Vulnerability-Lookup

CVE-2025-20189 (GCVE-0-2025-20189)

Vulnerability from cvelistv5 – Published: 2025-05-07 17:35 – Updated: 2025-05-07 19:44

Summary

A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper memory management when Cisco IOS XE Software is processing Address Resolution Protocol (ARP) messages. An attacker could exploit this vulnerability by sending crafted ARP messages at a high rate over a period of time to an affected device. A successful exploit could allow the attacker to exhaust system resources, which eventually triggers a reload of the active route switch processor (RSP). If a redundant RSP is not present, the router reloads.

Severity ?

7.4 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE

CWE-762 - Mismatched Memory Management Routines

Assigner

cisco

References

1 reference

URL	Tags
https://sec.cloudapps.cisco.com/security/center/c…

Impacted products

1 product

Vendor	Product	Version
Cisco	Cisco IOS XE Software	Affected: 3.16.0S Affected: 3.16.1S Affected: 3.16.1aS Affected: 3.16.2S Affected: 3.16.2aS Affected: 3.16.0cS Affected: 3.16.3S Affected: 3.16.2bS Affected: 3.16.3aS Affected: 3.16.4S Affected: 3.16.4aS Affected: 3.16.4bS Affected: 3.16.5S Affected: 3.16.4dS Affected: 3.16.6S Affected: 3.16.7S Affected: 3.16.6bS Affected: 3.16.7aS Affected: 3.16.7bS Affected: 3.16.8S Affected: 3.16.9S Affected: 3.16.10S Affected: 3.17.0S Affected: 3.17.1S Affected: 3.17.2S Affected: 3.17.1aS Affected: 3.17.3S Affected: 3.17.4S Affected: 16.1.1 Affected: 16.1.2 Affected: 16.1.3 Affected: 16.2.1 Affected: 16.2.2 Affected: 16.3.1 Affected: 16.3.2 Affected: 16.3.3 Affected: 16.3.1a Affected: 16.3.4 Affected: 16.3.5 Affected: 16.3.5b Affected: 16.3.6 Affected: 16.3.7 Affected: 16.3.8 Affected: 16.3.9 Affected: 16.3.10 Affected: 16.3.11 Affected: 16.4.1 Affected: 16.4.2 Affected: 16.4.3 Affected: 16.5.1 Affected: 16.5.1a Affected: 16.5.1b Affected: 16.5.2 Affected: 16.5.3 Affected: 3.18.0aS Affected: 3.18.0S Affected: 3.18.1S Affected: 3.18.2S Affected: 3.18.3S Affected: 3.18.4S Affected: 3.18.0SP Affected: 3.18.1SP Affected: 3.18.1aSP Affected: 3.18.1bSP Affected: 3.18.1cSP Affected: 3.18.2SP Affected: 3.18.2aSP Affected: 3.18.3SP Affected: 3.18.4SP Affected: 3.18.3aSP Affected: 3.18.3bSP Affected: 3.18.5SP Affected: 3.18.6SP Affected: 3.18.7SP Affected: 3.18.8aSP Affected: 3.18.9SP Affected: 16.6.1 Affected: 16.6.2 Affected: 16.6.3 Affected: 16.6.4 Affected: 16.6.5 Affected: 16.6.4a Affected: 16.6.5a Affected: 16.6.6 Affected: 16.6.7 Affected: 16.6.8 Affected: 16.6.9 Affected: 16.6.10 Affected: 16.7.1 Affected: 16.7.1a Affected: 16.7.1b Affected: 16.7.2 Affected: 16.7.3 Affected: 16.7.4 Affected: 16.8.1 Affected: 16.8.1a Affected: 16.8.1b Affected: 16.8.1s Affected: 16.8.1c Affected: 16.8.1d Affected: 16.8.2 Affected: 16.8.1e Affected: 16.8.3 Affected: 16.9.1 Affected: 16.9.2 Affected: 16.9.1a Affected: 16.9.1b Affected: 16.9.1s Affected: 16.9.3 Affected: 16.9.4 Affected: 16.9.3a Affected: 16.9.5 Affected: 16.9.5f Affected: 16.9.6 Affected: 16.9.7 Affected: 16.9.8 Affected: 16.10.1 Affected: 16.10.1a Affected: 16.10.1b Affected: 16.10.1s Affected: 16.10.1c Affected: 16.10.1e Affected: 16.10.1d Affected: 16.10.2 Affected: 16.10.1f Affected: 16.10.1g Affected: 16.10.3 Affected: 16.11.1 Affected: 16.11.1a Affected: 16.11.1b Affected: 16.11.2 Affected: 16.11.1s Affected: 16.12.1 Affected: 16.12.1s Affected: 16.12.1a Affected: 16.12.1c Affected: 16.12.1w Affected: 16.12.2 Affected: 16.12.1y Affected: 16.12.2a Affected: 16.12.3 Affected: 16.12.8 Affected: 16.12.2s Affected: 16.12.1x Affected: 16.12.1t Affected: 16.12.4 Affected: 16.12.3s Affected: 16.12.3a Affected: 16.12.4a Affected: 16.12.5 Affected: 16.12.6 Affected: 16.12.1z1 Affected: 16.12.5a Affected: 16.12.5b Affected: 16.12.1z2 Affected: 16.12.6a Affected: 16.12.7 Affected: 16.12.9 Affected: 16.12.10 Affected: 16.12.10a Affected: 16.12.11 Affected: 16.12.12 Affected: 16.12.13 Affected: 17.1.1 Affected: 17.1.1a Affected: 17.1.1s Affected: 17.1.1t Affected: 17.1.3 Affected: 17.2.1 Affected: 17.2.1r Affected: 17.2.1a Affected: 17.2.1v Affected: 17.2.2 Affected: 17.2.3 Affected: 17.3.1 Affected: 17.3.2 Affected: 17.3.3 Affected: 17.3.1a Affected: 17.3.1w Affected: 17.3.2a Affected: 17.3.1x Affected: 17.3.1z Affected: 17.3.4 Affected: 17.3.5 Affected: 17.3.4a Affected: 17.3.6 Affected: 17.3.4b Affected: 17.3.4c Affected: 17.3.5a Affected: 17.3.5b Affected: 17.3.7 Affected: 17.3.8 Affected: 17.3.8a Affected: 17.4.1 Affected: 17.4.2 Affected: 17.4.1a Affected: 17.4.1b Affected: 17.4.2a Affected: 17.5.1 Affected: 17.5.1a Affected: 17.6.1 Affected: 17.6.2 Affected: 17.6.1w Affected: 17.6.1a Affected: 17.6.1x Affected: 17.6.3 Affected: 17.6.1y Affected: 17.6.1z Affected: 17.6.3a Affected: 17.6.4 Affected: 17.6.1z1 Affected: 17.6.5 Affected: 17.6.6 Affected: 17.6.6a Affected: 17.6.5a Affected: 17.6.7 Affected: 17.6.8 Affected: 17.6.8a Affected: 17.7.1 Affected: 17.7.1a Affected: 17.7.1b Affected: 17.7.2 Affected: 17.10.1 Affected: 17.10.1a Affected: 17.10.1b Affected: 17.8.1 Affected: 17.8.1a Affected: 17.9.1 Affected: 17.9.1w Affected: 17.9.2 Affected: 17.9.1a Affected: 17.9.1x Affected: 17.9.1y Affected: 17.9.3 Affected: 17.9.2a Affected: 17.9.1x1 Affected: 17.9.3a Affected: 17.9.4 Affected: 17.9.1y1 Affected: 17.9.5 Affected: 17.9.4a Affected: 17.9.5a Affected: 17.9.5b Affected: 17.9.6 Affected: 17.9.6a Affected: 17.9.5e Affected: 17.9.5f Affected: 17.11.1 Affected: 17.11.1a Affected: 17.12.1 Affected: 17.12.1w Affected: 17.12.1x Affected: 17.12.2 Affected: 17.12.3 Affected: 17.12.2a Affected: 17.12.1y Affected: 17.12.1z Affected: 17.12.4 Affected: 17.12.3a Affected: 17.12.1z1 Affected: 17.12.4a Affected: 17.12.4b Affected: 17.13.1 Affected: 17.13.1a Affected: 17.14.1 Affected: 17.14.1a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-20189",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-07T18:56:04.440375Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-07T19:44:12.723Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco IOS XE Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.16.0S"
            },
            {
              "status": "affected",
              "version": "3.16.1S"
            },
            {
              "status": "affected",
              "version": "3.16.1aS"
            },
            {
              "status": "affected",
              "version": "3.16.2S"
            },
            {
              "status": "affected",
              "version": "3.16.2aS"
            },
            {
              "status": "affected",
              "version": "3.16.0cS"
            },
            {
              "status": "affected",
              "version": "3.16.3S"
            },
            {
              "status": "affected",
              "version": "3.16.2bS"
            },
            {
              "status": "affected",
              "version": "3.16.3aS"
            },
            {
              "status": "affected",
              "version": "3.16.4S"
            },
            {
              "status": "affected",
              "version": "3.16.4aS"
            },
            {
              "status": "affected",
              "version": "3.16.4bS"
            },
            {
              "status": "affected",
              "version": "3.16.5S"
            },
            {
              "status": "affected",
              "version": "3.16.4dS"
            },
            {
              "status": "affected",
              "version": "3.16.6S"
            },
            {
              "status": "affected",
              "version": "3.16.7S"
            },
            {
              "status": "affected",
              "version": "3.16.6bS"
            },
            {
              "status": "affected",
              "version": "3.16.7aS"
            },
            {
              "status": "affected",
              "version": "3.16.7bS"
            },
            {
              "status": "affected",
              "version": "3.16.8S"
            },
            {
              "status": "affected",
              "version": "3.16.9S"
            },
            {
              "status": "affected",
              "version": "3.16.10S"
            },
            {
              "status": "affected",
              "version": "3.17.0S"
            },
            {
              "status": "affected",
              "version": "3.17.1S"
            },
            {
              "status": "affected",
              "version": "3.17.2S"
            },
            {
              "status": "affected",
              "version": "3.17.1aS"
            },
            {
              "status": "affected",
              "version": "3.17.3S"
            },
            {
              "status": "affected",
              "version": "3.17.4S"
            },
            {
              "status": "affected",
              "version": "16.1.1"
            },
            {
              "status": "affected",
              "version": "16.1.2"
            },
            {
              "status": "affected",
              "version": "16.1.3"
            },
            {
              "status": "affected",
              "version": "16.2.1"
            },
            {
              "status": "affected",
              "version": "16.2.2"
            },
            {
              "status": "affected",
              "version": "16.3.1"
            },
            {
              "status": "affected",
              "version": "16.3.2"
            },
            {
              "status": "affected",
              "version": "16.3.3"
            },
            {
              "status": "affected",
              "version": "16.3.1a"
            },
            {
              "status": "affected",
              "version": "16.3.4"
            },
            {
              "status": "affected",
              "version": "16.3.5"
            },
            {
              "status": "affected",
              "version": "16.3.5b"
            },
            {
              "status": "affected",
              "version": "16.3.6"
            },
            {
              "status": "affected",
              "version": "16.3.7"
            },
            {
              "status": "affected",
              "version": "16.3.8"
            },
            {
              "status": "affected",
              "version": "16.3.9"
            },
            {
              "status": "affected",
              "version": "16.3.10"
            },
            {
              "status": "affected",
              "version": "16.3.11"
            },
            {
              "status": "affected",
              "version": "16.4.1"
            },
            {
              "status": "affected",
              "version": "16.4.2"
            },
            {
              "status": "affected",
              "version": "16.4.3"
            },
            {
              "status": "affected",
              "version": "16.5.1"
            },
            {
              "status": "affected",
              "version": "16.5.1a"
            },
            {
              "status": "affected",
              "version": "16.5.1b"
            },
            {
              "status": "affected",
              "version": "16.5.2"
            },
            {
              "status": "affected",
              "version": "16.5.3"
            },
            {
              "status": "affected",
              "version": "3.18.0aS"
            },
            {
              "status": "affected",
              "version": "3.18.0S"
            },
            {
              "status": "affected",
              "version": "3.18.1S"
            },
            {
              "status": "affected",
              "version": "3.18.2S"
            },
            {
              "status": "affected",
              "version": "3.18.3S"
            },
            {
              "status": "affected",
              "version": "3.18.4S"
            },
            {
              "status": "affected",
              "version": "3.18.0SP"
            },
            {
              "status": "affected",
              "version": "3.18.1SP"
            },
            {
              "status": "affected",
              "version": "3.18.1aSP"
            },
            {
              "status": "affected",
              "version": "3.18.1bSP"
            },
            {
              "status": "affected",
              "version": "3.18.1cSP"
            },
            {
              "status": "affected",
              "version": "3.18.2SP"
            },
            {
              "status": "affected",
              "version": "3.18.2aSP"
            },
            {
              "status": "affected",
              "version": "3.18.3SP"
            },
            {
              "status": "affected",
              "version": "3.18.4SP"
            },
            {
              "status": "affected",
              "version": "3.18.3aSP"
            },
            {
              "status": "affected",
              "version": "3.18.3bSP"
            },
            {
              "status": "affected",
              "version": "3.18.5SP"
            },
            {
              "status": "affected",
              "version": "3.18.6SP"
            },
            {
              "status": "affected",
              "version": "3.18.7SP"
            },
            {
              "status": "affected",
              "version": "3.18.8aSP"
            },
            {
              "status": "affected",
              "version": "3.18.9SP"
            },
            {
              "status": "affected",
              "version": "16.6.1"
            },
            {
              "status": "affected",
              "version": "16.6.2"
            },
            {
              "status": "affected",
              "version": "16.6.3"
            },
            {
              "status": "affected",
              "version": "16.6.4"
            },
            {
              "status": "affected",
              "version": "16.6.5"
            },
            {
              "status": "affected",
              "version": "16.6.4a"
            },
            {
              "status": "affected",
              "version": "16.6.5a"
            },
            {
              "status": "affected",
              "version": "16.6.6"
            },
            {
              "status": "affected",
              "version": "16.6.7"
            },
            {
              "status": "affected",
              "version": "16.6.8"
            },
            {
              "status": "affected",
              "version": "16.6.9"
            },
            {
              "status": "affected",
              "version": "16.6.10"
            },
            {
              "status": "affected",
              "version": "16.7.1"
            },
            {
              "status": "affected",
              "version": "16.7.1a"
            },
            {
              "status": "affected",
              "version": "16.7.1b"
            },
            {
              "status": "affected",
              "version": "16.7.2"
            },
            {
              "status": "affected",
              "version": "16.7.3"
            },
            {
              "status": "affected",
              "version": "16.7.4"
            },
            {
              "status": "affected",
              "version": "16.8.1"
            },
            {
              "status": "affected",
              "version": "16.8.1a"
            },
            {
              "status": "affected",
              "version": "16.8.1b"
            },
            {
              "status": "affected",
              "version": "16.8.1s"
            },
            {
              "status": "affected",
              "version": "16.8.1c"
            },
            {
              "status": "affected",
              "version": "16.8.1d"
            },
            {
              "status": "affected",
              "version": "16.8.2"
            },
            {
              "status": "affected",
              "version": "16.8.1e"
            },
            {
              "status": "affected",
              "version": "16.8.3"
            },
            {
              "status": "affected",
              "version": "16.9.1"
            },
            {
              "status": "affected",
              "version": "16.9.2"
            },
            {
              "status": "affected",
              "version": "16.9.1a"
            },
            {
              "status": "affected",
              "version": "16.9.1b"
            },
            {
              "status": "affected",
              "version": "16.9.1s"
            },
            {
              "status": "affected",
              "version": "16.9.3"
            },
            {
              "status": "affected",
              "version": "16.9.4"
            },
            {
              "status": "affected",
              "version": "16.9.3a"
            },
            {
              "status": "affected",
              "version": "16.9.5"
            },
            {
              "status": "affected",
              "version": "16.9.5f"
            },
            {
              "status": "affected",
              "version": "16.9.6"
            },
            {
              "status": "affected",
              "version": "16.9.7"
            },
            {
              "status": "affected",
              "version": "16.9.8"
            },
            {
              "status": "affected",
              "version": "16.10.1"
            },
            {
              "status": "affected",
              "version": "16.10.1a"
            },
            {
              "status": "affected",
              "version": "16.10.1b"
            },
            {
              "status": "affected",
              "version": "16.10.1s"
            },
            {
              "status": "affected",
              "version": "16.10.1c"
            },
            {
              "status": "affected",
              "version": "16.10.1e"
            },
            {
              "status": "affected",
              "version": "16.10.1d"
            },
            {
              "status": "affected",
              "version": "16.10.2"
            },
            {
              "status": "affected",
              "version": "16.10.1f"
            },
            {
              "status": "affected",
              "version": "16.10.1g"
            },
            {
              "status": "affected",
              "version": "16.10.3"
            },
            {
              "status": "affected",
              "version": "16.11.1"
            },
            {
              "status": "affected",
              "version": "16.11.1a"
            },
            {
              "status": "affected",
              "version": "16.11.1b"
            },
            {
              "status": "affected",
              "version": "16.11.2"
            },
            {
              "status": "affected",
              "version": "16.11.1s"
            },
            {
              "status": "affected",
              "version": "16.12.1"
            },
            {
              "status": "affected",
              "version": "16.12.1s"
            },
            {
              "status": "affected",
              "version": "16.12.1a"
            },
            {
              "status": "affected",
              "version": "16.12.1c"
            },
            {
              "status": "affected",
              "version": "16.12.1w"
            },
            {
              "status": "affected",
              "version": "16.12.2"
            },
            {
              "status": "affected",
              "version": "16.12.1y"
            },
            {
              "status": "affected",
              "version": "16.12.2a"
            },
            {
              "status": "affected",
              "version": "16.12.3"
            },
            {
              "status": "affected",
              "version": "16.12.8"
            },
            {
              "status": "affected",
              "version": "16.12.2s"
            },
            {
              "status": "affected",
              "version": "16.12.1x"
            },
            {
              "status": "affected",
              "version": "16.12.1t"
            },
            {
              "status": "affected",
              "version": "16.12.4"
            },
            {
              "status": "affected",
              "version": "16.12.3s"
            },
            {
              "status": "affected",
              "version": "16.12.3a"
            },
            {
              "status": "affected",
              "version": "16.12.4a"
            },
            {
              "status": "affected",
              "version": "16.12.5"
            },
            {
              "status": "affected",
              "version": "16.12.6"
            },
            {
              "status": "affected",
              "version": "16.12.1z1"
            },
            {
              "status": "affected",
              "version": "16.12.5a"
            },
            {
              "status": "affected",
              "version": "16.12.5b"
            },
            {
              "status": "affected",
              "version": "16.12.1z2"
            },
            {
              "status": "affected",
              "version": "16.12.6a"
            },
            {
              "status": "affected",
              "version": "16.12.7"
            },
            {
              "status": "affected",
              "version": "16.12.9"
            },
            {
              "status": "affected",
              "version": "16.12.10"
            },
            {
              "status": "affected",
              "version": "16.12.10a"
            },
            {
              "status": "affected",
              "version": "16.12.11"
            },
            {
              "status": "affected",
              "version": "16.12.12"
            },
            {
              "status": "affected",
              "version": "16.12.13"
            },
            {
              "status": "affected",
              "version": "17.1.1"
            },
            {
              "status": "affected",
              "version": "17.1.1a"
            },
            {
              "status": "affected",
              "version": "17.1.1s"
            },
            {
              "status": "affected",
              "version": "17.1.1t"
            },
            {
              "status": "affected",
              "version": "17.1.3"
            },
            {
              "status": "affected",
              "version": "17.2.1"
            },
            {
              "status": "affected",
              "version": "17.2.1r"
            },
            {
              "status": "affected",
              "version": "17.2.1a"
            },
            {
              "status": "affected",
              "version": "17.2.1v"
            },
            {
              "status": "affected",
              "version": "17.2.2"
            },
            {
              "status": "affected",
              "version": "17.2.3"
            },
            {
              "status": "affected",
              "version": "17.3.1"
            },
            {
              "status": "affected",
              "version": "17.3.2"
            },
            {
              "status": "affected",
              "version": "17.3.3"
            },
            {
              "status": "affected",
              "version": "17.3.1a"
            },
            {
              "status": "affected",
              "version": "17.3.1w"
            },
            {
              "status": "affected",
              "version": "17.3.2a"
            },
            {
              "status": "affected",
              "version": "17.3.1x"
            },
            {
              "status": "affected",
              "version": "17.3.1z"
            },
            {
              "status": "affected",
              "version": "17.3.4"
            },
            {
              "status": "affected",
              "version": "17.3.5"
            },
            {
              "status": "affected",
              "version": "17.3.4a"
            },
            {
              "status": "affected",
              "version": "17.3.6"
            },
            {
              "status": "affected",
              "version": "17.3.4b"
            },
            {
              "status": "affected",
              "version": "17.3.4c"
            },
            {
              "status": "affected",
              "version": "17.3.5a"
            },
            {
              "status": "affected",
              "version": "17.3.5b"
            },
            {
              "status": "affected",
              "version": "17.3.7"
            },
            {
              "status": "affected",
              "version": "17.3.8"
            },
            {
              "status": "affected",
              "version": "17.3.8a"
            },
            {
              "status": "affected",
              "version": "17.4.1"
            },
            {
              "status": "affected",
              "version": "17.4.2"
            },
            {
              "status": "affected",
              "version": "17.4.1a"
            },
            {
              "status": "affected",
              "version": "17.4.1b"
            },
            {
              "status": "affected",
              "version": "17.4.2a"
            },
            {
              "status": "affected",
              "version": "17.5.1"
            },
            {
              "status": "affected",
              "version": "17.5.1a"
            },
            {
              "status": "affected",
              "version": "17.6.1"
            },
            {
              "status": "affected",
              "version": "17.6.2"
            },
            {
              "status": "affected",
              "version": "17.6.1w"
            },
            {
              "status": "affected",
              "version": "17.6.1a"
            },
            {
              "status": "affected",
              "version": "17.6.1x"
            },
            {
              "status": "affected",
              "version": "17.6.3"
            },
            {
