugeben.",
"title": "Angriff"
},
{
"category": "general",
"text": "- CISCO Appliance",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-0979 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0979.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-0979 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0979"
},
{
"category": "external",
"summary": "Cisco Security Advisory cisco-sa-iosxe-privesc-su7scvdp vom 2025-05-07",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-privesc-su7scvdp"
},
{
"category": "external",
"summary": "Cisco Security Advisory cisco-sa-bootstrap-KfgxYgdh vom 2025-05-07",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bootstrap-KfgxYgdh"
},
{
"category": "external",
"summary": "Cisco Security Advisory cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks vom 2025-05-07",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
},
{
"category": "external",
"summary": "Cisco Security Advisory cisco-sa-iosxe-ikev1-dos-XHk3HzFC vom 2025-05-07",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
},
{
"category": "external",
"summary": "Cisco Security Advisory cisco-sa-netconf-nacm-bypass-TGZV9pmQ vom 2025-05-07",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-netconf-nacm-bypass-TGZV9pmQ"
}
],
"source_lang": "en-US",
"title": "Cisco IOS XE Software: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-05-07T22:00:00.000+00:00",
"generator": {
"date": "2025-05-08T10:59:15.841+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.3.12"
}
},
"id": "WID-SEC-W-2025-0979",
"initial_release_date": "2025-05-07T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-05-07T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "Software",
"product": {
"name": "Cisco IOS XE Software",
"product_id": "T043497",
"product_identification_helper": {
"cpe": "cpe:/o:cisco:ios_xe:software"
}
}
}
],
"category": "product_name",
"name": "IOS XE"
}
],
"category": "vendor",
"name": "Cisco"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-20155",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20155"
},
{
"cve": "CVE-2025-20162",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20162"
},
{
"cve": "CVE-2025-20192",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20192"
},
{
"cve": "CVE-2025-20214",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20214"
},
{
"cve": "CVE-2025-20197",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20197"
},
{
"cve": "CVE-2025-20198",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20198"
},
{
"cve": "CVE-2025-20199",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20199"
},
{
"cve": "CVE-2025-20200",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20200"
},
{
"cve": "CVE-2025-20201",
"product_status": {
"known_affected": [
"T043497"
]
},
"release_date": "2025-05-07T22:00:00.000+00:00",
"title": "CVE-2025-20201"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…