              "status": "affected",
              "version": "17.6.1y"
            },
            {
              "status": "affected",
              "version": "17.6.1z"
            },
            {
              "status": "affected",
              "version": "17.6.3a"
            },
            {
              "status": "affected",
              "version": "17.6.4"
            },
            {
              "status": "affected",
              "version": "17.6.1z1"
            },
            {
              "status": "affected",
              "version": "17.6.5"
            },
            {
              "status": "affected",
              "version": "17.6.6"
            },
            {
              "status": "affected",
              "version": "17.6.6a"
            },
            {
              "status": "affected",
              "version": "17.6.5a"
            },
            {
              "status": "affected",
              "version": "17.6.7"
            },
            {
              "status": "affected",
              "version": "17.6.8"
            },
            {
              "status": "affected",
              "version": "17.6.8a"
            },
            {
              "status": "affected",
              "version": "17.7.1"
            },
            {
              "status": "affected",
              "version": "17.7.1a"
            },
            {
              "status": "affected",
              "version": "17.7.1b"
            },
            {
              "status": "affected",
              "version": "17.7.2"
            },
            {
              "status": "affected",
              "version": "17.10.1"
            },
            {
              "status": "affected",
              "version": "17.10.1a"
            },
            {
              "status": "affected",
              "version": "17.10.1b"
            },
            {
              "status": "affected",
              "version": "17.8.1"
            },
            {
              "status": "affected",
              "version": "17.8.1a"
            },
            {
              "status": "affected",
              "version": "17.9.1"
            },
            {
              "status": "affected",
              "version": "17.9.1w"
            },
            {
              "status": "affected",
              "version": "17.9.2"
            },
            {
              "status": "affected",
              "version": "17.9.1a"
            },
            {
              "status": "affected",
              "version": "17.9.1x"
            },
            {
              "status": "affected",
              "version": "17.9.1y"
            },
            {
              "status": "affected",
              "version": "17.9.3"
            },
            {
              "status": "affected",
              "version": "17.9.2a"
            },
            {
              "status": "affected",
              "version": "17.9.1x1"
            },
            {
              "status": "affected",
              "version": "17.9.3a"
            },
            {
              "status": "affected",
              "version": "17.9.4"
            },
            {
              "status": "affected",
              "version": "17.9.1y1"
            },
            {
              "status": "affected",
              "version": "17.9.5"
            },
            {
              "status": "affected",
              "version": "17.9.4a"
            },
            {
              "status": "affected",
              "version": "17.9.5a"
            },
            {
              "status": "affected",
              "version": "17.9.5b"
            },
            {
              "status": "affected",
              "version": "17.9.6"
            },
            {
              "status": "affected",
              "version": "17.9.6a"
            },
            {
              "status": "affected",
              "version": "17.9.5e"
            },
            {
              "status": "affected",
              "version": "17.9.5f"
            },
            {
              "status": "affected",
              "version": "17.11.1"
            },
            {
              "status": "affected",
              "version": "17.11.1a"
            },
            {
              "status": "affected",
              "version": "17.12.1"
            },
            {
              "status": "affected",
              "version": "17.12.1w"
            },
            {
              "status": "affected",
              "version": "17.12.1x"
            },
            {
              "status": "affected",
              "version": "17.12.2"
            },
            {
              "status": "affected",
              "version": "17.12.3"
            },
            {
              "status": "affected",
              "version": "17.12.2a"
            },
            {
              "status": "affected",
              "version": "17.12.1y"
            },
            {
              "status": "affected",
              "version": "17.12.1z"
            },
            {
              "status": "affected",
              "version": "17.12.4"
            },
            {
              "status": "affected",
              "version": "17.12.3a"
            },
            {
              "status": "affected",
              "version": "17.12.1z1"
            },
            {
              "status": "affected",
              "version": "17.12.4a"
            },
            {
              "status": "affected",
              "version": "17.12.4b"
            },
            {
              "status": "affected",
              "version": "17.13.1"
            },
            {
              "status": "affected",
              "version": "17.13.1a"
            },
            {
              "status": "affected",
              "version": "17.14.1"
            },
            {
              "status": "affected",
              "version": "17.14.1a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition.\r\n\r This vulnerability is due to improper memory management when Cisco IOS XE Software is processing Address Resolution Protocol (ARP) messages. An attacker could exploit this vulnerability by sending crafted ARP messages at a high rate over a period of time to an affected device. A successful exploit could allow the attacker to exhaust system resources, which eventually triggers a reload of the active route switch processor (RSP). If a redundant RSP is not present, the router reloads."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "format": "cvssV3_1"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-762",
              "description": "Mismatched Memory Management Routines",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-07T17:35:47.923Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
        }
      ],
      "source": {
        "advisory": "cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ",
        "defects": [
          "CSCwh55442"
        ],
        "discovery": "EXTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2025-20189",
    "datePublished": "2025-05-07T17:35:47.923Z",
    "dateReserved": "2024-10-10T19:15:13.226Z",
    "dateUpdated": "2025-05-07T19:44:12.723Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-20189",
      "date": "2026-05-25",
      "epss": "0.00103",
      "percentile": "0.27728"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-20189\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2025-05-07T18:15:38.770\",\"lastModified\":\"2025-08-05T14:36:20.273\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition.\\r\\n\\r This vulnerability is due to improper memory management when Cisco IOS XE Software is processing Address Resolution Protocol (ARP) messages. An attacker could exploit this vulnerability by sending crafted ARP messages at a high rate over a period of time to an affected device. A successful exploit could allow the attacker to exhaust system resources, which eventually triggers a reload of the active route switch processor (RSP). If a redundant RSP is not present, the router reloads.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la funci\u00f3n Cisco Express Forwarding del software Cisco IOS XE para routers de servicios de agregaci\u00f3n Cisco ASR 903 con procesador de conmutaci\u00f3n de ruta 3 (RSP3C) podr\u00eda permitir que un atacante adyacente no autenticado active una denegaci\u00f3n de servicio (DoS). Esta vulnerabilidad se debe a una gesti\u00f3n de memoria inadecuada cuando el software Cisco IOS XE procesa mensajes del protocolo de resoluci\u00f3n de direcciones (ARP). Un atacante podr\u00eda explotar esta vulnerabilidad enviando mensajes ARP manipulados a alta velocidad durante un per\u00edodo de tiempo a un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante agotar los recursos del sistema, lo que eventualmente desencadena la recarga del procesador de conmutaci\u00f3n de ruta (RSP) activo. Si no hay un RSP redundante, el router se recarga.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H\",\"baseScore\":7.4,\"baseSeverity\":\"HIGH\",\"attackVector\":\"ADJACENT_NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":4.0}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-762\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5568EABF-8F43-4A87-8DE4-A03E9065BE53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0E5BB91-B5E7-4961-87DC-26596E5EDED7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3822447-EB80-4DF2-B7F2-471F55BA99C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BA0B441A-3A09-4A58-8A40-D463003A50BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51E1A64A-204D-4567-A2DC-EFEB2AE62B54\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"970FD986-6D0E-441C-9BF3-C66A25763A7A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7EEFD3AD-EFA2-4808-801E-B98E4C63AA76\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1826C997-6D5D-480E-A12E-3048B6C61216\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5D136C95-F837-49AD-82B3-81C25F68D0EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C35B3F96-B342-4AFC-A511-7A735B961ECD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DED2D791-4142-4B9E-8401-6B63357536B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9FBEF4B2-EA12-445A-823E-E0E5343A405E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"844E7CEC-5CB6-47AE-95F7-75693347C08E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.6bs:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E50A67CE-EB1C-4BFA-AB40-BCF6CDF168BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"147A245E-9A5D-4178-A1AC-5B0D41C3B730\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.7as:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"169D71B3-1CCE-4526-8D91-048212EEDF08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.7bs:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27F66514-B9C4-422E-B68E-406608302E03\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.7s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2438157-4D9C-4E16-9D2A-759A8F6CDDE2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.8s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12ECC01E-E59F-4AED-AE51-7EE6B5E717E8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.9s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABC524BA-544C-49B9-A9D6-800D25556532\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.16.10s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2BC99316-75AC-45EB-B6BB-DB014ED08ECA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12793F39-13C4-4DBC-9B78-FE361BDDF89D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1AEF94C7-CEE6-4696-9F1D-549639A831C2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"876767C7-0196-4226-92B1-DDE851B53655\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0141D67B-632F-48ED-8837-4CC799616C57\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.17.4s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE444B39-D025-471B-835E-88671212ACAA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BE390091-D382-4436-BBB4-D4C33E4F6714\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE81AA43-88D4-4EFC-B8F6-A41EFF437819\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C18E6308-7A34-43E3-9AD8-5FB52B31ACB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.1asp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A667AEC6-57E3-4D67-A02E-F0BAEBCE16DD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80EE163D-D9EC-46A1-826A-54F8F3A3FFBE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.1csp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3CE4CFE4-C00F-4FAE-8FDF-F6C92E92838D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6BEBCBF7-D1CF-488F-BB3E-F864F901A96A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06BBE88E-FEFB-4B90-91D1-4F053FA0EA47\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.2asp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D43FA49-1F9D-4FD0-AF18-6E9AB6DF702F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD8CCA19-1D1C-45C0-A1A0-CED5885AD580\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.2sp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"014224BF-926E-470C-A133-84036D8AD533\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.3asp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10B0DE46-C4C4-4DA1-A4CD-9627F13FED3B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.3bsp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B58E818D-03BB-4FE4-946B-B967E9764DA3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.3s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4063CCF8-19BE-4411-B71B-147BB146700B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.3sp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2DE8E0D1-E4AD-4648-BCF0-AE11B93D22B2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.4s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"186ADB50-A4D4-4B32-884D-3195E7770346\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.4sp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"334F278A-CFEB-4145-9D8D-EFC36A1BF258\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.5sp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B76F26E-7B1C-4894-8CDD-4BA1243E4EAD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.6sp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B5FB99D7-CDA9-4C3E-9DBB-3AC1CEBA4D90\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.7sp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"63D05DBA-D3F0-492B-9976-54A7E46F315E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.8asp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"596E09DB-97B1-4DCE-AC5E-18CC9ACCAFB8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:3.18.9sp:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB2D4A7B-E0B7-4D65-B242-75934490D703\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0ED5527C-A638-4E20-9928-099E32E17743\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.1.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A685A9A-235D-4D74-9D6C-AC49E75709CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"43052998-0A27-4E83-A884-A94701A3F4CE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"89526731-B712-43D3-B451-D7FC503D2D65\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"302933FE-4B6A-48A3-97F0-4B943251B717\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"296636F1-9242-429B-8472-90352C056106\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77993343-0394-413F-ABF9-C1215E9AD800\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"283971DD-DD58-4A76-AC2A-F316534ED416\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A8F324A5-4830-482E-A684-AB3B6594CEAE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8120196-8648-49D0-8262-CD4C9C90C37A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"33E7CCE2-C685-4019-9B55-B3BECB3E5F76\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.5b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0699DD6E-BA74-4814-93AB-300329C9D032\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C2E2D781-2684-45F1-AC52-636572A0DCA8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"479FB47B-AF2E-4FCB-8DE0-400BF325666C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DF2B4C78-5C31-4F3D-9639-305E15576E79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2C09F0A2-B21F-40ED-A6A8-9A29D6E1C6A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"32BA13F4-EF9C-4368-B8B1-9FD9FAF5CEFF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.3.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"13CB889F-B064-4CAC-99AC-903745ACA566\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"77E8AF15-AB46-4EAB-8872-8C55E8601599\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"957318BE-55D4-4585-AA52-C813301D01C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F11B703-8A0F-47ED-AA70-951FF78B94A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FE7B2557-821D-4E05-B5C3-67192573D97D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5EE6EC32-51E4-43A3-BFB9-A0D842D08E87\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.5.1b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"187F699A-AF2F-42B0-B855-27413140C384\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7E0B905E-4D92-4FD6-B2FF-41FF1F59A948\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62EDEC28-661E-42EF-88F0-F62D0220D2E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F821EBD7-91E2-4460-BFAF-18482CF6CB8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E36D2D24-8F63-46DE-AC5F-8DE33332EBC6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9B825E6-5929-4890-BDBA-4CF4BD2314C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"65020120-491D-46CD-8C73-974B6F4C11E6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7ADDCD0A-6168-45A0-A885-76CC70FE2FC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D83E34F4-F4DD-49CC-9C95-93F9D4D26B42\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.5a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D2833EAE-94C8-4279-A244-DDB6E2D15DC2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C8F50DB-3A80-4D89-9F7B-86766D37338B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"01B53828-C520-4845-9C14-6C7D50EAA3A8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.6.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"20F23DB7-6F8E-470A-9B43-0ACEEF331C38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"623BF701-ADC9-4F24-93C5-043A6A7FEF5F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.7.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5311FBE-12BF-41AC-B8C6-D86007834863\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.7.1b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"52FB055E-72F9-4CB7-A51D-BF096BD1A55D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0FBD681F-7969-42BE-A47E-7C287755DCB5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"98255E6F-3056-487D-9157-403836EFB9D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.7.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"521ACFB0-4FB2-44DB-AD7B-C27F9059DE66\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57D4F634-03D5-4D9F-901C-7E9CE45F2F38\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4463A1D1-E169-4F0B-91B2-FA126BB444CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D97F69C3-CAA6-491C-A0B6-6DC12B5AB472\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CDD58C58-1B0C-4A71-8C02-F555CEF9C253\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"96852D16-AF50-4C70-B125-D2349E6765D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A15B882A-BA60-4932-A55E-F4A798B30EEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5C9C585C-A6EC-4385-B915-046C110BF95F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"47DBE4ED-1CD8-4134-9B33-17A91F44F17B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"119A964D-ABC8-424D-8097-85B832A833BD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0375BF9E-D04B-4E5B-9051-536806ECA44E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2266E5A2-B3F6-4389-B8E2-42CB845EC7F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78DE7780-4E8B-4BB6-BDEB-58032EC65851\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F29CEE37-4044-4A3C-9685-C9C021FD346A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1E16D266-108F-4F8A-998D-F1CA25F2EAAD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4BF9829-F80E-4837-A420-39B291C4E17B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F5AB80E7-0714-44ED-9671-12C877B36A1E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"10182B94-6831-461E-B0FC-9476EAB6EBEF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"961F8312-31B9-44E7-8858-EF8E2134F447\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3D62EE1B-9A59-406C-B7DF-91B495F3ECFE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.9.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"79CF8D4E-F82A-469C-A8C2-0C203A800A05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB6BD18B-B9BD-452F-986E-16A6668E46B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D136D2BC-FFB5-4912-A3B1-BD96148CB9A5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5CD5B3AB-27C2-4055-A3B7-0112D089FDA4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04081A51-E08F-4114-9276-584E836181D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ADED0D82-2A4D-4235-BFAC-5EE2D862B652\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"62A46516-CEB7-48D4-879B-341963A1FA31\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D6EF98FA-6DF9-4935-9639-143E08462BC4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A443E93-6C4B-4F86-BA7C-7C2A929E795A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6ECEDD9D-6517-44BA-A95F-D1D5488C0E41\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E91F8704-6DAD-474A-84EA-04E4AF7BB9B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"314C7763-A64D-4023-9F3F-9A821AE4151F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5820D71D-FC93-45AA-BC58-A26A1A39C936\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B53E377A-0296-4D7A-B97C-576B0026543D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C98DED36-D4B5-48D6-964E-EEEE97936700\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD98C9E8-3EA6-4160-970D-37C389576516\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9027A528-2588-4C06-810B-5BB313FE4323\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7745ED34-D59D-49CC-B174-96BCA03B3374\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"19AF4CF3-6E79-4EA3-974D-CD451A192BA9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"313BD54C-073C-4F27-82D5-C99EFC3A20F7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"93B96E01-3777-4C33-9225-577B469A6CE5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1z1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D18B32E3-6B33-4E3D-879A-82E2F0BFC906\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.1z2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"46E37204-FC9A-4397-AFA4-9CAC7A116D55\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5019B59-508E-40B0-9C92-2C26F58E2FBE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"443D78BA-A3DA-4D1F-A4DF-2F426DC6B841\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5750264-2990-4942-85F4-DB9746C5CA2B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B9173AD6-6658-4267-AAA7-D50D0B657528\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F02EE9D-45B1-43D6-B05D-6FF19472216B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8FCB9440-F470-45D1-AAFA-01FB5D76B600\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.5a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3F66ECFE-B631-47AE-995F-024A4E586A85\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.5b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3BBFDD70-7AF3-47AE-94CA-56C19F2D6234\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B736F09-3B51-4B2A-92F6-602847001F15\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.6a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F58A94E-B050-4EFA-84BA-43B11BA22E77\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E864BB1-FD23-4AB3-9138-5FD8B62EAF5B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"838D6C2D-C131-4A9C-AAE5-5BF38E637E4B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"37D5E77B-687D-4AE7-95B8-0AB56AF5DAD3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.10:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"91EF2384-9939-4F86-8A0F-7CB7034980E7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.10a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2E51B09-D66D-4AE8-AF96-AEDE54A7C209\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.11:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AF595930-44E0-41FD-A0EF-C8E301E6585B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.12:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F621724-9BA3-4D47-AAB8-08D7A541EBDF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:16.12.13:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"82E2A28A-700E-4546-AA94-2B13C925BDFF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E306B09C-CB48-4067-B60C-5F738555EEAC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD446C51-E713-4E46-8328-0A0477D140D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8B4D4659-A304-459F-8AB3-ED6D84B44C0F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B51FA707-8DB1-4596-9122-D4BFEF17F400\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C04DF35A-1B6F-420A-8D84-74EB41BF3700\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"211CC9B2-6108-4C50-AB31-DC527C43053E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"08DCCBA3-82D2-4444-B5D3-E5FC58D024F9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"128F95D7-E49F-4B36-8F47-823C0298449E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E21B3881-37E9-4C00-9336-12C9C28D1B61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E54599DB-A85E-4EEA-9985-2CBF90E28A08\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.1x:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4046C325-7EDB-4C95-AA98-541BEC8F9E0F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.1z:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E5B70A3D-CBE1-4218-A7B4-F85741A57BD7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2B270A04-9961-4E99-806B-441CD674AFBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1360069D-0358-4746-8C3F-44C2A40988D7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C5DD2403-113B-4100-8BD4-90E1927E6648\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DAF73937-BCE2-4BEF-B4B0-83212DA4A6C8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.4a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2DDB1E60-C2A9-4570-BE80-F3D478A53738\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.4b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9841799A-87E2-46AE-807A-824981EAB35A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.4c:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CEF022B-271F-4017-B74B-82748D5EBA01\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B2902D8-3A7B-4C47-9BC6-8CA4C580A346\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.5a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8871B890-78F4-4D9D-AEFF-6A393493C51E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.5b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E489AC5-A445-44FF-AA85-F0915577384E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"917BA05C-2A18-4C68-B508-85C2B5A94416\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06337791-7D8D-4EAA-BACC-4E270F377B3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"336A8630-653C-4E28-8DE1-76CDD8573980\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.3.8a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0A1767AE-7D9F-4BAA-90E1-CF8314CD0B53\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5A6B707B-4543-41F1-83DF-49A93BF56FB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DC8F611B-D347-4A21-90E6-56CF4D8A35A3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9A92CE4-B4B0-4C14-AE11-8DFE511406F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"274E3E6F-4280-4EAE-B102-1BE57FE1F1D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.4.2a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"46B52A51-51DB-4A12-AB1D-8D9605226599\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"938B0720-8CA7-43BA-9708-5CE9EC7A565A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.5.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D4BE7166-DBD3-4CE6-A14A-725FE896B85E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4DE62C4B-7C06-4907-BADE-416C1618D2D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0C60DF3F-DBD9-4BBF-812E-4BB0C47BDF3C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.1w:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"26FEE2E2-DD85-4006-8895-0BDA04E8EE4C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.1x:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A0CD237B-2843-4D37-87D7-AE6D1A53458A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.1y:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B80614B-6362-45F0-B305-2F137B053DCF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.1z:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"47B20C7E-1C9C-4EF4-91E4-388643C4B9C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.1z1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB7966A0-D84D-47F7-AED9-D041BCDA6703\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04D19D8C-FACF-49B4-BA99-CC3A3FDADAFB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B78942C-BEE1-4D18-9075-8E1D991BF621\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.3a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B306D35-4A13-4D23-8EC2-D000E8ADCDA5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F21093D-1036-4F6B-B90F-ACE1EF99EA33\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"280D24C6-A2BF-46E8-B512-6A3FA7833922\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.5a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1F903F51-ABF4-49B0-A5BA-A6B51F79666F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E3F244E7-8EE9-4E58-83FA-EEDD3C8F792D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.6a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5238B1D1-740D-4B37-A0CB-1B3343E55D05\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27E0750C-A622-49D6-A8EF-B59E2F8F1912\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2258D93E-71AA-4964-A5DF-008E3479F2A4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.6.8a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"608ACC60-143B-4835-B6AC-E6C3111B4078\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38B87B17-C653-40AC-8AE4-066BB1123C88\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.7.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9012A66E-82C4-4ACF-A4BB-37EC54B87B50\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.7.1b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C945710-7DC3-43D9-9FBE-F2A1B8666C73\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"849C6FF1-F7C0-4021-BCA2-A791C87E4F37\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7592C7E3-3735-425F-A276-9EE03224CD5E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.8.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1103BE75-EB64-4A9A-801E-EDE6A1F861F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B0C2129-8149-4362-827C-A5494C9D398B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7452C7E9-6241-42C5-9A7F-13C0BD38A2B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.1w:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"38C48FC4-5362-4B61-8B8C-7CAFFB81045E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.1x:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2BC43383-DF99-4D38-A220-0A202623B36A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.1x1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B7E6CD08-EC7E-42C1-B2C2-CA5E154545A0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.1y:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DE62DC68-E882-49E7-AAD2-2F73637FFB4A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.1y1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"57CD29C9-C629-48B0-ABDD-CEC3DEB6FB11\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D197445E-EC12-429C-BDD4-F63FA5C1B3E3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.2a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD27DF50-9E81-4EC5-BA73-513F1DFB972C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51EA3EAA-A379-467E-AF9A-FCFBACAE49C7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.3a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4FC63AAF-758F-4A70-9738-96E75A0A1DDA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E67BE408-8DCF-491F-9EA9-E368565C1B49\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.4a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D9CFE98A-FBA5-4837-BBD9-3C875ECEBF1B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"36A5F20F-3F38-4FB9-B49D-28569EB1A763\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.5a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D2264D7-5E89-4F50-B948-FAB41D07C8BA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.5b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6BB8368D-B9F9-4679-8154-1174E140CA17\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.5e:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"78EEDF40-2CDA-4147-A9F2-A5F4B8FF35EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.5f:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40CEA4FC-B946-4D54-A45B-686FC02D5411\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BDBE176-04ED-48F0-BA9F-45BECFEDBE2A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.9.6a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94E52AA0-0A77-47DF-9600-7D5B8A6D09B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.10.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"42FAEC29-D754-49D6-85F1-F5DDFAF6E80F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.10.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CCE76032-948F-444F-BA5D-72A34D1CD382\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.10.1b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A965A2A-129C-45C3-BCB1-2860F583D020\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.11.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F313F2EC-F3D6-4639-934C-402DDA3DA806\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.11.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AFB2CA6-8332-4E4D-BDB4-C3B770D3AD6C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1BF0778B-015D-481B-BAC0-40667F3453D3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.1w:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"66D0DB87-6BB7-4FCF-BF20-6D4D48D72B79\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.1x:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E0A766E7-CF3C-4529-AFA4-D780059A66BC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.1y:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"46B7F7EA-6512-433F-B1E4-B2F889427464\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.1z:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"63527910-7F55-4D40-BFE7-D497C91C334D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.1z1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6EACA43F-64DB-496B-A6B1-DB9FAF6606EB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EE165207-A066-44C1-B78A-6EFD80023204\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.2a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4AF792BC-C270-4294-8E4E-71FAC3ACFCF8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1098FCEA-6A9F-4634-A0EF-EC55ABCCEA3E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.3a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"53B97B06-206B-42F0-B68F-5C5136EAD2B1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6281EB0F-EE0E-4B06-A7A1-29460A98A8CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.4a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07650346-67D7-4805-BF81-BB145304CC87\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.12.4b:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9C6C0D21-ABD5-42F1-B04B-745CA6115D07\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.13.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8577AF01-F2C7-48D3-AB0B-78BD63A60029\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.13.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CD0D2D94-6470-4E4B-A1B1-0124F92AA793\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.14.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"31789E98-7C8D-4C5A-8A3F-FC9AFE9A248C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:17.14.1a:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A62648B-3273-4D75-8533-A5CBE1B1BCE0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:cisco:asr_903:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"51938C0A-AFDB-4B12-BB64-9C67FC0C738F\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-20189\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-05-07T18:56:04.440375Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-05-07T18:56:06.258Z\"}}], \"cna\": {\"source\": {\"defects\": [\"CSCwh55442\"], \"advisory\": \"cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ\", \"discovery\": \"EXTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 7.4, \"attackVector\": \"ADJACENT_NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco IOS XE Software\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.16.0S\"}, {\"status\": \"affected\", \"version\": \"3.16.1S\"}, {\"status\": \"affected\", \"version\": \"3.16.1aS\"}, {\"status\": \"affected\", \"version\": \"3.16.2S\"}, {\"status\": \"affected\", \"version\": \"3.16.2aS\"}, {\"status\": \"affected\", \"version\": \"3.16.0cS\"}, {\"status\": \"affected\", \"version\": \"3.16.3S\"}, {\"status\": \"affected\", \"version\": \"3.16.2bS\"}, {\"status\": \"affected\", \"version\": \"3.16.3aS\"}, {\"status\": \"affected\", \"version\": \"3.16.4S\"}, {\"status\": \"affected\", \"version\": \"3.16.4aS\"}, {\"status\": \"affected\", \"version\": \"3.16.4bS\"}, {\"status\": \"affected\", \"version\": \"3.16.5S\"}, {\"status\": \"affected\", \"version\": \"3.16.4dS\"}, {\"status\": \"affected\", \"version\": \"3.16.6S\"}, {\"status\": \"affected\", \"version\": \"3.16.7S\"}, {\"status\": \"affected\", \"version\": \"3.16.6bS\"}, {\"status\": \"affected\", \"version\": \"3.16.7aS\"}, {\"status\": \"affected\", \"version\": \"3.16.7bS\"}, {\"status\": \"affected\", \"version\": \"3.16.8S\"}, {\"status\": \"affected\", \"version\": \"3.16.9S\"}, {\"status\": \"affected\", \"version\": \"3.16.10S\"}, {\"status\": \"affected\", \"version\": \"3.17.0S\"}, {\"status\": \"affected\", \"version\": \"3.17.1S\"}, {\"status\": \"affected\", \"version\": \"3.17.2S\"}, {\"status\": \"affected\", \"version\": \"3.17.1aS\"}, {\"status\": \"affected\", \"version\": \"3.17.3S\"}, {\"status\": \"affected\", \"version\": \"3.17.4S\"}, {\"status\": \"affected\", \"version\": \"16.1.1\"}, {\"status\": \"affected\", \"version\": \"16.1.2\"}, {\"status\": \"affected\", \"version\": \"16.1.3\"}, {\"status\": \"affected\", \"version\": \"16.2.1\"}, {\"status\": \"affected\", \"version\": \"16.2.2\"}, {\"status\": \"affected\", \"version\": \"16.3.1\"}, {\"status\": \"affected\", \"version\": \"16.3.2\"}, {\"status\": \"affected\", \"version\": \"16.3.3\"}, {\"status\": \"affected\", \"version\": \"16.3.1a\"}, {\"status\": \"affected\", \"version\": \"16.3.4\"}, {\"status\": \"affected\", \"version\": \"16.3.5\"}, {\"status\": \"affected\", \"version\": \"16.3.5b\"}, {\"status\": \"affected\", \"version\": \"16.3.6\"}, {\"status\": \"affected\", \"version\": \"16.3.7\"}, {\"status\": \"affected\", \"version\": \"16.3.8\"}, {\"status\": \"affected\", \"version\": \"16.3.9\"}, {\"status\": \"affected\", \"version\": \"16.3.10\"}, {\"status\": \"affected\", \"version\": \"16.3.11\"}, {\"status\": \"affected\", \"version\": \"16.4.1\"}, {\"status\": \"affected\", \"version\": \"16.4.2\"}, {\"status\": \"affected\", \"version\": \"16.4.3\"}, {\"status\": \"affected\", \"version\": \"16.5.1\"}, {\"status\": \"affected\", \"version\": \"16.5.1a\"}, {\"status\": \"affected\", \"version\": \"16.5.1b\"}, {\"status\": \"affected\", \"version\": \"16.5.2\"}, {\"status\": \"affected\", \"version\": \"16.5.3\"}, {\"status\": \"affected\", \"version\": \"3.18.0aS\"}, {\"status\": \"affected\", \"version\": \"3.18.0S\"}, {\"status\": \"affected\", \"version\": \"3.18.1S\"}, {\"status\": \"affected\", \"version\": \"3.18.2S\"}, {\"status\": \"affected\", \"version\": \"3.18.3S\"}, {\"status\": \"affected\", \"version\": \"3.18.4S\"}, {\"status\": \"affected\", \"version\": \"3.18.0SP\"}, {\"status\": \"affected\", \"version\": \"3.18.1SP\"}, {\"status\": \"affected\", \"version\": \"3.18.1aSP\"}, {\"status\": \"affected\", \"version\": \"3.18.1bSP\"}, {\"status\": \"affected\", \"version\": \"3.18.1cSP\"}, {\"status\": \"affected\", \"version\": \"3.18.2SP\"}, {\"status\": \"affected\", \"version\": \"3.18.2aSP\"}, {\"status\": \"affected\", \"version\": \"3.18.3SP\"}, {\"status\": \"affected\", \"version\": \"3.18.4SP\"}, {\"status\": \"affected\", \"version\": \"3.18.3aSP\"}, {\"status\": \"affected\", \"version\": \"3.18.3bSP\"}, {\"status\": \"affected\", \"version\": \"3.18.5SP\"}, {\"status\": \"affected\", \"version\": \"3.18.6SP\"}, {\"status\": \"affected\", \"version\": \"3.18.7SP\"}, {\"status\": \"affected\", \"version\": \"3.18.8aSP\"}, {\"status\": \"affected\", \"version\": \"3.18.9SP\"}, {\"status\": \"affected\", \"version\": \"16.6.1\"}, {\"status\": \"affected\", \"version\": \"16.6.2\"}, {\"status\": \"affected\", \"version\": \"16.6.3\"}, {\"status\": \"affected\", \"version\": \"16.6.4\"}, {\"status\": \"affected\", \"version\": \"16.6.5\"}, {\"status\": \"affected\", \"version\": \"16.6.4a\"}, {\"status\": \"affected\", \"version\": \"16.6.5a\"}, {\"status\": \"affected\", \"version\": \"16.6.6\"}, {\"status\": \"affected\", \"version\": \"16.6.7\"}, {\"status\": \"affected\", \"version\": \"16.6.8\"}, {\"status\": \"affected\", \"version\": \"16.6.9\"}, {\"status\": \"affected\", \"version\": \"16.6.10\"}, {\"status\": \"affected\", \"version\": \"16.7.1\"}, {\"status\": \"affected\", \"version\": \"16.7.1a\"}, {\"status\": \"affected\", \"version\": \"16.7.1b\"}, {\"status\": \"affected\", \"version\": \"16.7.2\"}, {\"status\": \"affected\", \"version\": \"16.7.3\"}, {\"status\": \"affected\", \"version\": \"16.7.4\"}, {\"status\": \"affected\", \"version\": \"16.8.1\"}, {\"status\": \"affected\", \"version\": \"16.8.1a\"}, {\"status\": \"affected\", \"version\": \"16.8.1b\"}, {\"status\": \"affected\", \"version\": \"16.8.1s\"}, {\"status\": \"affected\", \"version\": \"16.8.1c\"}, {\"status\": \"affected\", \"version\": \"16.8.1d\"}, {\"status\": \"affected\", \"version\": \"16.8.2\"}, {\"status\": \"affected\", \"version\": \"16.8.1e\"}, {\"status\": \"affected\", \"version\": \"16.8.3\"}, {\"status\": \"affected\", \"version\": \"16.9.1\"}, {\"status\": \"affected\", \"version\": \"16.9.2\"}, {\"status\": \"affected\", \"version\": \"16.9.1a\"}, {\"status\": \"affected\", \"version\": \"16.9.1b\"}, {\"status\": \"affected\", \"version\": \"16.9.1s\"}, {\"status\": \"affected\", \"version\": \"16.9.3\"}, {\"status\": \"affected\", \"version\": \"16.9.4\"}, {\"status\": \"affected\", \"version\": \"16.9.3a\"}, {\"status\": \"affected\", \"version\": \"16.9.5\"}, {\"status\": \"affected\", \"version\": \"16.9.5f\"}, {\"status\": \"affected\", \"version\": \"16.9.6\"}, {\"status\": \"affected\", \"version\": \"16.9.7\"}, {\"status\": \"affected\", \"version\": \"16.9.8\"}, {\"status\": \"affected\", \"version\": \"16.10.1\"}, {\"status\": \"affected\", \"version\": \"16.10.1a\"}, {\"status\": \"affected\", \"version\": \"16.10.1b\"}, {\"status\": \"affected\", \"version\": \"16.10.1s\"}, {\"status\": \"affected\", \"version\": \"16.10.1c\"}, {\"status\": \"affected\", \"version\": \"16.10.1e\"}, {\"status\": \"affected\", \"version\": \"16.10.1d\"}, {\"status\": \"affected\", \"version\": \"16.10.2\"}, {\"status\": \"affected\", \"version\": \"16.10.1f\"}, {\"status\": \"affected\", \"version\": \"16.10.1g\"}, {\"status\": \"affected\", \"version\": \"16.10.3\"}, {\"status\": \"affected\", \"version\": \"16.11.1\"}, {\"status\": \"affected\", \"version\": \"16.11.1a\"}, {\"status\": \"affected\", \"version\": \"16.11.1b\"}, {\"status\": \"affected\", \"version\": \"16.11.2\"}, {\"status\": \"affected\", \"version\": \"16.11.1s\"}, {\"status\": \"affected\", \"version\": \"16.12.1\"}, {\"status\": \"affected\", \"version\": \"16.12.1s\"}, {\"status\": \"affected\", \"version\": \"16.12.1a\"}, {\"status\": \"affected\", \"version\": \"16.12.1c\"}, {\"status\": \"affected\", \"version\": \"16.12.1w\"}, {\"status\": \"affected\", \"version\": \"16.12.2\"}, {\"status\": \"affected\", \"version\": \"16.12.1y\"}, {\"status\": \"affected\", \"version\": \"16.12.2a\"}, {\"status\": \"affected\", \"version\": \"16.12.3\"}, {\"status\": \"affected\", \"version\": \"16.12.8\"}, {\"status\": \"affected\", \"version\": \"16.12.2s\"}, {\"status\": \"affected\", \"version\": \"16.12.1x\"}, {\"status\": \"affected\", \"version\": \"16.12.1t\"}, {\"status\": \"affected\", \"version\": \"16.12.4\"}, {\"status\": \"affected\", \"version\": \"16.12.3s\"}, {\"status\": \"affected\", \"version\": \"16.12.3a\"}, {\"status\": \"affected\", \"version\": \"16.12.4a\"}, {\"status\": \"affected\", \"version\": \"16.12.5\"}, {\"status\": \"affected\", \"version\": \"16.12.6\"}, {\"status\": \"affected\", \"version\": \"16.12.1z1\"}, {\"status\": \"affected\", \"version\": \"16.12.5a\"}, {\"status\": \"affected\", \"version\": \"16.12.5b\"}, {\"status\": \"affected\", \"version\": \"16.12.1z2\"}, {\"status\": \"affected\", \"version\": \"16.12.6a\"}, {\"status\": \"affected\", \"version\": \"16.12.7\"}, {\"status\": \"affected\", \"version\": \"16.12.9\"}, {\"status\": \"affected\", \"version\": \"16.12.10\"}, {\"status\": \"affected\", \"version\": \"16.12.10a\"}, {\"status\": \"affected\", \"version\": \"16.12.11\"}, {\"status\": \"affected\", \"version\": \"16.12.12\"}, {\"status\": \"affected\", \"version\": \"16.12.13\"}, {\"status\": \"affected\", \"version\": \"17.1.1\"}, {\"status\": \"affected\", \"version\": \"17.1.1a\"}, {\"status\": \"affected\", \"version\": \"17.1.1s\"}, {\"status\": \"affected\", \"version\": \"17.1.1t\"}, {\"status\": \"affected\", \"version\": \"17.1.3\"}, {\"status\": \"affected\", \"version\": \"17.2.1\"}, {\"status\": \"affected\", \"version\": \"17.2.1r\"}, {\"status\": \"affected\", \"version\": \"17.2.1a\"}, {\"status\": \"affected\", \"version\": \"17.2.1v\"}, {\"status\": \"affected\", \"version\": \"17.2.2\"}, {\"status\": \"affected\", \"version\": \"17.2.3\"}, {\"status\": \"affected\", \"version\": \"17.3.1\"}, {\"status\": \"affected\", \"version\": \"17.3.2\"}, {\"status\": \"affected\", \"version\": \"17.3.3\"}, {\"status\": \"affected\", \"version\": \"17.3.1a\"}, {\"status\": \"affected\", \"version\": \"17.3.1w\"}, {\"status\": \"affected\", \"version\": \"17.3.2a\"}, {\"status\": \"affected\", \"version\": \"17.3.1x\"}, {\"status\": \"affected\", \"version\": \"17.3.1z\"}, {\"status\": \"affected\", \"version\": \"17.3.4\"}, {\"status\": \"affected\", \"version\": \"17.3.5\"}, {\"status\": \"affected\", \"version\": \"17.3.4a\"}, {\"status\": \"affected\", \"version\": \"17.3.6\"}, {\"status\": \"affected\", \"version\": \"17.3.4b\"}, {\"status\": \"affected\", \"version\": \"17.3.4c\"}, {\"status\": \"affected\", \"version\": \"17.3.5a\"}, {\"status\": \"affected\", \"version\": \"17.3.5b\"}, {\"status\": \"affected\", \"version\": \"17.3.7\"}, {\"status\": \"affected\", \"version\": \"17.3.8\"}, {\"status\": \"affected\", \"version\": \"17.3.8a\"}, {\"status\": \"affected\", \"version\": \"17.4.1\"}, {\"status\": \"affected\", \"version\": \"17.4.2\"}, {\"status\": \"affected\", \"version\": \"17.4.1a\"}, {\"status\": \"affected\", \"version\": \"17.4.1b\"}, {\"status\": \"affected\", \"version\": \"17.4.2a\"}, {\"status\": \"affected\", \"version\": \"17.5.1\"}, {\"status\": \"affected\", \"version\": \"17.5.1a\"}, {\"status\": \"affected\", \"version\": \"17.6.1\"}, {\"status\": \"affected\", \"version\": \"17.6.2\"}, {\"status\": \"affected\", \"version\": \"17.6.1w\"}, {\"status\": \"affected\", \"version\": \"17.6.1a\"}, {\"status\": \"affected\", \"version\": \"17.6.1x\"}, {\"status\": \"affected\", \"version\": \"17.6.3\"}, {\"status\": \"affected\", \"version\": \"17.6.1y\"}, {\"status\": \"affected\", \"version\": \"17.6.1z\"}, {\"status\": \"affected\", \"version\": \"17.6.3a\"}, {\"status\": \"affected\", \"version\": \"17.6.4\"}, {\"status\": \"affected\", \"version\": \"17.6.1z1\"}, {\"status\": \"affected\", \"version\": \"17.6.5\"}, {\"status\": \"affected\", \"version\": \"17.6.6\"}, {\"status\": \"affected\", \"version\": \"17.6.6a\"}, {\"status\": \"affected\", \"version\": \"17.6.5a\"}, {\"status\": \"affected\", \"version\": \"17.6.7\"}, {\"status\": \"affected\", \"version\": \"17.6.8\"}, {\"status\": \"affected\", \"version\": \"17.6.8a\"}, {\"status\": \"affected\", \"version\": \"17.7.1\"}, {\"status\": \"affected\", \"version\": \"17.7.1a\"}, {\"status\": \"affected\", \"version\": \"17.7.1b\"}, {\"status\": \"affected\", \"version\": \"17.7.2\"}, {\"status\": \"affected\", \"version\": \"17.10.1\"}, {\"status\": \"affected\", \"version\": \"17.10.1a\"}, {\"status\": \"affected\", \"version\": \"17.10.1b\"}, {\"status\": \"affected\", \"version\": \"17.8.1\"}, {\"status\": \"affected\", \"version\": \"17.8.1a\"}, {\"status\": \"affected\", \"version\": \"17.9.1\"}, {\"status\": \"affected\", \"version\": \"17.9.1w\"}, {\"status\": \"affected\", \"version\": \"17.9.2\"}, {\"status\": \"affected\", \"version\": \"17.9.1a\"}, {\"status\": \"affected\", \"version\": \"17.9.1x\"}, {\"status\": \"affected\", \"version\": \"17.9.1y\"}, {\"status\": \"affected\", \"version\": \"17.9.3\"}, {\"status\": \"affected\", \"version\": \"17.9.2a\"}, {\"status\": \"affected\", \"version\": \"17.9.1x1\"}, {\"status\": \"affected\", \"version\": \"17.9.3a\"}, {\"status\": \"affected\", \"version\": \"17.9.4\"}, {\"status\": \"affected\", \"version\": \"17.9.1y1\"}, {\"status\": \"affected\", \"version\": \"17.9.5\"}, {\"status\": \"affected\", \"version\": \"17.9.4a\"}, {\"status\": \"affected\", \"version\": \"17.9.5a\"}, {\"status\": \"affected\", \"version\": \"17.9.5b\"}, {\"status\": \"affected\", \"version\": \"17.9.6\"}, {\"status\": \"affected\", \"version\": \"17.9.6a\"}, {\"status\": \"affected\", \"version\": \"17.9.5e\"}, {\"status\": \"affected\", \"version\": \"17.9.5f\"}, {\"status\": \"affected\", \"version\": \"17.11.1\"}, {\"status\": \"affected\", \"version\": \"17.11.1a\"}, {\"status\": \"affected\", \"version\": \"17.12.1\"}, {\"status\": \"affected\", \"version\": \"17.12.1w\"}, {\"status\": \"affected\", \"version\": \"17.12.1x\"}, {\"status\": \"affected\", \"version\": \"17.12.2\"}, {\"status\": \"affected\", \"version\": \"17.12.3\"}, {\"status\": \"affected\", \"version\": \"17.12.2a\"}, {\"status\": \"affected\", \"version\": \"17.12.1y\"}, {\"status\": \"affected\", \"version\": \"17.12.1z\"}, {\"status\": \"affected\", \"version\": \"17.12.4\"}, {\"status\": \"affected\", \"version\": \"17.12.3a\"}, {\"status\": \"affected\", \"version\": \"17.12.1z1\"}, {\"status\": \"affected\", \"version\": \"17.12.4a\"}, {\"status\": \"affected\", \"version\": \"17.12.4b\"}, {\"status\": \"affected\", \"version\": \"17.13.1\"}, {\"status\": \"affected\", \"version\": \"17.13.1a\"}, {\"status\": \"affected\", \"version\": \"17.14.1\"}, {\"status\": \"affected\", \"version\": \"17.14.1a\"}]}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ\", \"name\": \"cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition.\\r\\n\\r This vulnerability is due to improper memory management when Cisco IOS XE Software is processing Address Resolution Protocol (ARP) messages. An attacker could exploit this vulnerability by sending crafted ARP messages at a high rate over a period of time to an affected device. A successful exploit could allow the attacker to exhaust system resources, which eventually triggers a reload of the active route switch processor (RSP). If a redundant RSP is not present, the router reloads.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-762\", \"description\": \"Mismatched Memory Management Routines\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2025-05-07T17:35:47.923Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-20189\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-05-07T19:44:12.723Z\", \"dateReserved\": \"2024-10-10T19:15:13.226Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2025-05-07T17:35:47.923Z\", \"assignerShortName\": \"cisco\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2025-AVI-0378

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Cisco	Catalyst Center	Catalyst Center versions antérieures à 2.3.7.9
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x antérieures à 20.15.2
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.16.x antérieures à 20.16.1
Cisco	IOS XR	IOS XR versions antérieures à 24.3.2
Cisco	WLC AireOS	WLC AireOS versions antérieures à 8.10.196.0
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions antérieures à 20.9.7
Cisco	IOS XE	IOS XE : Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des configurations vulnérables des équipements (cf. section Documentation).
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x antérieures à 20.12.5

References

Title

Publication Time

CERTFR-2025-AVI-0378

Vulnerability from certfr_avis - Published: - Updated:

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Cisco	Catalyst Center	Catalyst Center versions antérieures à 2.3.7.9
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.13.x, 20.14.x et 20.15.x antérieures à 20.15.2
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.16.x antérieures à 20.16.1
Cisco	IOS XR	IOS XR versions antérieures à 24.3.2
Cisco	WLC AireOS	WLC AireOS versions antérieures à 8.10.196.0
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions antérieures à 20.9.7
Cisco	IOS XE	IOS XE : Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des configurations vulnérables des équipements (cf. section Documentation).
Cisco	Catalyst SD-WAN	Catalyst SD-WAN Manager versions 20.10.x, 20.11.x et 20.12.x antérieures à 20.12.5

References

Title

Publication Time

BDU:2025-10333

Vulnerability from fstec - Published: 07.05.2025

Title

Уязвимость операционных систем Cisco IOS XE маршрутизаторов Cisco ASR 903, связанная с несоответствием процедур управления памятью, позволяющая нарушителю вызвать отказ в обслуживании

Description

Уязвимость операционных систем Cisco IOS XE маршрутизаторов Cisco ASR 903 связана с несоответствием процедур управления памятью. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании

Severity ?


                    
                      AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Vendor

Cisco Systems Inc.

Software Name

Cisco IOS XE

Software Version

3.16.1as (Cisco IOS XE), 3.16.2as (Cisco IOS XE), 3.17.0s (Cisco IOS XE), 3.17.1s (Cisco IOS XE), 3.18.0s (Cisco IOS XE), 16.5.1 (Cisco IOS XE), 16.1.1 (Cisco IOS XE), 16.1.2 (Cisco IOS XE), 16.1.3 (Cisco IOS XE), 16.3.1a (Cisco IOS XE), 16.5.1a (Cisco IOS XE), 16.2.1 (Cisco IOS XE), 16.2.2 (Cisco IOS XE), 16.3.1 (Cisco IOS XE), 16.3.2 (Cisco IOS XE), 16.3.3 (Cisco IOS XE), 16.3.4 (Cisco IOS XE), 16.3.5 (Cisco IOS XE), 16.3.5b (Cisco IOS XE), 16.4.1 (Cisco IOS XE), 16.6.1 (Cisco IOS XE), 16.6.4 (Cisco IOS XE), 16.4.3 (Cisco IOS XE), 16.7.2 (Cisco IOS XE), 3.16.4bS (Cisco IOS XE), 3.16.5S (Cisco IOS XE), 3.16.6S (Cisco IOS XE), 3.16.5aS (Cisco IOS XE), 3.16.7S (Cisco IOS XE), 3.16.6bS (Cisco IOS XE), 3.16.7bS (Cisco IOS XE), 3.17.2S (Cisco IOS XE), 3.17.3S (Cisco IOS XE), 3.17.4S (Cisco IOS XE), 16.3.6 (Cisco IOS XE), 16.4.2 (Cisco IOS XE), 16.5.1b (Cisco IOS XE), 16.5.2 (Cisco IOS XE), 16.5.3 (Cisco IOS XE), 3.18.6SP (Cisco IOS XE), 16.6.2 (Cisco IOS XE), 16.6.3 (Cisco IOS XE), 16.7.1 (Cisco IOS XE), 16.8.1 (Cisco IOS XE), 16.9.1b (Cisco IOS XE), 3.16.0aS (Cisco IOS XE), 3.16.3aS (Cisco IOS XE), 3.16.4S (Cisco IOS XE), 3.16.8S (Cisco IOS XE), 16.3.7 (Cisco IOS XE), 3.18.1S (Cisco IOS XE), 3.18.2S (Cisco IOS XE), 3.18.3S (Cisco IOS XE), 3.18.4S (Cisco IOS XE), 3.18.0SP (Cisco IOS XE), 3.18.1SP (Cisco IOS XE), 3.18.1gSP (Cisco IOS XE), 3.18.1bSP (Cisco IOS XE), 3.18.2SP (Cisco IOS XE), 3.18.1hSP (Cisco IOS XE), 3.18.2aSP (Cisco IOS XE), 3.18.1iSP (Cisco IOS XE), 3.18.3SP (Cisco IOS XE), 3.18.4SP (Cisco IOS XE), 3.18.5SP (Cisco IOS XE), 16.8.1b (Cisco IOS XE), 16.8.1c (Cisco IOS XE), 16.9.1 (Cisco IOS XE), 16.9.2 (Cisco IOS XE), 16.9.1a (Cisco IOS XE), 16.7.3 (Cisco IOS XE), 16.10.1 (Cisco IOS XE), 3.16.10S (Cisco IOS XE), 16.12.1 (Cisco IOS XE), 16.9.3h (Cisco IOS XE), 3.16.9S (Cisco IOS XE), 16.3.8 (Cisco IOS XE), 16.6.5 (Cisco IOS XE), 16.3.9 (Cisco IOS XE), 16.6.5a (Cisco IOS XE), 16.6.6 (Cisco IOS XE), 16.9.3 (Cisco IOS XE), 16.9.4 (Cisco IOS XE), 16.11.1 (Cisco IOS XE), 16.11.1a (Cisco IOS XE), 16.11.2 (Cisco IOS XE), 16.3.10 (Cisco IOS XE), 16.6.7 (Cisco IOS XE), 16.6.8 (Cisco IOS XE), 16.9.5 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.1.1 (Cisco IOS XE), 16.12.2 (Cisco IOS XE), 16.12.2a (Cisco IOS XE), 16.12.4 (Cisco IOS XE), 17.1.1a (Cisco IOS XE), 17.1.2 (Cisco IOS XE), 17.1.3 (Cisco IOS XE), 17.3.1 (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.11.1a (Cisco IOS XE), 17.12.1 (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 16.12.3 (Cisco IOS XE), 16.12.8 (Cisco IOS XE), 16.12.5 (Cisco IOS XE), 16.12.6 (Cisco IOS XE), 16.12.7 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9.4 (Cisco IOS XE), 17.9.4a (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.6.6a (Cisco IOS XE), 17.6.6 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.2a (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE), 16.3.11 (Cisco IOS XE), 16.6.9 (Cisco IOS XE), 16.6.10 (Cisco IOS XE), 16.9.6 (Cisco IOS XE), 16.9.7 (Cisco IOS XE), 17.4.1c (Cisco IOS XE), 17.4.2 (Cisco IOS XE), 17.5.1b (Cisco IOS XE), 17.5.1c (Cisco IOS XE), 17.9.2a (Cisco IOS XE), 17.12.2 (Cisco IOS XE), 17.12.2a (Cisco IOS XE), 3.18.9SP (Cisco IOS XE), 3.18.8aSP (Cisco IOS XE), 3.18.7SP (Cisco IOS XE), 17.6.1y (Cisco IOS XE), 16.9.8 (Cisco IOS XE), 17.9.5a (Cisco IOS XE), 17.13.1 (Cisco IOS XE), 17.14.1 (Cisco IOS XE), 17.6.7 (Cisco IOS XE), 17.9.5 (Cisco IOS XE), 17.12.3 (Cisco IOS XE), 17.12.4 (Cisco IOS XE), 17.6.8 (Cisco IOS XE), 17.9.6 (Cisco IOS XE)

Possible Mitigations

Использование рекомендаций: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ

Reference

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ

CWE

CWE-762

JSON

To clipboard

{
  "CVSS 2.0": "AV:A/AC:L/Au:N/C:N/I:N/A:C",
  "CVSS 3.0": "AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Cisco Systems Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "3.16.1as (Cisco IOS XE), 3.16.2as (Cisco IOS XE), 3.17.0s (Cisco IOS XE), 3.17.1s (Cisco IOS XE), 3.18.0s (Cisco IOS XE), 16.5.1 (Cisco IOS XE), 16.1.1 (Cisco IOS XE), 16.1.2 (Cisco IOS XE), 16.1.3 (Cisco IOS XE), 16.3.1a (Cisco IOS XE), 16.5.1a (Cisco IOS XE), 16.2.1 (Cisco IOS XE), 16.2.2 (Cisco IOS XE), 16.3.1 (Cisco IOS XE), 16.3.2 (Cisco IOS XE), 16.3.3 (Cisco IOS XE), 16.3.4 (Cisco IOS XE), 16.3.5 (Cisco IOS XE), 16.3.5b (Cisco IOS XE), 16.4.1 (Cisco IOS XE), 16.6.1 (Cisco IOS XE), 16.6.4 (Cisco IOS XE), 16.4.3 (Cisco IOS XE), 16.7.2 (Cisco IOS XE), 3.16.4bS (Cisco IOS XE), 3.16.5S (Cisco IOS XE), 3.16.6S (Cisco IOS XE), 3.16.5aS (Cisco IOS XE), 3.16.7S (Cisco IOS XE), 3.16.6bS (Cisco IOS XE), 3.16.7bS (Cisco IOS XE), 3.17.2S (Cisco IOS XE), 3.17.3S (Cisco IOS XE), 3.17.4S (Cisco IOS XE), 16.3.6 (Cisco IOS XE), 16.4.2 (Cisco IOS XE), 16.5.1b (Cisco IOS XE), 16.5.2 (Cisco IOS XE), 16.5.3 (Cisco IOS XE), 3.18.6SP (Cisco IOS XE), 16.6.2 (Cisco IOS XE), 16.6.3 (Cisco IOS XE), 16.7.1 (Cisco IOS XE), 16.8.1 (Cisco IOS XE), 16.9.1b (Cisco IOS XE), 3.16.0aS (Cisco IOS XE), 3.16.3aS (Cisco IOS XE), 3.16.4S (Cisco IOS XE), 3.16.8S (Cisco IOS XE), 16.3.7 (Cisco IOS XE), 3.18.1S (Cisco IOS XE), 3.18.2S (Cisco IOS XE), 3.18.3S (Cisco IOS XE), 3.18.4S (Cisco IOS XE), 3.18.0SP (Cisco IOS XE), 3.18.1SP (Cisco IOS XE), 3.18.1gSP (Cisco IOS XE), 3.18.1bSP (Cisco IOS XE), 3.18.2SP (Cisco IOS XE), 3.18.1hSP (Cisco IOS XE), 3.18.2aSP (Cisco IOS XE), 3.18.1iSP (Cisco IOS XE), 3.18.3SP (Cisco IOS XE), 3.18.4SP (Cisco IOS XE), 3.18.5SP (Cisco IOS XE), 16.8.1b (Cisco IOS XE), 16.8.1c (Cisco IOS XE), 16.9.1 (Cisco IOS XE), 16.9.2 (Cisco IOS XE), 16.9.1a (Cisco IOS XE), 16.7.3 (Cisco IOS XE), 16.10.1 (Cisco IOS XE), 3.16.10S (Cisco IOS XE), 16.12.1 (Cisco IOS XE), 16.9.3h (Cisco IOS XE), 3.16.9S (Cisco IOS XE), 16.3.8 (Cisco IOS XE), 16.6.5 (Cisco IOS XE), 16.3.9 (Cisco IOS XE), 16.6.5a (Cisco IOS XE), 16.6.6 (Cisco IOS XE), 16.9.3 (Cisco IOS XE), 16.9.4 (Cisco IOS XE), 16.11.1 (Cisco IOS XE), 16.11.1a (Cisco IOS XE), 16.11.2 (Cisco IOS XE), 16.3.10 (Cisco IOS XE), 16.6.7 (Cisco IOS XE), 16.6.8 (Cisco IOS XE), 16.9.5 (Cisco IOS XE), 17.2.1 (Cisco IOS XE), 17.1.1 (Cisco IOS XE), 16.12.2 (Cisco IOS XE), 16.12.2a (Cisco IOS XE), 16.12.4 (Cisco IOS XE), 17.1.1a (Cisco IOS XE), 17.1.2 (Cisco IOS XE), 17.1.3 (Cisco IOS XE), 17.3.1 (Cisco IOS XE), 17.6.1 (Cisco IOS XE), 17.9.1 (Cisco IOS XE), 17.11.1 (Cisco IOS XE), 17.11.1a (Cisco IOS XE), 17.12.1 (Cisco IOS XE), 17.10.1 (Cisco IOS XE), 16.12.3 (Cisco IOS XE), 16.12.8 (Cisco IOS XE), 16.12.5 (Cisco IOS XE), 16.12.6 (Cisco IOS XE), 16.12.7 (Cisco IOS XE), 17.8.1 (Cisco IOS XE), 17.9.2 (Cisco IOS XE), 17.9.3 (Cisco IOS XE), 17.9.4 (Cisco IOS XE), 17.9.4a (Cisco IOS XE), 17.7.1 (Cisco IOS XE), 17.6.5a (Cisco IOS XE), 17.6.6a (Cisco IOS XE), 17.6.6 (Cisco IOS XE), 17.6.2 (Cisco IOS XE), 17.6.3 (Cisco IOS XE), 17.6.4 (Cisco IOS XE), 17.6.5 (Cisco IOS XE), 17.3.2 (Cisco IOS XE), 17.3.3 (Cisco IOS XE), 17.3.2a (Cisco IOS XE), 17.3.4 (Cisco IOS XE), 17.3.5 (Cisco IOS XE), 17.3.6 (Cisco IOS XE), 17.3.7 (Cisco IOS XE), 17.3.8 (Cisco IOS XE), 17.3.8a (Cisco IOS XE), 17.4.1 (Cisco IOS XE), 17.5.1 (Cisco IOS XE), 16.3.11 (Cisco IOS XE), 16.6.9 (Cisco IOS XE), 16.6.10 (Cisco IOS XE), 16.9.6 (Cisco IOS XE), 16.9.7 (Cisco IOS XE), 17.4.1c (Cisco IOS XE), 17.4.2 (Cisco IOS XE), 17.5.1b (Cisco IOS XE), 17.5.1c (Cisco IOS XE), 17.9.2a (Cisco IOS XE), 17.12.2 (Cisco IOS XE), 17.12.2a (Cisco IOS XE), 3.18.9SP (Cisco IOS XE), 3.18.8aSP (Cisco IOS XE), 3.18.7SP (Cisco IOS XE), 17.6.1y (Cisco IOS XE), 16.9.8 (Cisco IOS XE), 17.9.5a (Cisco IOS XE), 17.13.1 (Cisco IOS XE), 17.14.1 (Cisco IOS XE), 17.6.7 (Cisco IOS XE), 17.9.5 (Cisco IOS XE), 17.12.3 (Cisco IOS XE), 17.12.4 (Cisco IOS XE), 17.6.8 (Cisco IOS XE), 17.9.6 (Cisco IOS XE)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "07.05.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "27.08.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "27.08.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-10333",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-20189",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Cisco IOS XE",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Cisco Systems Inc. Cisco IOS XE 3.16.1as , Cisco Systems Inc. Cisco IOS XE 3.16.2as , Cisco Systems Inc. Cisco IOS XE 3.17.0s , Cisco Systems Inc. Cisco IOS XE 3.17.1s , Cisco Systems Inc. Cisco IOS XE 3.18.0s , Cisco Systems Inc. Cisco IOS XE 16.5.1 , Cisco Systems Inc. Cisco IOS XE 16.1.1 , Cisco Systems Inc. Cisco IOS XE 16.1.2 , Cisco Systems Inc. Cisco IOS XE 16.1.3 , Cisco Systems Inc. Cisco IOS XE 16.3.1a , Cisco Systems Inc. Cisco IOS XE 16.5.1a , Cisco Systems Inc. Cisco IOS XE 16.2.1 , Cisco Systems Inc. Cisco IOS XE 16.2.2 , Cisco Systems Inc. Cisco IOS XE 16.3.1 , Cisco Systems Inc. Cisco IOS XE 16.3.2 , Cisco Systems Inc. Cisco IOS XE 16.3.3 , Cisco Systems Inc. Cisco IOS XE 16.3.4 , Cisco Systems Inc. Cisco IOS XE 16.3.5 , Cisco Systems Inc. Cisco IOS XE 16.3.5b , Cisco Systems Inc. Cisco IOS XE 16.4.1 , Cisco Systems Inc. Cisco IOS XE 16.6.1 , Cisco Systems Inc. Cisco IOS XE 16.6.4 , Cisco Systems Inc. Cisco IOS XE 16.4.3 , Cisco Systems Inc. Cisco IOS XE 16.7.2 , Cisco Systems Inc. Cisco IOS XE 3.16.4bS , Cisco Systems Inc. Cisco IOS XE 3.16.5S , Cisco Systems Inc. Cisco IOS XE 3.16.6S , Cisco Systems Inc. Cisco IOS XE 3.16.5aS , Cisco Systems Inc. Cisco IOS XE 3.16.7S , Cisco Systems Inc. Cisco IOS XE 3.16.6bS , Cisco Systems Inc. Cisco IOS XE 3.16.7bS , Cisco Systems Inc. Cisco IOS XE 3.17.2S , Cisco Systems Inc. Cisco IOS XE 3.17.3S , Cisco Systems Inc. Cisco IOS XE 3.17.4S , Cisco Systems Inc. Cisco IOS XE 16.3.6 , Cisco Systems Inc. Cisco IOS XE 16.4.2 , Cisco Systems Inc. Cisco IOS XE 16.5.1b , Cisco Systems Inc. Cisco IOS XE 16.5.2 , Cisco Systems Inc. Cisco IOS XE 16.5.3 , Cisco Systems Inc. Cisco IOS XE 3.18.6SP , Cisco Systems Inc. Cisco IOS XE 16.6.2 , Cisco Systems Inc. Cisco IOS XE 16.6.3 , Cisco Systems Inc. Cisco IOS XE 16.7.1 , Cisco Systems Inc. Cisco IOS XE 16.8.1 , Cisco Systems Inc. Cisco IOS XE 16.9.1b , Cisco Systems Inc. Cisco IOS XE 3.16.0aS , Cisco Systems Inc. Cisco IOS XE 3.16.3aS , Cisco Systems Inc. Cisco IOS XE 3.16.4S , Cisco Systems Inc. Cisco IOS XE 3.16.8S , Cisco Systems Inc. Cisco IOS XE 16.3.7 , Cisco Systems Inc. Cisco IOS XE 3.18.1S , Cisco Systems Inc. Cisco IOS XE 3.18.2S , Cisco Systems Inc. Cisco IOS XE 3.18.3S , Cisco Systems Inc. Cisco IOS XE 3.18.4S , Cisco Systems Inc. Cisco IOS XE 3.18.0SP , Cisco Systems Inc. Cisco IOS XE 3.18.1SP , Cisco Systems Inc. Cisco IOS XE 3.18.1gSP , Cisco Systems Inc. Cisco IOS XE 3.18.1bSP , Cisco Systems Inc. Cisco IOS XE 3.18.2SP , Cisco Systems Inc. Cisco IOS XE 3.18.1hSP , Cisco Systems Inc. Cisco IOS XE 3.18.2aSP , Cisco Systems Inc. Cisco IOS XE 3.18.1iSP , Cisco Systems Inc. Cisco IOS XE 3.18.3SP , Cisco Systems Inc. Cisco IOS XE 3.18.4SP , Cisco Systems Inc. Cisco IOS XE 3.18.5SP , Cisco Systems Inc. Cisco IOS XE 16.8.1b , Cisco Systems Inc. Cisco IOS XE 16.8.1c , Cisco Systems Inc. Cisco IOS XE 16.9.1 , Cisco Systems Inc. Cisco IOS XE 16.9.2 , Cisco Systems Inc. Cisco IOS XE 16.9.1a , Cisco Systems Inc. Cisco IOS XE 16.7.3 , Cisco Systems Inc. Cisco IOS XE 16.10.1 , Cisco Systems Inc. Cisco IOS XE 3.16.10S , Cisco Systems Inc. Cisco IOS XE 16.12.1 , Cisco Systems Inc. Cisco IOS XE 16.9.3h , Cisco Systems Inc. Cisco IOS XE 3.16.9S , Cisco Systems Inc. Cisco IOS XE 16.3.8 , Cisco Systems Inc. Cisco IOS XE 16.6.5 , Cisco Systems Inc. Cisco IOS XE 16.3.9 , Cisco Systems Inc. Cisco IOS XE 16.6.5a , Cisco Systems Inc. Cisco IOS XE 16.6.6 , Cisco Systems Inc. Cisco IOS XE 16.9.3 , Cisco Systems Inc. Cisco IOS XE 16.9.4 , Cisco Systems Inc. Cisco IOS XE 16.11.1 , Cisco Systems Inc. Cisco IOS XE 16.11.1a , Cisco Systems Inc. Cisco IOS XE 16.11.2 , Cisco Systems Inc. Cisco IOS XE 16.3.10 , Cisco Systems Inc. Cisco IOS XE 16.6.7 , Cisco Systems Inc. Cisco IOS XE 16.6.8 , Cisco Systems Inc. Cisco IOS XE 16.9.5 , Cisco Systems Inc. Cisco IOS XE 17.2.1 , Cisco Systems Inc. Cisco IOS XE 17.1.1 , Cisco Systems Inc. Cisco IOS XE 16.12.2 , Cisco Systems Inc. Cisco IOS XE 16.12.2a , Cisco Systems Inc. Cisco IOS XE 16.12.4 , Cisco Systems Inc. Cisco IOS XE 17.1.1a , Cisco Systems Inc. Cisco IOS XE 17.1.2 , Cisco Systems Inc. Cisco IOS XE 17.1.3 , Cisco Systems Inc. Cisco IOS XE 17.3.1 , Cisco Systems Inc. Cisco IOS XE 17.6.1 , Cisco Systems Inc. Cisco IOS XE 17.9.1 , Cisco Systems Inc. Cisco IOS XE 17.11.1 , Cisco Systems Inc. Cisco IOS XE 17.11.1a , Cisco Systems Inc. Cisco IOS XE 17.12.1 , Cisco Systems Inc. Cisco IOS XE 17.10.1 , Cisco Systems Inc. Cisco IOS XE 16.12.3 , Cisco Systems Inc. Cisco IOS XE 16.12.8 , Cisco Systems Inc. Cisco IOS XE 16.12.5 , Cisco Systems Inc. Cisco IOS XE 16.12.6 , Cisco Systems Inc. Cisco IOS XE 16.12.7 , Cisco Systems Inc. Cisco IOS XE 17.8.1 , Cisco Systems Inc. Cisco IOS XE 17.9.2 , Cisco Systems Inc. Cisco IOS XE 17.9.3 , Cisco Systems Inc. Cisco IOS XE 17.9.4 , Cisco Systems Inc. Cisco IOS XE 17.9.4a , Cisco Systems Inc. Cisco IOS XE 17.7.1 , Cisco Systems Inc. Cisco IOS XE 17.6.5a , Cisco Systems Inc. Cisco IOS XE 17.6.6a , Cisco Systems Inc. Cisco IOS XE 17.6.6 , Cisco Systems Inc. Cisco IOS XE 17.6.2 , Cisco Systems Inc. Cisco IOS XE 17.6.3 , Cisco Systems Inc. Cisco IOS XE 17.6.4 , Cisco Systems Inc. Cisco IOS XE 17.6.5 , Cisco Systems Inc. Cisco IOS XE 17.3.2 , Cisco Systems Inc. Cisco IOS XE 17.3.3 , Cisco Systems Inc. Cisco IOS XE 17.3.2a , Cisco Systems Inc. Cisco IOS XE 17.3.4 , Cisco Systems Inc. Cisco IOS XE 17.3.5 , Cisco Systems Inc. Cisco IOS XE 17.3.6 , Cisco Systems Inc. Cisco IOS XE 17.3.7 , Cisco Systems Inc. Cisco IOS XE 17.3.8 , Cisco Systems Inc. Cisco IOS XE 17.3.8a , Cisco Systems Inc. Cisco IOS XE 17.4.1 , Cisco Systems Inc. Cisco IOS XE 17.5.1 , Cisco Systems Inc. Cisco IOS XE 16.3.11 , Cisco Systems Inc. Cisco IOS XE 16.6.9 , Cisco Systems Inc. Cisco IOS XE 16.6.10 , Cisco Systems Inc. Cisco IOS XE 16.9.6 , Cisco Systems Inc. Cisco IOS XE 16.9.7 , Cisco Systems Inc. Cisco IOS XE 17.4.1c , Cisco Systems Inc. Cisco IOS XE 17.4.2 , Cisco Systems Inc. Cisco IOS XE 17.5.1b , Cisco Systems Inc. Cisco IOS XE 17.5.1c , Cisco Systems Inc. Cisco IOS XE 17.9.2a , Cisco Systems Inc. Cisco IOS XE 17.12.2 , Cisco Systems Inc. Cisco IOS XE 17.12.2a , Cisco Systems Inc. Cisco IOS XE 3.18.9SP , Cisco Systems Inc. Cisco IOS XE 3.18.8aSP , Cisco Systems Inc. Cisco IOS XE 3.18.7SP , Cisco Systems Inc. Cisco IOS XE 17.6.1y , Cisco Systems Inc. Cisco IOS XE 16.9.8 , Cisco Systems Inc. Cisco IOS XE 17.9.5a , Cisco Systems Inc. Cisco IOS XE 17.13.1 , Cisco Systems Inc. Cisco IOS XE 17.14.1 , Cisco Systems Inc. Cisco IOS XE 17.6.7 , Cisco Systems Inc. Cisco IOS XE 17.9.5 , Cisco Systems Inc. Cisco IOS XE 17.12.3 , Cisco Systems Inc. Cisco IOS XE 17.12.4 , Cisco Systems Inc. Cisco IOS XE 17.6.8 , Cisco Systems Inc. Cisco IOS XE 17.9.6 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Cisco ASR 903, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u044c\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u044c\u044e (CWE-762)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Cisco IOS XE \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 Cisco ASR 903 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043c\u044f\u0442\u044c\u044e. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-762",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,1)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,4)"
}

CISCO-SA-ASR903-RSP3-ARP-DOS-WMFZDVJZ

Vulnerability from csaf_cisco - Published: 2025-05-07 16:00 - Updated: 2025-05-07 16:00

Summary

Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers ARP Denial of Service Vulnerability

Notes

Summary: A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper memory management when Cisco IOS XE Software is processing Address Resolution Protocol (ARP) messages. An attacker could exploit this vulnerability by sending crafted ARP messages at a high rate over a period of time to an affected device. A successful exploit could allow the attacker to exhaust system resources, which eventually triggers a reload of the active route switch processor (RSP). If a redundant RSP is not present, the router reloads. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279"].

Vulnerable Products: This vulnerability affects Cisco ASR 903 Aggregation Services Routers with RSP3C if they are running a vulnerable release of Cisco IOS XE Software, regardless of device configuration. For information about which Cisco software releases are vulnerable, see the Fixed Software ["#fs"] section of this advisory.

Products Confirmed Not Vulnerable: Only products listed in the Vulnerable Products ["#vp"] section of this advisory are known to be affected by this vulnerability. Cisco has confirmed that this vulnerability does not affect the following Cisco products: IOS Software IOS XE Software if it is running on devices other than Cisco ASR 903 Aggregation Services Routers with RSP3C IOS XR Software Meraki products NX-OS Software

Indicators of Compromise: Customers can monitor the RSS memory usage of the uea_mgr process by viewing the output of the show process memory platform sorted | include RSS|uea_mgr command. Under normal circumstances, RSS memory usage of the uea_mgr process is around 1 GB (1,048,576 bytes), as shown in the following example: Router# show process memory platform sorted | include RSS|uea_mgr Pid Text Data Stack Dynamic RSS Name 2366 1525 948416 136 71960 948416 uea_mgr Router# If the RSS memory usage of the uea_mgr process goes well beyond 1,048,576 bytes, this could be an indication of exploitation of this vulnerability. Unexpected RSP reloads have been observed when the RSS memory usage of the uea_mgr process reached around 1.7 GB (1,782,580 bytes).

Workarounds: There are no workarounds that address this vulnerability. However, to avoid unexpected reloads as a result of successful exploitation of this vulnerability, customers can monitor the RSS memory usage of the uea_mgr process as described in the Indicators of Compromise ["#details"] section of this advisory. Customers can then schedule a planned reload of the RSP before the memory usage reaches a critical level. While this mitigation has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment.

Fixed Software: Cisco has released free software updates ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu"] that address the vulnerability described in this advisory. Customers with service contracts that entitle them to regular software updates should obtain security fixes through their usual update channels. Customers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license: https://www.cisco.com/c/en/us/products/end-user-license-agreement.html ["https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"] Additionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades. The Cisco Support and Downloads page ["https://www.cisco.com/c/en/us/support/index.html"] on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool. When considering software upgrades ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page ["https://www.cisco.com/go/psirt"], to determine exposure and a complete upgrade solution. In all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers. Customers Without Service Contracts Customers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html ["https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"] Customers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade. Cisco IOS and IOS XE Software To help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (“First Fixed”). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (“Combined First Fixed”). To use the tool, go to the Cisco Software Checker ["https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"] page and follow the instructions. Alternatively, use the following form to determine whether a release is affected by any Cisco Security Advisory. To use the form, follow these steps: Choose which advisories the tool will search—only this advisory, only advisories with a Critical or High Security Impact Rating (SIR) ["https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"], or all advisories. Enter a release number—for example, 15.9(3)M2 or 17.3.3. Click Check. Only this advisory All Critical and High advisories All advisories

Vulnerability Policy: To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy ["http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.

Exploitation and Public Announcements: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Source: This vulnerability was found during the resolution of a Cisco TAC support case.

Legal Disclaimer: THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME. A standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.

CVE-2025-20189

7.4 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected products

Known affected 161 products

Product	Version	Remediation
3.17.0S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.17.1S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.1.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.1.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.0aS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.1aS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.2aS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.2.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.4.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.1.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.17.2S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.2.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.4.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.5.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.3aS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.4S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.0S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.1S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.2S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.0SP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.7.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.8.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.1SP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.4bS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.5S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.17.3S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.1gSP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.1bSP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.6S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.2SP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.1hSP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.5aS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.5.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.10.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.3S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.2aSP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.5.1b Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.1iSP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.17.4S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.11.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.4S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.3SP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.7S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.5.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.4SP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.6bS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.5b Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.4.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.5.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.7bS Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.8.1b Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.7.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.5SP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.8.1c Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.8S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.7 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.1b Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.7.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.9S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.1.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.6SP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.8 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.2.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.5a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.11.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.3h Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.16.10S Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.11.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.7 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.9 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.4.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.5.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.7SP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.2a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.1.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.8 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.10 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.8 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.1.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.7.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.8aSP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.10.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.4.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.8.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.3.11 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
3.18.9SP Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.2a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.7 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.1.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.9 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.9.8 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.4.1c Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.6.10 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.7 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.1y Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.11.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.12.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.5.1b Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.7 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.2a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.5.1c Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.11.1a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.13.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.14.1 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.8 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.5 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.12.2 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.4a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.3.8a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.6a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.5a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.7 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.12.3 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.12.2a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.5a Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.12.4 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.6.8 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
17.9.6 Cisco / Cisco IOS XE Software	—	Vendor Fix fix
16.12.14 Cisco / Cisco IOS XE Software	—	Vendor Fix fix

References

12 references

URL	Category
https://sec.cloudapps.cisco.com/security/center/c…	self
https://sec.cloudapps.cisco.com/security/center/v…	external
https://sec.cloudapps.cisco.com/security/center/r…	external
https://sec.cloudapps.cisco.com/security/center/r…	external
https://www.cisco.com/c/en/us/products/end-user-l…	external
https://www.cisco.com/c/en/us/support/index.html	external
https://sec.cloudapps.cisco.com/security/center/r…	external
https://www.cisco.com/go/psirt	external
https://www.cisco.com/c/en/us/support/web/tsd-cis…	external
https://sec.cloudapps.cisco.com/security/center/s…	external
https://sec.cloudapps.cisco.com/security/center/r…	external
http://www.cisco.com/web/about/security/psirt/sec…	external

Acknowledgments

JSON

To clipboard

{
  "document": {
    "acknowledgments": [
      {
        "summary": "This vulnerability was found during the resolution of a Cisco TAC support case."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "notes": [
      {
        "category": "summary",
        "text": "A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition.\r\n\r\nThis vulnerability is due to improper memory management when Cisco IOS XE Software is processing Address Resolution Protocol (ARP) messages. An attacker could exploit this vulnerability by sending crafted ARP messages at a high rate over a period of time to an affected device. A successful exploit could allow the attacker to exhaust system resources, which eventually triggers a reload of the active route switch processor (RSP). If a redundant RSP is not present, the router reloads.\r\n\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.\r\n\r\n\r\n\r\nThis advisory is part of the May 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication [\"https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279\"].",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "This vulnerability affects Cisco ASR 903 Aggregation Services Routers with RSP3C if they are running a vulnerable release of Cisco IOS XE Software, regardless of device configuration.\r\n\r\nFor information about which Cisco software releases are vulnerable, see the Fixed Software [\"#fs\"] section of this advisory.",
        "title": "Vulnerable Products"
      },
      {
        "category": "general",
        "text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by this vulnerability.\r\n\r\nCisco has confirmed that this vulnerability does not affect the following Cisco products:\r\n\r\nIOS Software\r\nIOS XE Software if it is running on devices other than Cisco ASR 903 Aggregation Services Routers with RSP3C\r\nIOS XR Software\r\nMeraki products\r\nNX-OS Software",
        "title": "Products Confirmed Not Vulnerable"
      },
      {
        "category": "general",
        "text": "Customers can monitor the RSS memory usage of the uea_mgr process by viewing the output of the show process memory platform sorted | include RSS|uea_mgr command. Under normal circumstances, RSS memory usage of the uea_mgr process is around 1 GB (1,048,576 bytes), as shown in the following example:\r\n\r\n\r\nRouter# show process memory platform sorted | include RSS|uea_mgr\r\n   Pid    Text      Data   Stack   Dynamic       RSS              Name\r\n  2366    1525    948416     136     71960    948416           uea_mgr\r\nRouter#\r\n\r\nIf the RSS memory usage of the uea_mgr process goes well beyond 1,048,576 bytes, this could be an indication of exploitation of this vulnerability. Unexpected RSP reloads have been observed when the RSS memory usage of the uea_mgr process reached around 1.7 GB (1,782,580 bytes).",
        "title": "Indicators of Compromise"
      },
      {
        "category": "general",
        "text": "There are no workarounds that address this vulnerability.\r\n\r\nHowever, to avoid unexpected reloads as a result of successful exploitation of this vulnerability, customers can monitor the RSS memory usage of the uea_mgr process as described in the Indicators of Compromise [\"#details\"] section of this advisory. Customers can then schedule a planned reload of the RSP before the memory usage reaches a critical level.\r\n\r\nWhile this mitigation has been deployed and was proven successful in a test environment, customers should determine the applicability and effectiveness in their own environment and under their own use conditions. Customers should be aware that any workaround or mitigation that is implemented may negatively impact the functionality or performance of their network based on intrinsic customer deployment scenarios and limitations. Customers should not deploy any workarounds or mitigations before first evaluating the applicability to their own environment and any impact to such environment.",
        "title": "Workarounds"
      },
      {
        "category": "general",
        "text": "Cisco has released free software updates [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu\"] that address the vulnerability described in this advisory. Customers with service contracts that entitle them to regular software updates should obtain security fixes through their usual update channels.\r\n\r\nCustomers may only install and expect support for software versions and feature sets for which they have purchased a license. By installing, downloading, accessing, or otherwise using such software upgrades, customers agree to follow the terms of the Cisco software license:\r\nhttps://www.cisco.com/c/en/us/products/end-user-license-agreement.html [\"https://www.cisco.com/c/en/us/products/end-user-license-agreement.html\"]\r\n\r\nAdditionally, customers may only download software for which they have a valid license, procured from Cisco directly, or through a Cisco authorized reseller or partner. In most cases this will be a maintenance upgrade to software that was previously purchased. Free security software updates do not entitle customers to a new software license, additional software feature sets, or major revision upgrades.\r\n\r\nThe Cisco Support and Downloads page [\"https://www.cisco.com/c/en/us/support/index.html\"] on Cisco.com provides information about licensing and downloads. This page can also display customer device support coverage for customers who use the My Devices tool.\r\n\r\nWhen considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page [\"https://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers.\r\n  Customers Without Service Contracts\r\nCustomers who purchase directly from Cisco but do not hold a Cisco service contract and customers who make purchases through third-party vendors but are unsuccessful in obtaining fixed software through their point of sale should obtain upgrades by contacting the Cisco TAC: https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html [\"https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html\"]\r\n\r\nCustomers should have the product serial number available and be prepared to provide the URL of this advisory as evidence of entitlement to a free upgrade.\r\n        Cisco IOS and IOS XE Software\r\nTo help customers determine their exposure to vulnerabilities in Cisco IOS and IOS XE Software, Cisco provides the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"]. This tool identifies any Cisco security advisories that impact a specific software release and the earliest release that fixes the vulnerabilities that are described in each advisory (\u201cFirst Fixed\u201d). If applicable, the tool also returns the earliest release that fixes all the vulnerabilities that are described in all the advisories that the Software Checker identifies (\u201cCombined First Fixed\u201d).\r\n\r\nTo use the tool, go to the Cisco Software Checker [\"https://sec.cloudapps.cisco.com/security/center/softwarechecker.x\"] page and follow the instructions. Alternatively, use the following form to determine whether a release is affected by any Cisco Security Advisory. To use the form, follow these steps:\r\n\r\nChoose which advisories the tool will search\u2014only this advisory, only advisories with a Critical or High Security Impact Rating (SIR) [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr\"], or all advisories.\r\nEnter a release number\u2014for example, 15.9(3)M2 or 17.3.3.\r\nClick Check.\r\n\r\n       Only this advisory  All Critical and High advisories  All advisories",
        "title": "Fixed Software"
      },
      {
        "category": "general",
        "text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco.",
        "title": "Vulnerability Policy"
      },
      {
        "category": "general",
        "text": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.",
        "title": "Exploitation and Public Announcements"
      },
      {
        "category": "general",
        "text": "This vulnerability was found during the resolution of a Cisco TAC support case.",
        "title": "Source"
      },
      {
        "category": "legal_disclaimer",
        "text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products.",
        "title": "Legal Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@cisco.com",
      "issuing_authority": "Cisco PSIRT",
      "name": "Cisco",
      "namespace": "https://wwww.cisco.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers ARP Denial of Service Vulnerability",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
      },
      {
        "category": "external",
        "summary": "Cisco Event Response: May 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication",
        "url": "https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75279"
      },
      {
        "category": "external",
        "summary": "Cisco Security Vulnerability Policy",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html"
      },
      {
        "category": "external",
        "summary": "free software updates",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#ssu"
      },
      {
        "category": "external",
        "summary": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html",
        "url": "https://www.cisco.com/c/en/us/products/end-user-license-agreement.html"
      },
      {
        "category": "external",
        "summary": "Cisco Support and Downloads page",
        "url": "https://www.cisco.com/c/en/us/support/index.html"
      },
      {
        "category": "external",
        "summary": "considering software upgrades",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisories page",
        "url": "https://www.cisco.com/go/psirt"
      },
      {
        "category": "external",
        "summary": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html",
        "url": "https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.html"
      },
      {
        "category": "external",
        "summary": "Cisco Software Checker",
        "url": "https://sec.cloudapps.cisco.com/security/center/softwarechecker.x"
      },
      {
        "category": "external",
        "summary": "Security Impact Rating (SIR)",
        "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#asr"
      },
      {
        "category": "external",
        "summary": "Security Vulnerability Policy",
        "url": "http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html"
      }
    ],
    "title": "Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers ARP Denial of Service Vulnerability",
    "tracking": {
      "current_release_date": "2025-05-07T16:00:00+00:00",
      "generator": {
        "date": "2025-05-07T15:53:39+00:00",
        "engine": {
          "name": "TVCE"
        }
      },
      "id": "cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ",
      "initial_release_date": "2025-05-07T16:00:00+00:00",
      "revision_history": [
        {
          "date": "2025-05-07T15:52:53+00:00",
          "number": "1.0.0",
          "summary": "Initial public release."
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.16.0aS",
                    "product": {
                      "name": "3.16.0aS",
                      "product_id": "CSAFPID-213476"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.1aS",
                    "product": {
                      "name": "3.16.1aS",
                      "product_id": "CSAFPID-213477"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.2aS",
                    "product": {
                      "name": "3.16.2aS",
                      "product_id": "CSAFPID-213635"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.3aS",
                    "product": {
                      "name": "3.16.3aS",
                      "product_id": "CSAFPID-217266"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.4S",
                    "product": {
                      "name": "3.16.4S",
                      "product_id": "CSAFPID-217267"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.4bS",
                    "product": {
                      "name": "3.16.4bS",
                      "product_id": "CSAFPID-222257"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.5S",
                    "product": {
                      "name": "3.16.5S",
                      "product_id": "CSAFPID-222694"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.6S",
                    "product": {
                      "name": "3.16.6S",
                      "product_id": "CSAFPID-225099"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.5aS",
                    "product": {
                      "name": "3.16.5aS",
                      "product_id": "CSAFPID-225466"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.7S",
                    "product": {
                      "name": "3.16.7S",
                      "product_id": "CSAFPID-228690"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.6bS",
                    "product": {
                      "name": "3.16.6bS",
                      "product_id": "CSAFPID-230303"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.7bS",
                    "product": {
                      "name": "3.16.7bS",
                      "product_id": "CSAFPID-233447"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.8S",
                    "product": {
                      "name": "3.16.8S",
                      "product_id": "CSAFPID-238937"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.9S",
                    "product": {
                      "name": "3.16.9S",
                      "product_id": "CSAFPID-244912"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.16.10S",
                    "product": {
                      "name": "3.16.10S",
                      "product_id": "CSAFPID-258406"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.16S"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.17.0S",
                    "product": {
                      "name": "3.17.0S",
                      "product_id": "CSAFPID-212411"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.17.1S",
                    "product": {
                      "name": "3.17.1S",
                      "product_id": "CSAFPID-212412"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.17.2S",
                    "product": {
                      "name": "3.17.2S",
                      "product_id": "CSAFPID-217234"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.17.3S",
                    "product": {
                      "name": "3.17.3S",
                      "product_id": "CSAFPID-222942"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.17.4S",
                    "product": {
                      "name": "3.17.4S",
                      "product_id": "CSAFPID-227556"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.17S"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.1.1",
                    "product": {
                      "name": "16.1.1",
                      "product_id": "CSAFPID-212436"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.1.2",
                    "product": {
                      "name": "16.1.2",
                      "product_id": "CSAFPID-213100"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.1.3",
                    "product": {
                      "name": "16.1.3",
                      "product_id": "CSAFPID-214993"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.1"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.2.1",
                    "product": {
                      "name": "16.2.1",
                      "product_id": "CSAFPID-213809"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.2.2",
                    "product": {
                      "name": "16.2.2",
                      "product_id": "CSAFPID-217253"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.2"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.3.1",
                    "product": {
                      "name": "16.3.1",
                      "product_id": "CSAFPID-213960"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.2",
                    "product": {
                      "name": "16.3.2",
                      "product_id": "CSAFPID-217255"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.3",
                    "product": {
                      "name": "16.3.3",
                      "product_id": "CSAFPID-217256"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.1a",
                    "product": {
                      "name": "16.3.1a",
                      "product_id": "CSAFPID-220802"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.4",
                    "product": {
                      "name": "16.3.4",
                      "product_id": "CSAFPID-222711"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.5",
                    "product": {
                      "name": "16.3.5",
                      "product_id": "CSAFPID-229124"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.5b",
                    "product": {
                      "name": "16.3.5b",
                      "product_id": "CSAFPID-231187"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.6",
                    "product": {
                      "name": "16.3.6",
                      "product_id": "CSAFPID-231667"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.7",
                    "product": {
                      "name": "16.3.7",
                      "product_id": "CSAFPID-239264"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.8",
                    "product": {
                      "name": "16.3.8",
                      "product_id": "CSAFPID-251165"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.9",
                    "product": {
                      "name": "16.3.9",
                      "product_id": "CSAFPID-262389"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.10",
                    "product": {
                      "name": "16.3.10",
                      "product_id": "CSAFPID-273563"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.3.11",
                    "product": {
                      "name": "16.3.11",
                      "product_id": "CSAFPID-278402"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.3"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.4.1",
                    "product": {
                      "name": "16.4.1",
                      "product_id": "CSAFPID-214051"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.4.2",
                    "product": {
                      "name": "16.4.2",
                      "product_id": "CSAFPID-217257"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.4.3",
                    "product": {
                      "name": "16.4.3",
                      "product_id": "CSAFPID-231390"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.4"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.5.1",
                    "product": {
                      "name": "16.5.1",
                      "product_id": "CSAFPID-217259"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.5.1a",
                    "product": {
                      "name": "16.5.1a",
                      "product_id": "CSAFPID-225784"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.5.1b",
                    "product": {
                      "name": "16.5.1b",
                      "product_id": "CSAFPID-226330"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.5.2",
                    "product": {
                      "name": "16.5.2",
                      "product_id": "CSAFPID-229187"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.5.3",
                    "product": {
                      "name": "16.5.3",
                      "product_id": "CSAFPID-232461"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.5"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.18.0S",
                    "product": {
                      "name": "3.18.0S",
                      "product_id": "CSAFPID-217271"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.1S",
                    "product": {
                      "name": "3.18.1S",
                      "product_id": "CSAFPID-217272"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.2S",
                    "product": {
                      "name": "3.18.2S",
                      "product_id": "CSAFPID-217273"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.3S",
                    "product": {
                      "name": "3.18.3S",
                      "product_id": "CSAFPID-226078"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.4S",
                    "product": {
                      "name": "3.18.4S",
                      "product_id": "CSAFPID-228193"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.18S"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "3.18.0SP",
                    "product": {
                      "name": "3.18.0SP",
                      "product_id": "CSAFPID-217276"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.1SP",
                    "product": {
                      "name": "3.18.1SP",
                      "product_id": "CSAFPID-220517"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.1gSP",
                    "product": {
                      "name": "3.18.1gSP",
                      "product_id": "CSAFPID-223019"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.1bSP",
                    "product": {
                      "name": "3.18.1bSP",
                      "product_id": "CSAFPID-223241"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.2SP",
                    "product": {
                      "name": "3.18.2SP",
                      "product_id": "CSAFPID-225168"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.1hSP",
                    "product": {
                      "name": "3.18.1hSP",
                      "product_id": "CSAFPID-225359"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.2aSP",
                    "product": {
                      "name": "3.18.2aSP",
                      "product_id": "CSAFPID-226160"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.1iSP",
                    "product": {
                      "name": "3.18.1iSP",
                      "product_id": "CSAFPID-226354"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.3SP",
                    "product": {
                      "name": "3.18.3SP",
                      "product_id": "CSAFPID-228194"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.4SP",
                    "product": {
                      "name": "3.18.4SP",
                      "product_id": "CSAFPID-230301"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.5SP",
                    "product": {
                      "name": "3.18.5SP",
                      "product_id": "CSAFPID-237332"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.6SP",
                    "product": {
                      "name": "3.18.6SP",
                      "product_id": "CSAFPID-246386"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.7SP",
                    "product": {
                      "name": "3.18.7SP",
                      "product_id": "CSAFPID-264488"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.8aSP",
                    "product": {
                      "name": "3.18.8aSP",
                      "product_id": "CSAFPID-277904"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "3.18.9SP",
                    "product": {
                      "name": "3.18.9SP",
                      "product_id": "CSAFPID-278780"
                    }
                  }
                ],
                "category": "product_version",
                "name": "3.18SP"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.6.1",
                    "product": {
                      "name": "16.6.1",
                      "product_id": "CSAFPID-218901"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.2",
                    "product": {
                      "name": "16.6.2",
                      "product_id": "CSAFPID-228706"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.3",
                    "product": {
                      "name": "16.6.3",
                      "product_id": "CSAFPID-231682"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.4",
                    "product": {
                      "name": "16.6.4",
                      "product_id": "CSAFPID-233155"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.5",
                    "product": {
                      "name": "16.6.5",
                      "product_id": "CSAFPID-241736"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.5a",
                    "product": {
                      "name": "16.6.5a",
                      "product_id": "CSAFPID-252235"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.6",
                    "product": {
                      "name": "16.6.6",
                      "product_id": "CSAFPID-252914"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.7",
                    "product": {
                      "name": "16.6.7",
                      "product_id": "CSAFPID-261241"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.8",
                    "product": {
                      "name": "16.6.8",
                      "product_id": "CSAFPID-277148"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.9",
                    "product": {
                      "name": "16.6.9",
                      "product_id": "CSAFPID-280801"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.6.10",
                    "product": {
                      "name": "16.6.10",
                      "product_id": "CSAFPID-283835"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.6"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.7.1",
                    "product": {
                      "name": "16.7.1",
                      "product_id": "CSAFPID-218903"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.7.2",
                    "product": {
                      "name": "16.7.2",
                      "product_id": "CSAFPID-236837"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.7.3",
                    "product": {
                      "name": "16.7.3",
                      "product_id": "CSAFPID-244070"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.7"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.8.1",
                    "product": {
                      "name": "16.8.1",
                      "product_id": "CSAFPID-218905"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.8.1b",
                    "product": {
                      "name": "16.8.1b",
                      "product_id": "CSAFPID-235858"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.8.1c",
                    "product": {
                      "name": "16.8.1c",
                      "product_id": "CSAFPID-237460"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.8"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.9.1",
                    "product": {
                      "name": "16.9.1",
                      "product_id": "CSAFPID-225856"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.2",
                    "product": {
                      "name": "16.9.2",
                      "product_id": "CSAFPID-232008"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.1a",
                    "product": {
                      "name": "16.9.1a",
                      "product_id": "CSAFPID-242308"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.1b",
                    "product": {
                      "name": "16.9.1b",
                      "product_id": "CSAFPID-243362"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.3",
                    "product": {
                      "name": "16.9.3",
                      "product_id": "CSAFPID-251075"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.3h",
                    "product": {
                      "name": "16.9.3h",
                      "product_id": "CSAFPID-258229"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.4",
                    "product": {
                      "name": "16.9.4",
                      "product_id": "CSAFPID-262390"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.5",
                    "product": {
                      "name": "16.9.5",
                      "product_id": "CSAFPID-271798"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.6",
                    "product": {
                      "name": "16.9.6",
                      "product_id": "CSAFPID-277945"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.7",
                    "product": {
                      "name": "16.9.7",
                      "product_id": "CSAFPID-280651"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.9.8",
                    "product": {
                      "name": "16.9.8",
                      "product_id": "CSAFPID-280938"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.9"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.10.1",
                    "product": {
                      "name": "16.10.1",
                      "product_id": "CSAFPID-225858"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.10"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.11.1",
                    "product": {
                      "name": "16.11.1",
                      "product_id": "CSAFPID-227918"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.11.1a",
                    "product": {
                      "name": "16.11.1a",
                      "product_id": "CSAFPID-252271"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.11.2",
                    "product": {
                      "name": "16.11.2",
                      "product_id": "CSAFPID-261240"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.11"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "16.12.1",
                    "product": {
                      "name": "16.12.1",
                      "product_id": "CSAFPID-227920"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.2",
                    "product": {
                      "name": "16.12.2",
                      "product_id": "CSAFPID-267605"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.2a",
                    "product": {
                      "name": "16.12.2a",
                      "product_id": "CSAFPID-272047"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.3",
                    "product": {
                      "name": "16.12.3",
                      "product_id": "CSAFPID-273445"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.8",
                    "product": {
                      "name": "16.12.8",
                      "product_id": "CSAFPID-273448"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.4",
                    "product": {
                      "name": "16.12.4",
                      "product_id": "CSAFPID-277147"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.5",
                    "product": {
                      "name": "16.12.5",
                      "product_id": "CSAFPID-280463"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.6",
                    "product": {
                      "name": "16.12.6",
                      "product_id": "CSAFPID-280937"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.7",
                    "product": {
                      "name": "16.12.7",
                      "product_id": "CSAFPID-286031"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "16.12.14",
                    "product": {
                      "name": "16.12.14",
                      "product_id": "CSAFPID-305303"
                    }
                  }
                ],
                "category": "product_version",
                "name": "16.12"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.1.1",
                    "product": {
                      "name": "17.1.1",
                      "product_id": "CSAFPID-245377"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.1.1a",
                    "product": {
                      "name": "17.1.1a",
                      "product_id": "CSAFPID-272932"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.1.2",
                    "product": {
                      "name": "17.1.2",
                      "product_id": "CSAFPID-277338"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.1.3",
                    "product": {
                      "name": "17.1.3",
                      "product_id": "CSAFPID-280652"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.1"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.2.1",
                    "product": {
                      "name": "17.2.1",
                      "product_id": "CSAFPID-251225"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.2"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.3.1",
                    "product": {
                      "name": "17.3.1",
                      "product_id": "CSAFPID-254712"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.2",
                    "product": {
                      "name": "17.3.2",
                      "product_id": "CSAFPID-277099"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.3",
                    "product": {
                      "name": "17.3.3",
                      "product_id": "CSAFPID-278019"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.2a",
                    "product": {
                      "name": "17.3.2a",
                      "product_id": "CSAFPID-280555"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.4",
                    "product": {
                      "name": "17.3.4",
                      "product_id": "CSAFPID-282028"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.5",
                    "product": {
                      "name": "17.3.5",
                      "product_id": "CSAFPID-282115"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.6",
                    "product": {
                      "name": "17.3.6",
                      "product_id": "CSAFPID-284331"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.7",
                    "product": {
                      "name": "17.3.7",
                      "product_id": "CSAFPID-290671"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.8",
                    "product": {
                      "name": "17.3.8",
                      "product_id": "CSAFPID-295398"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.3.8a",
                    "product": {
                      "name": "17.3.8a",
                      "product_id": "CSAFPID-300847"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.3"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.4.1",
                    "product": {
                      "name": "17.4.1",
                      "product_id": "CSAFPID-262588"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.4.2",
                    "product": {
                      "name": "17.4.2",
                      "product_id": "CSAFPID-278020"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.4.1c",
                    "product": {
                      "name": "17.4.1c",
                      "product_id": "CSAFPID-282116"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.4"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.5.1",
                    "product": {
                      "name": "17.5.1",
                      "product_id": "CSAFPID-262590"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.5.1b",
                    "product": {
                      "name": "17.5.1b",
                      "product_id": "CSAFPID-290596"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.5.1c",
                    "product": {
                      "name": "17.5.1c",
                      "product_id": "CSAFPID-292698"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.5"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.6.1",
                    "product": {
                      "name": "17.6.1",
                      "product_id": "CSAFPID-262592"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.2",
                    "product": {
                      "name": "17.6.2",
                      "product_id": "CSAFPID-282117"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.3",
                    "product": {
                      "name": "17.6.3",
                      "product_id": "CSAFPID-286409"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.1y",
                    "product": {
                      "name": "17.6.1y",
                      "product_id": "CSAFPID-286477"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.4",
                    "product": {
                      "name": "17.6.4",
                      "product_id": "CSAFPID-287087"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.5",
                    "product": {
                      "name": "17.6.5",
                      "product_id": "CSAFPID-290660"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.6",
                    "product": {
                      "name": "17.6.6",
                      "product_id": "CSAFPID-292656"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.6a",
                    "product": {
                      "name": "17.6.6a",
                      "product_id": "CSAFPID-300848"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.5a",
                    "product": {
                      "name": "17.6.5a",
                      "product_id": "CSAFPID-300850"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.7",
                    "product": {
                      "name": "17.6.7",
                      "product_id": "CSAFPID-300851"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.6.8",
                    "product": {
                      "name": "17.6.8",
                      "product_id": "CSAFPID-301722"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.6"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.7.1",
                    "product": {
                      "name": "17.7.1",
                      "product_id": "CSAFPID-277357"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.7"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.10.1",
                    "product": {
                      "name": "17.10.1",
                      "product_id": "CSAFPID-278018"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.10"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.8.1",
                    "product": {
                      "name": "17.8.1",
                      "product_id": "CSAFPID-278023"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.8"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.9.1",
                    "product": {
                      "name": "17.9.1",
                      "product_id": "CSAFPID-278025"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.2",
                    "product": {
                      "name": "17.9.2",
                      "product_id": "CSAFPID-288221"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.3",
                    "product": {
                      "name": "17.9.3",
                      "product_id": "CSAFPID-290674"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.2a",
                    "product": {
                      "name": "17.9.2a",
                      "product_id": "CSAFPID-290675"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.4",
                    "product": {
                      "name": "17.9.4",
                      "product_id": "CSAFPID-295412"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.5",
                    "product": {
                      "name": "17.9.5",
                      "product_id": "CSAFPID-300263"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.4a",
                    "product": {
                      "name": "17.9.4a",
                      "product_id": "CSAFPID-300845"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.5a",
                    "product": {
                      "name": "17.9.5a",
                      "product_id": "CSAFPID-301278"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.9.6",
                    "product": {
                      "name": "17.9.6",
                      "product_id": "CSAFPID-301723"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.9"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.11.1",
                    "product": {
                      "name": "17.11.1",
                      "product_id": "CSAFPID-286799"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.11.1a",
                    "product": {
                      "name": "17.11.1a",
                      "product_id": "CSAFPID-294838"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.11"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.12.1",
                    "product": {
                      "name": "17.12.1",
                      "product_id": "CSAFPID-286801"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.12.2",
                    "product": {
                      "name": "17.12.2",
                      "product_id": "CSAFPID-300834"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.12.3",
                    "product": {
                      "name": "17.12.3",
                      "product_id": "CSAFPID-300936"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.12.2a",
                    "product": {
                      "name": "17.12.2a",
                      "product_id": "CSAFPID-300948"
                    }
                  },
                  {
                    "category": "service_pack",
                    "name": "17.12.4",
                    "product": {
                      "name": "17.12.4",
                      "product_id": "CSAFPID-301716"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.12"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.13.1",
                    "product": {
                      "name": "17.13.1",
                      "product_id": "CSAFPID-295359"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.13"
              },
              {
                "branches": [
                  {
                    "category": "service_pack",
                    "name": "17.14.1",
                    "product": {
                      "name": "17.14.1",
                      "product_id": "CSAFPID-295361"
                    }
                  }
                ],
                "category": "product_version",
                "name": "17.14"
              }
            ],
            "category": "product_family",
            "name": "Cisco IOS XE Software"
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-20189",
      "ids": [
        {
          "system_name": "Cisco Bug ID",
          "text": "CSCwh55442"
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Complete.",
          "title": "Affected Product Comprehensiveness"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-212411",
          "CSAFPID-212412",
          "CSAFPID-212436",
          "CSAFPID-213100",
          "CSAFPID-213476",
          "CSAFPID-213477",
          "CSAFPID-213635",
          "CSAFPID-213809",
          "CSAFPID-213960",
          "CSAFPID-214051",
          "CSAFPID-214993",
          "CSAFPID-217234",
          "CSAFPID-217253",
          "CSAFPID-217255",
          "CSAFPID-217256",
          "CSAFPID-217257",
          "CSAFPID-217259",
          "CSAFPID-217266",
          "CSAFPID-217267",
          "CSAFPID-217271",
          "CSAFPID-217272",
          "CSAFPID-217273",
          "CSAFPID-217276",
          "CSAFPID-218901",
          "CSAFPID-218903",
          "CSAFPID-218905",
          "CSAFPID-220517",
          "CSAFPID-220802",
          "CSAFPID-222257",
          "CSAFPID-222694",
          "CSAFPID-222711",
          "CSAFPID-222942",
          "CSAFPID-223019",
          "CSAFPID-223241",
          "CSAFPID-225099",
          "CSAFPID-225168",
          "CSAFPID-225359",
          "CSAFPID-225466",
          "CSAFPID-225784",
          "CSAFPID-225856",
          "CSAFPID-225858",
          "CSAFPID-226078",
          "CSAFPID-226160",
          "CSAFPID-226330",
          "CSAFPID-226354",
          "CSAFPID-227556",
          "CSAFPID-227918",
          "CSAFPID-227920",
          "CSAFPID-228193",
          "CSAFPID-228194",
          "CSAFPID-228690",
          "CSAFPID-228706",
          "CSAFPID-229124",
          "CSAFPID-229187",
          "CSAFPID-230301",
          "CSAFPID-230303",
          "CSAFPID-231187",
          "CSAFPID-231390",
          "CSAFPID-231667",
          "CSAFPID-231682",
          "CSAFPID-232008",
          "CSAFPID-232461",
          "CSAFPID-233155",
          "CSAFPID-233447",
          "CSAFPID-235858",
          "CSAFPID-236837",
          "CSAFPID-237332",
          "CSAFPID-237460",
          "CSAFPID-238937",
          "CSAFPID-239264",
          "CSAFPID-241736",
          "CSAFPID-242308",
          "CSAFPID-243362",
          "CSAFPID-244070",
          "CSAFPID-244912",
          "CSAFPID-245377",
          "CSAFPID-246386",
          "CSAFPID-251075",
          "CSAFPID-251165",
          "CSAFPID-251225",
          "CSAFPID-252235",
          "CSAFPID-252271",
          "CSAFPID-252914",
          "CSAFPID-254712",
          "CSAFPID-258229",
          "CSAFPID-258406",
          "CSAFPID-261240",
          "CSAFPID-261241",
          "CSAFPID-262389",
          "CSAFPID-262390",
          "CSAFPID-262588",
          "CSAFPID-262590",
          "CSAFPID-262592",
          "CSAFPID-264488",
          "CSAFPID-267605",
          "CSAFPID-271798",
          "CSAFPID-272047",
          "CSAFPID-272932",
          "CSAFPID-273445",
          "CSAFPID-273448",
          "CSAFPID-273563",
          "CSAFPID-277099",
          "CSAFPID-277147",
          "CSAFPID-277148",
          "CSAFPID-277338",
          "CSAFPID-277357",
          "CSAFPID-277904",
          "CSAFPID-277945",
          "CSAFPID-278018",
          "CSAFPID-278019",
          "CSAFPID-278020",
          "CSAFPID-278023",
          "CSAFPID-278025",
          "CSAFPID-278402",
          "CSAFPID-278780",
          "CSAFPID-280463",
          "CSAFPID-280555",
          "CSAFPID-280651",
          "CSAFPID-280652",
          "CSAFPID-280801",
          "CSAFPID-280937",
          "CSAFPID-280938",
          "CSAFPID-282028",
          "CSAFPID-282115",
          "CSAFPID-282116",
          "CSAFPID-282117",
          "CSAFPID-283835",
          "CSAFPID-284331",
          "CSAFPID-286031",
          "CSAFPID-286409",
          "CSAFPID-286477",
          "CSAFPID-286799",
          "CSAFPID-286801",
          "CSAFPID-287087",
          "CSAFPID-288221",
          "CSAFPID-290596",
          "CSAFPID-290660",
          "CSAFPID-290671",
          "CSAFPID-290674",
          "CSAFPID-290675",
          "CSAFPID-292656",
          "CSAFPID-292698",
          "CSAFPID-294838",
          "CSAFPID-295359",
          "CSAFPID-295361",
          "CSAFPID-295398",
          "CSAFPID-295412",
          "CSAFPID-300263",
          "CSAFPID-300834",
          "CSAFPID-300845",
          "CSAFPID-300847",
          "CSAFPID-300848",
          "CSAFPID-300850",
          "CSAFPID-300851",
          "CSAFPID-300936",
          "CSAFPID-300948",
          "CSAFPID-301278",
          "CSAFPID-301716",
          "CSAFPID-301722",
          "CSAFPID-301723",
          "CSAFPID-305303"
        ]
      },
      "release_date": "2025-05-07T16:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Cisco has released software updates that address this vulnerability.",
          "product_ids": [
            "CSAFPID-212411",
            "CSAFPID-212412",
            "CSAFPID-212436",
            "CSAFPID-213100",
            "CSAFPID-213476",
            "CSAFPID-213477",
            "CSAFPID-213635",
            "CSAFPID-213809",
            "CSAFPID-213960",
            "CSAFPID-214051",
            "CSAFPID-214993",
            "CSAFPID-217234",
            "CSAFPID-217253",
            "CSAFPID-217255",
            "CSAFPID-217256",
            "CSAFPID-217257",
            "CSAFPID-217259",
            "CSAFPID-217266",
            "CSAFPID-217267",
            "CSAFPID-217271",
            "CSAFPID-217272",
            "CSAFPID-217273",
            "CSAFPID-217276",
            "CSAFPID-218901",
            "CSAFPID-218903",
            "CSAFPID-218905",
            "CSAFPID-220517",
            "CSAFPID-220802",
            "CSAFPID-222257",
            "CSAFPID-222694",
            "CSAFPID-222711",
            "CSAFPID-222942",
            "CSAFPID-223019",
            "CSAFPID-223241",
            "CSAFPID-225099",
            "CSAFPID-225168",
            "CSAFPID-225359",
            "CSAFPID-225466",
            "CSAFPID-225784",
            "CSAFPID-225856",
            "CSAFPID-225858",
            "CSAFPID-226078",
            "CSAFPID-226160",
            "CSAFPID-226330",
            "CSAFPID-226354",
            "CSAFPID-227556",
            "CSAFPID-227918",
            "CSAFPID-227920",
            "CSAFPID-228193",
            "CSAFPID-228194",
            "CSAFPID-228690",
            "CSAFPID-228706",
            "CSAFPID-229124",
            "CSAFPID-229187",
            "CSAFPID-230301",
            "CSAFPID-230303",
            "CSAFPID-231187",
            "CSAFPID-231390",
            "CSAFPID-231667",
            "CSAFPID-231682",
            "CSAFPID-232008",
            "CSAFPID-232461",
            "CSAFPID-233155",
            "CSAFPID-233447",
            "CSAFPID-235858",
            "CSAFPID-236837",
            "CSAFPID-237332",
            "CSAFPID-237460",
            "CSAFPID-238937",
            "CSAFPID-239264",
            "CSAFPID-241736",
            "CSAFPID-242308",
            "CSAFPID-243362",
            "CSAFPID-244070",
            "CSAFPID-244912",
            "CSAFPID-245377",
            "CSAFPID-246386",
            "CSAFPID-251075",
            "CSAFPID-251165",
            "CSAFPID-251225",
            "CSAFPID-252235",
            "CSAFPID-252271",
            "CSAFPID-252914",
            "CSAFPID-254712",
            "CSAFPID-258229",
            "CSAFPID-258406",
            "CSAFPID-261240",
            "CSAFPID-261241",
            "CSAFPID-262389",
            "CSAFPID-262390",
            "CSAFPID-262588",
            "CSAFPID-262590",
            "CSAFPID-262592",
            "CSAFPID-264488",
            "CSAFPID-267605",
            "CSAFPID-271798",
            "CSAFPID-272047",
            "CSAFPID-272932",
            "CSAFPID-273445",
            "CSAFPID-273448",
            "CSAFPID-273563",
            "CSAFPID-277099",
            "CSAFPID-277147",
            "CSAFPID-277148",
            "CSAFPID-277338",
            "CSAFPID-277357",
            "CSAFPID-277904",
            "CSAFPID-277945",
            "CSAFPID-278018",
            "CSAFPID-278019",
            "CSAFPID-278020",
            "CSAFPID-278023",
            "CSAFPID-278025",
            "CSAFPID-278402",
            "CSAFPID-278780",
            "CSAFPID-280463",
            "CSAFPID-280555",
            "CSAFPID-280651",
            "CSAFPID-280652",
            "CSAFPID-280801",
            "CSAFPID-280937",
            "CSAFPID-280938",
            "CSAFPID-282028",
            "CSAFPID-282115",
            "CSAFPID-282116",
            "CSAFPID-282117",
            "CSAFPID-283835",
            "CSAFPID-284331",
            "CSAFPID-286031",
            "CSAFPID-286409",
            "CSAFPID-286477",
            "CSAFPID-286799",
            "CSAFPID-286801",
            "CSAFPID-287087",
            "CSAFPID-288221",
            "CSAFPID-290596",
            "CSAFPID-290660",
            "CSAFPID-290671",
            "CSAFPID-290674",
            "CSAFPID-290675",
            "CSAFPID-292656",
            "CSAFPID-292698",
            "CSAFPID-294838",
            "CSAFPID-295359",
            "CSAFPID-295361",
            "CSAFPID-295398",
            "CSAFPID-295412",
            "CSAFPID-300263",
            "CSAFPID-300834",
            "CSAFPID-300845",
            "CSAFPID-300847",
            "CSAFPID-300848",
            "CSAFPID-300850",
            "CSAFPID-300851",
            "CSAFPID-300936",
            "CSAFPID-300948",
            "CSAFPID-301278",
            "CSAFPID-301716",
            "CSAFPID-301722",
            "CSAFPID-301723",
            "CSAFPID-305303"
          ],
          "url": "https://software.cisco.com"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-212411",
            "CSAFPID-212412",
            "CSAFPID-212436",
            "CSAFPID-213100",
            "CSAFPID-213476",
            "CSAFPID-213477",
            "CSAFPID-213635",
            "CSAFPID-213809",
            "CSAFPID-213960",
            "CSAFPID-214051",
            "CSAFPID-214993",
            "CSAFPID-217234",
            "CSAFPID-217253",
            "CSAFPID-217255",
            "CSAFPID-217256",
            "CSAFPID-217257",
            "CSAFPID-217259",
            "CSAFPID-217266",
            "CSAFPID-217267",
            "CSAFPID-217271",
            "CSAFPID-217272",
            "CSAFPID-217273",
            "CSAFPID-217276",
            "CSAFPID-218901",
            "CSAFPID-218903",
            "CSAFPID-218905",
            "CSAFPID-220517",
            "CSAFPID-220802",
            "CSAFPID-222257",
            "CSAFPID-222694",
            "CSAFPID-222711",
            "CSAFPID-222942",
            "CSAFPID-223019",
            "CSAFPID-223241",
            "CSAFPID-225099",
            "CSAFPID-225168",
            "CSAFPID-225359",
            "CSAFPID-225466",
            "CSAFPID-225784",
            "CSAFPID-225856",
            "CSAFPID-225858",
            "CSAFPID-226078",
            "CSAFPID-226160",
            "CSAFPID-226330",
            "CSAFPID-226354",
            "CSAFPID-227556",
            "CSAFPID-227918",
            "CSAFPID-227920",
            "CSAFPID-228193",
            "CSAFPID-228194",
            "CSAFPID-228690",
            "CSAFPID-228706",
            "CSAFPID-229124",
            "CSAFPID-229187",
            "CSAFPID-230301",
            "CSAFPID-230303",
            "CSAFPID-231187",
            "CSAFPID-231390",
            "CSAFPID-231667",
            "CSAFPID-231682",
            "CSAFPID-232008",
            "CSAFPID-232461",
            "CSAFPID-233155",
            "CSAFPID-233447",
            "CSAFPID-235858",
            "CSAFPID-236837",
            "CSAFPID-237332",
            "CSAFPID-237460",
            "CSAFPID-238937",
            "CSAFPID-239264",
            "CSAFPID-241736",
            "CSAFPID-242308",
            "CSAFPID-243362",
            "CSAFPID-244070",
            "CSAFPID-244912",
            "CSAFPID-245377",
            "CSAFPID-246386",
            "CSAFPID-251075",
            "CSAFPID-251165",
            "CSAFPID-251225",
            "CSAFPID-252235",
            "CSAFPID-252271",
            "CSAFPID-252914",
            "CSAFPID-254712",
            "CSAFPID-258229",
            "CSAFPID-258406",
            "CSAFPID-261240",
            "CSAFPID-261241",
            "CSAFPID-262389",
            "CSAFPID-262390",
            "CSAFPID-262588",
            "CSAFPID-262590",
            "CSAFPID-262592",
            "CSAFPID-264488",
            "CSAFPID-267605",
            "CSAFPID-271798",
            "CSAFPID-272047",
            "CSAFPID-272932",
            "CSAFPID-273445",
            "CSAFPID-273448",
            "CSAFPID-273563",
            "CSAFPID-277099",
            "CSAFPID-277147",
            "CSAFPID-277148",
            "CSAFPID-277338",
            "CSAFPID-277357",
            "CSAFPID-277904",
            "CSAFPID-277945",
            "CSAFPID-278018",
            "CSAFPID-278019",
            "CSAFPID-278020",
            "CSAFPID-278023",
            "CSAFPID-278025",
            "CSAFPID-278402",
            "CSAFPID-278780",
            "CSAFPID-280463",
            "CSAFPID-280555",
            "CSAFPID-280651",
            "CSAFPID-280652",
            "CSAFPID-280801",
            "CSAFPID-280937",
            "CSAFPID-280938",
            "CSAFPID-282028",
            "CSAFPID-282115",
            "CSAFPID-282116",
            "CSAFPID-282117",
            "CSAFPID-283835",
            "CSAFPID-284331",
            "CSAFPID-286031",
            "CSAFPID-286409",
            "CSAFPID-286477",
            "CSAFPID-286799",
            "CSAFPID-286801",
            "CSAFPID-287087",
            "CSAFPID-288221",
            "CSAFPID-290596",
            "CSAFPID-290660",
            "CSAFPID-290671",
            "CSAFPID-290674",
            "CSAFPID-290675",
            "CSAFPID-292656",
            "CSAFPID-292698",
            "CSAFPID-294838",
            "CSAFPID-295359",
            "CSAFPID-295361",
            "CSAFPID-295398",
            "CSAFPID-295412",
            "CSAFPID-300263",
            "CSAFPID-300834",
            "CSAFPID-300845",
            "CSAFPID-300847",
            "CSAFPID-300848",
            "CSAFPID-300850",
            "CSAFPID-300851",
            "CSAFPID-300936",
            "CSAFPID-300948",
            "CSAFPID-301278",
            "CSAFPID-301716",
            "CSAFPID-301722",
            "CSAFPID-301723",
            "CSAFPID-305303"
          ]
        }
      ],
      "title": "Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers ARP Denial of Service Vulnerability"
    }
  ]
}

FKIE_CVE-2025-20189

Vulnerability from fkie_nvd - Published: 2025-05-07 18:15 - Updated: 2025-08-05 14:36

Severity ?

7.4 (High) - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Summary

References

	URL	Tags
	psirt@cisco.com	https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ	Vendor Advisory

Impacted products

Vendor	Product	Version
cisco	ios_xe	3.16.0cs
cisco	ios_xe	3.16.0s
cisco	ios_xe	3.16.1as
cisco	ios_xe	3.16.1s
cisco	ios_xe	3.16.2as
cisco	ios_xe	3.16.2bs
cisco	ios_xe	3.16.2s
cisco	ios_xe	3.16.3as
cisco	ios_xe	3.16.3s
cisco	ios_xe	3.16.4as
cisco	ios_xe	3.16.4bs
cisco	ios_xe	3.16.4ds
cisco	ios_xe	3.16.4s
cisco	ios_xe	3.16.5s
cisco	ios_xe	3.16.6bs
cisco	ios_xe	3.16.6s
cisco	ios_xe	3.16.7as
cisco	ios_xe	3.16.7bs
cisco	ios_xe	3.16.7s
cisco	ios_xe	3.16.8s
cisco	ios_xe	3.16.9s
cisco	ios_xe	3.16.10s
cisco	ios_xe	3.17.0s
cisco	ios_xe	3.17.1as
cisco	ios_xe	3.17.1s
cisco	ios_xe	3.17.2s
cisco	ios_xe	3.17.3s
cisco	ios_xe	3.17.4s
cisco	ios_xe	3.18.0as
cisco	ios_xe	3.18.0s
cisco	ios_xe	3.18.0sp
cisco	ios_xe	3.18.1asp
cisco	ios_xe	3.18.1bsp
cisco	ios_xe	3.18.1csp
cisco	ios_xe	3.18.1s
cisco	ios_xe	3.18.1sp
cisco	ios_xe	3.18.2asp
cisco	ios_xe	3.18.2s
cisco	ios_xe	3.18.2sp
cisco	ios_xe	3.18.3asp
cisco	ios_xe	3.18.3bsp
cisco	ios_xe	3.18.3s
cisco	ios_xe	3.18.3sp
cisco	ios_xe	3.18.4s
cisco	ios_xe	3.18.4sp
cisco	ios_xe	3.18.5sp
cisco	ios_xe	3.18.6sp
cisco	ios_xe	3.18.7sp
cisco	ios_xe	3.18.8asp
cisco	ios_xe	3.18.9sp
cisco	ios_xe	16.1.1
cisco	ios_xe	16.1.2
cisco	ios_xe	16.1.3
cisco	ios_xe	16.2.1
cisco	ios_xe	16.2.2
cisco	ios_xe	16.3.1
cisco	ios_xe	16.3.1a
cisco	ios_xe	16.3.2
cisco	ios_xe	16.3.3
cisco	ios_xe	16.3.4
cisco	ios_xe	16.3.5
cisco	ios_xe	16.3.5b
cisco	ios_xe	16.3.6
cisco	ios_xe	16.3.7
cisco	ios_xe	16.3.8
cisco	ios_xe	16.3.9
cisco	ios_xe	16.3.10
cisco	ios_xe	16.3.11
cisco	ios_xe	16.4.1
cisco	ios_xe	16.4.2
cisco	ios_xe	16.4.3
cisco	ios_xe	16.5.1
cisco	ios_xe	16.5.1a
cisco	ios_xe	16.5.1b
cisco	ios_xe	16.5.2
cisco	ios_xe	16.5.3
cisco	ios_xe	16.6.1
cisco	ios_xe	16.6.2
cisco	ios_xe	16.6.3
cisco	ios_xe	16.6.4
cisco	ios_xe	16.6.4a
cisco	ios_xe	16.6.5
cisco	ios_xe	16.6.5a
cisco	ios_xe	16.6.6
cisco	ios_xe	16.6.7
cisco	ios_xe	16.6.8
cisco	ios_xe	16.6.9
cisco	ios_xe	16.6.10
cisco	ios_xe	16.7.1
cisco	ios_xe	16.7.1a
cisco	ios_xe	16.7.1b
cisco	ios_xe	16.7.2
cisco	ios_xe	16.7.3
cisco	ios_xe	16.7.4
cisco	ios_xe	16.8.1
cisco	ios_xe	16.8.1a
cisco	ios_xe	16.8.1b
cisco	ios_xe	16.8.1c
cisco	ios_xe	16.8.1d
cisco	ios_xe	16.8.1e
cisco	ios_xe	16.8.1s
cisco	ios_xe	16.8.2
cisco	ios_xe	16.8.3
cisco	ios_xe	16.9.1
cisco	ios_xe	16.9.1a
cisco	ios_xe	16.9.1b
cisco	ios_xe	16.9.1s
cisco	ios_xe	16.9.2
cisco	ios_xe	16.9.3
cisco	ios_xe	16.9.3a
cisco	ios_xe	16.9.4
cisco	ios_xe	16.9.5
cisco	ios_xe	16.9.5f
cisco	ios_xe	16.9.6
cisco	ios_xe	16.9.7
cisco	ios_xe	16.9.8
cisco	ios_xe	16.10.1
cisco	ios_xe	16.10.1a
cisco	ios_xe	16.10.1b
cisco	ios_xe	16.10.1c
cisco	ios_xe	16.10.1d
cisco	ios_xe	16.10.1e
cisco	ios_xe	16.10.1f
cisco	ios_xe	16.10.1g
cisco	ios_xe	16.10.1s
cisco	ios_xe	16.10.2
cisco	ios_xe	16.10.3
cisco	ios_xe	16.11.1
cisco	ios_xe	16.11.1a
cisco	ios_xe	16.11.1b
cisco	ios_xe	16.11.1s
cisco	ios_xe	16.11.2
cisco	ios_xe	16.12.1
cisco	ios_xe	16.12.1a
cisco	ios_xe	16.12.1c
cisco	ios_xe	16.12.1s
cisco	ios_xe	16.12.1t
cisco	ios_xe	16.12.1w
cisco	ios_xe	16.12.1x
cisco	ios_xe	16.12.1y
cisco	ios_xe	16.12.1z1
cisco	ios_xe	16.12.1z2
cisco	ios_xe	16.12.2
cisco	ios_xe	16.12.2a
cisco	ios_xe	16.12.2s
cisco	ios_xe	16.12.3
cisco	ios_xe	16.12.3a
cisco	ios_xe	16.12.3s
cisco	ios_xe	16.12.4
cisco	ios_xe	16.12.4a
cisco	ios_xe	16.12.5
cisco	ios_xe	16.12.5a
cisco	ios_xe	16.12.5b
cisco	ios_xe	16.12.6
cisco	ios_xe	16.12.6a
cisco	ios_xe	16.12.7
cisco	ios_xe	16.12.8
cisco	ios_xe	16.12.9
cisco	ios_xe	16.12.10
cisco	ios_xe	16.12.10a
cisco	ios_xe	16.12.11
cisco	ios_xe	16.12.12
cisco	ios_xe	16.12.13
cisco	ios_xe	17.1.1
cisco	ios_xe	17.1.1a
cisco	ios_xe	17.1.1s
cisco	ios_xe	17.1.1t
cisco	ios_xe	17.1.3
cisco	ios_xe	17.2.1
cisco	ios_xe	17.2.1a
cisco	ios_xe	17.2.1r
cisco	ios_xe	17.2.1v
cisco	ios_xe	17.2.2
cisco	ios_xe	17.2.3
cisco	ios_xe	17.3.1
cisco	ios_xe	17.3.1a
cisco	ios_xe	17.3.1w
cisco	ios_xe	17.3.1x
cisco	ios_xe	17.3.1z
cisco	ios_xe	17.3.2
cisco	ios_xe	17.3.2a
cisco	ios_xe	17.3.3
cisco	ios_xe	17.3.4
cisco	ios_xe	17.3.4a
cisco	ios_xe	17.3.4b
cisco	ios_xe	17.3.4c
cisco	ios_xe	17.3.5
cisco	ios_xe	17.3.5a
cisco	ios_xe	17.3.5b
cisco	ios_xe	17.3.6
cisco	ios_xe	17.3.7
cisco	ios_xe	17.3.8
cisco	ios_xe	17.3.8a
cisco	ios_xe	17.4.1
cisco	ios_xe	17.4.1a
cisco	ios_xe	17.4.1b
cisco	ios_xe	17.4.2
cisco	ios_xe	17.4.2a
cisco	ios_xe	17.5.1
cisco	ios_xe	17.5.1a
cisco	ios_xe	17.6.1
cisco	ios_xe	17.6.1a
cisco	ios_xe	17.6.1w
cisco	ios_xe	17.6.1x
cisco	ios_xe	17.6.1y
cisco	ios_xe	17.6.1z
cisco	ios_xe	17.6.1z1
cisco	ios_xe	17.6.2
cisco	ios_xe	17.6.3
cisco	ios_xe	17.6.3a
cisco	ios_xe	17.6.4
cisco	ios_xe	17.6.5
cisco	ios_xe	17.6.5a
cisco	ios_xe	17.6.6
cisco	ios_xe	17.6.6a
cisco	ios_xe	17.6.7
cisco	ios_xe	17.6.8
cisco	ios_xe	17.6.8a
cisco	ios_xe	17.7.1
cisco	ios_xe	17.7.1a
cisco	ios_xe	17.7.1b
cisco	ios_xe	17.7.2
cisco	ios_xe	17.8.1
cisco	ios_xe	17.8.1a
cisco	ios_xe	17.9.1
cisco	ios_xe	17.9.1a
cisco	ios_xe	17.9.1w
cisco	ios_xe	17.9.1x
cisco	ios_xe	17.9.1x1
cisco	ios_xe	17.9.1y
cisco	ios_xe	17.9.1y1
cisco	ios_xe	17.9.2
cisco	ios_xe	17.9.2a
cisco	ios_xe	17.9.3
cisco	ios_xe	17.9.3a
cisco	ios_xe	17.9.4
cisco	ios_xe	17.9.4a
cisco	ios_xe	17.9.5
cisco	ios_xe	17.9.5a
cisco	ios_xe	17.9.5b
cisco	ios_xe	17.9.5e
cisco	ios_xe	17.9.5f
cisco	ios_xe	17.9.6
cisco	ios_xe	17.9.6a
cisco	ios_xe	17.10.1
cisco	ios_xe	17.10.1a
cisco	ios_xe	17.10.1b
cisco	ios_xe	17.11.1
cisco	ios_xe	17.11.1a
cisco	ios_xe	17.12.1
cisco	ios_xe	17.12.1w
cisco	ios_xe	17.12.1x
cisco	ios_xe	17.12.1y
cisco	ios_xe	17.12.1z
cisco	ios_xe	17.12.1z1
cisco	ios_xe	17.12.2
cisco	ios_xe	17.12.2a
cisco	ios_xe	17.12.3
cisco	ios_xe	17.12.3a
cisco	ios_xe	17.12.4
cisco	ios_xe	17.12.4a
cisco	ios_xe	17.12.4b
cisco	ios_xe	17.13.1
cisco	ios_xe	17.13.1a
cisco	ios_xe	17.14.1
cisco	ios_xe	17.14.1a
cisco	asr_903	-

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
              "matchCriteriaId": "5568EABF-8F43-4A87-8DE4-A03E9065BE53",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0E5BB91-B5E7-4961-87DC-26596E5EDED7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3822447-EB80-4DF2-B7F2-471F55BA99C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
              "matchCriteriaId": "BA0B441A-3A09-4A58-8A40-D463003A50BC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*",
              "matchCriteriaId": "51E1A64A-204D-4567-A2DC-EFEB2AE62B54",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
              "matchCriteriaId": "970FD986-6D0E-441C-9BF3-C66A25763A7A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
              "matchCriteriaId": "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
              "matchCriteriaId": "1826C997-6D5D-480E-A12E-3048B6C61216",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
              "matchCriteriaId": "5D136C95-F837-49AD-82B3-81C25F68D0EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
              "matchCriteriaId": "C35B3F96-B342-4AFC-A511-7A735B961ECD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
              "matchCriteriaId": "DED2D791-4142-4B9E-8401-6B63357536B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FBEF4B2-EA12-445A-823E-E0E5343A405E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
              "matchCriteriaId": "844E7CEC-5CB6-47AE-95F7-75693347C08E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.6bs:*:*:*:*:*:*:*",
              "matchCriteriaId": "E50A67CE-EB1C-4BFA-AB40-BCF6CDF168BA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*",
              "matchCriteriaId": "147A245E-9A5D-4178-A1AC-5B0D41C3B730",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.7as:*:*:*:*:*:*:*",
              "matchCriteriaId": "169D71B3-1CCE-4526-8D91-048212EEDF08",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.7bs:*:*:*:*:*:*:*",
              "matchCriteriaId": "27F66514-B9C4-422E-B68E-406608302E03",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.7s:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2438157-4D9C-4E16-9D2A-759A8F6CDDE2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.8s:*:*:*:*:*:*:*",
              "matchCriteriaId": "12ECC01E-E59F-4AED-AE51-7EE6B5E717E8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.9s:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABC524BA-544C-49B9-A9D6-800D25556532",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.16.10s:*:*:*:*:*:*:*",
              "matchCriteriaId": "2BC99316-75AC-45EB-B6BB-DB014ED08ECA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
              "matchCriteriaId": "12793F39-13C4-4DBC-9B78-FE361BDDF89D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
              "matchCriteriaId": "1AEF94C7-CEE6-4696-9F1D-549639A831C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
              "matchCriteriaId": "876767C7-0196-4226-92B1-DDE851B53655",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*",
              "matchCriteriaId": "0141D67B-632F-48ED-8837-4CC799616C57",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
              "matchCriteriaId": "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.17.4s:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE444B39-D025-471B-835E-88671212ACAA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE390091-D382-4436-BBB4-D4C33E4F6714",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE81AA43-88D4-4EFC-B8F6-A41EFF437819",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
              "matchCriteriaId": "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.1asp:*:*:*:*:*:*:*",
              "matchCriteriaId": "A667AEC6-57E3-4D67-A02E-F0BAEBCE16DD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*",
              "matchCriteriaId": "80EE163D-D9EC-46A1-826A-54F8F3A3FFBE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.1csp:*:*:*:*:*:*:*",
              "matchCriteriaId": "3CE4CFE4-C00F-4FAE-8FDF-F6C92E92838D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
              "matchCriteriaId": "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
              "matchCriteriaId": "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.2asp:*:*:*:*:*:*:*",
              "matchCriteriaId": "0D43FA49-1F9D-4FD0-AF18-6E9AB6DF702F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.2sp:*:*:*:*:*:*:*",
              "matchCriteriaId": "014224BF-926E-470C-A133-84036D8AD533",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.3asp:*:*:*:*:*:*:*",
              "matchCriteriaId": "10B0DE46-C4C4-4DA1-A4CD-9627F13FED3B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.3bsp:*:*:*:*:*:*:*",
              "matchCriteriaId": "B58E818D-03BB-4FE4-946B-B967E9764DA3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.3s:*:*:*:*:*:*:*",
              "matchCriteriaId": "4063CCF8-19BE-4411-B71B-147BB146700B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.3sp:*:*:*:*:*:*:*",
              "matchCriteriaId": "2DE8E0D1-E4AD-4648-BCF0-AE11B93D22B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.4s:*:*:*:*:*:*:*",
              "matchCriteriaId": "186ADB50-A4D4-4B32-884D-3195E7770346",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.4sp:*:*:*:*:*:*:*",
              "matchCriteriaId": "334F278A-CFEB-4145-9D8D-EFC36A1BF258",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.5sp:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B76F26E-7B1C-4894-8CDD-4BA1243E4EAD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.6sp:*:*:*:*:*:*:*",
              "matchCriteriaId": "B5FB99D7-CDA9-4C3E-9DBB-3AC1CEBA4D90",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.7sp:*:*:*:*:*:*:*",
              "matchCriteriaId": "63D05DBA-D3F0-492B-9976-54A7E46F315E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.8asp:*:*:*:*:*:*:*",
              "matchCriteriaId": "596E09DB-97B1-4DCE-AC5E-18CC9ACCAFB8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:3.18.9sp:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB2D4A7B-E0B7-4D65-B242-75934490D703",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "0ED5527C-A638-4E20-9928-099E32E17743",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A685A9A-235D-4D74-9D6C-AC49E75709CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "43052998-0A27-4E83-A884-A94701A3F4CE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "89526731-B712-43D3-B451-D7FC503D2D65",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "302933FE-4B6A-48A3-97F0-4B943251B717",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "296636F1-9242-429B-8472-90352C056106",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "77993343-0394-413F-ABF9-C1215E9AD800",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "283971DD-DD58-4A76-AC2A-F316534ED416",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8F324A5-4830-482E-A684-AB3B6594CEAE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8120196-8648-49D0-8262-CD4C9C90C37A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "33E7CCE2-C685-4019-9B55-B3BECB3E5F76",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.5b:*:*:*:*:*:*:*",
              "matchCriteriaId": "0699DD6E-BA74-4814-93AB-300329C9D032",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2E2D781-2684-45F1-AC52-636572A0DCA8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "479FB47B-AF2E-4FCB-8DE0-400BF325666C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "DF2B4C78-5C31-4F3D-9639-305E15576E79",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "2C09F0A2-B21F-40ED-A6A8-9A29D6E1C6A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "32BA13F4-EF9C-4368-B8B1-9FD9FAF5CEFF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.3.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "13CB889F-B064-4CAC-99AC-903745ACA566",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "77E8AF15-AB46-4EAB-8872-8C55E8601599",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "957318BE-55D4-4585-AA52-C813301D01C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F11B703-8A0F-47ED-AA70-951FF78B94A4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE7B2557-821D-4E05-B5C3-67192573D97D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "5EE6EC32-51E4-43A3-BFB9-A0D842D08E87",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.5.1b:*:*:*:*:*:*:*",
              "matchCriteriaId": "187F699A-AF2F-42B0-B855-27413140C384",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E0B905E-4D92-4FD6-B2FF-41FF1F59A948",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "62EDEC28-661E-42EF-88F0-F62D0220D2E5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F821EBD7-91E2-4460-BFAF-18482CF6CB8C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C9B825E6-5929-4890-BDBA-4CF4BD2314C9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "65020120-491D-46CD-8C73-974B6F4C11E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
              "matchCriteriaId": "7ADDCD0A-6168-45A0-A885-76CC70FE2FC7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.6.5a:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2833EAE-94C8-4279-A244-DDB6E2D15DC2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "8C8F50DB-3A80-4D89-9F7B-86766D37338B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.6.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "01B53828-C520-4845-9C14-6C7D50EAA3A8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.6.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "20F23DB7-6F8E-470A-9B43-0ACEEF331C38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "623BF701-ADC9-4F24-93C5-043A6A7FEF5F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.7.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5311FBE-12BF-41AC-B8C6-D86007834863",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.7.1b:*:*:*:*:*:*:*",
              "matchCriteriaId": "52FB055E-72F9-4CB7-A51D-BF096BD1A55D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0FBD681F-7969-42BE-A47E-7C287755DCB5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "98255E6F-3056-487D-9157-403836EFB9D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.7.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "521ACFB0-4FB2-44DB-AD7B-C27F9059DE66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "57D4F634-03D5-4D9F-901C-7E9CE45F2F38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "4463A1D1-E169-4F0B-91B2-FA126BB444CB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
              "matchCriteriaId": "D97F69C3-CAA6-491C-A0B6-6DC12B5AB472",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
              "matchCriteriaId": "CDD58C58-1B0C-4A71-8C02-F555CEF9C253",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*",
              "matchCriteriaId": "96852D16-AF50-4C70-B125-D2349E6765D7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*",
              "matchCriteriaId": "A15B882A-BA60-4932-A55E-F4A798B30EEB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
              "matchCriteriaId": "5C9C585C-A6EC-4385-B915-046C110BF95F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "47DBE4ED-1CD8-4134-9B33-17A91F44F17B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "119A964D-ABC8-424D-8097-85B832A833BD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "0375BF9E-D04B-4E5B-9051-536806ECA44E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
              "matchCriteriaId": "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
              "matchCriteriaId": "78DE7780-4E8B-4BB6-BDEB-58032EC65851",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F29CEE37-4044-4A3C-9685-C9C021FD346A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
              "matchCriteriaId": "1E16D266-108F-4F8A-998D-F1CA25F2EAAD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4BF9829-F80E-4837-A420-39B291C4E17B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "F5AB80E7-0714-44ED-9671-12C877B36A1E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
              "matchCriteriaId": "10182B94-6831-461E-B0FC-9476EAB6EBEF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "961F8312-31B9-44E7-8858-EF8E2134F447",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D62EE1B-9A59-406C-B7DF-91B495F3ECFE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.9.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "79CF8D4E-F82A-469C-A8C2-0C203A800A05",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB6BD18B-B9BD-452F-986E-16A6668E46B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
              "matchCriteriaId": "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
              "matchCriteriaId": "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
              "matchCriteriaId": "04081A51-E08F-4114-9276-584E836181D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
              "matchCriteriaId": "ADED0D82-2A4D-4235-BFAC-5EE2D862B652",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
              "matchCriteriaId": "62A46516-CEB7-48D4-879B-341963A1FA31",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6EF98FA-6DF9-4935-9639-143E08462BC4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
              "matchCriteriaId": "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A443E93-6C4B-4F86-BA7C-7C2A929E795A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "314C7763-A64D-4023-9F3F-9A821AE4151F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
              "matchCriteriaId": "5820D71D-FC93-45AA-BC58-A26A1A39C936",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "B53E377A-0296-4D7A-B97C-576B0026543D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C98DED36-D4B5-48D6-964E-EEEE97936700",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD98C9E8-3EA6-4160-970D-37C389576516",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
              "matchCriteriaId": "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
              "matchCriteriaId": "9027A528-2588-4C06-810B-5BB313FE4323",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
              "matchCriteriaId": "7745ED34-D59D-49CC-B174-96BCA03B3374",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
              "matchCriteriaId": "19AF4CF3-6E79-4EA3-974D-CD451A192BA9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
              "matchCriteriaId": "313BD54C-073C-4F27-82D5-C99EFC3A20F7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
              "matchCriteriaId": "93B96E01-3777-4C33-9225-577B469A6CE5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1z1:*:*:*:*:*:*:*",
              "matchCriteriaId": "D18B32E3-6B33-4E3D-879A-82E2F0BFC906",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.1z2:*:*:*:*:*:*:*",
              "matchCriteriaId": "46E37204-FC9A-4397-AFA4-9CAC7A116D55",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5019B59-508E-40B0-9C92-2C26F58E2FBE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
              "matchCriteriaId": "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
              "matchCriteriaId": "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "D5750264-2990-4942-85F4-DB9746C5CA2B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
              "matchCriteriaId": "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
              "matchCriteriaId": "B9173AD6-6658-4267-AAA7-D50D0B657528",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F02EE9D-45B1-43D6-B05D-6FF19472216B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FCB9440-F470-45D1-AAFA-01FB5D76B600",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.5a:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F66ECFE-B631-47AE-995F-024A4E586A85",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.5b:*:*:*:*:*:*:*",
              "matchCriteriaId": "3BBFDD70-7AF3-47AE-94CA-56C19F2D6234",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B736F09-3B51-4B2A-92F6-602847001F15",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.6a:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F58A94E-B050-4EFA-84BA-43B11BA22E77",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E864BB1-FD23-4AB3-9138-5FD8B62EAF5B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "838D6C2D-C131-4A9C-AAE5-5BF38E637E4B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "37D5E77B-687D-4AE7-95B8-0AB56AF5DAD3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "91EF2384-9939-4F86-8A0F-7CB7034980E7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.10a:*:*:*:*:*:*:*",
              "matchCriteriaId": "A2E51B09-D66D-4AE8-AF96-AEDE54A7C209",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "AF595930-44E0-41FD-A0EF-C8E301E6585B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F621724-9BA3-4D47-AAB8-08D7A541EBDF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:16.12.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "82E2A28A-700E-4546-AA94-2B13C925BDFF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E306B09C-CB48-4067-B60C-5F738555EEAC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD446C51-E713-4E46-8328-0A0477D140D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
              "matchCriteriaId": "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
              "matchCriteriaId": "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B4D4659-A304-459F-8AB3-ED6D84B44C0F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "B51FA707-8DB1-4596-9122-D4BFEF17F400",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
              "matchCriteriaId": "C04DF35A-1B6F-420A-8D84-74EB41BF3700",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
              "matchCriteriaId": "211CC9B2-6108-4C50-AB31-DC527C43053E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "128F95D7-E49F-4B36-8F47-823C0298449E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "E21B3881-37E9-4C00-9336-12C9C28D1B61",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*",
              "matchCriteriaId": "E54599DB-A85E-4EEA-9985-2CBF90E28A08",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1x:*:*:*:*:*:*:*",
              "matchCriteriaId": "4046C325-7EDB-4C95-AA98-541BEC8F9E0F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.1z:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5B70A3D-CBE1-4218-A7B4-F85741A57BD7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B270A04-9961-4E99-806B-441CD674AFBD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
              "matchCriteriaId": "1360069D-0358-4746-8C3F-44C2A40988D7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5DD2403-113B-4100-8BD4-90E1927E6648",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "DAF73937-BCE2-4BEF-B4B0-83212DA4A6C8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4a:*:*:*:*:*:*:*",
              "matchCriteriaId": "2DDB1E60-C2A9-4570-BE80-F3D478A53738",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4b:*:*:*:*:*:*:*",
              "matchCriteriaId": "9841799A-87E2-46AE-807A-824981EAB35A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.4c:*:*:*:*:*:*:*",
              "matchCriteriaId": "0CEF022B-271F-4017-B74B-82748D5EBA01",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "6B2902D8-3A7B-4C47-9BC6-8CA4C580A346",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5a:*:*:*:*:*:*:*",
              "matchCriteriaId": "8871B890-78F4-4D9D-AEFF-6A393493C51E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.5b:*:*:*:*:*:*:*",
              "matchCriteriaId": "9E489AC5-A445-44FF-AA85-F0915577384E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "917BA05C-2A18-4C68-B508-85C2B5A94416",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "06337791-7D8D-4EAA-BACC-4E270F377B3E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "336A8630-653C-4E28-8DE1-76CDD8573980",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.3.8a:*:*:*:*:*:*:*",
              "matchCriteriaId": "0A1767AE-7D9F-4BAA-90E1-CF8314CD0B53",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A6B707B-4543-41F1-83DF-49A93BF56FB1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC8F611B-D347-4A21-90E6-56CF4D8A35A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9A92CE4-B4B0-4C14-AE11-8DFE511406F3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "274E3E6F-4280-4EAE-B102-1BE57FE1F1D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.4.2a:*:*:*:*:*:*:*",
              "matchCriteriaId": "46B52A51-51DB-4A12-AB1D-8D9605226599",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "938B0720-8CA7-43BA-9708-5CE9EC7A565A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.5.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "D4BE7166-DBD3-4CE6-A14A-725FE896B85E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "4DE62C4B-7C06-4907-BADE-416C1618D2D9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C60DF3F-DBD9-4BBF-812E-4BB0C47BDF3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1w:*:*:*:*:*:*:*",
              "matchCriteriaId": "26FEE2E2-DD85-4006-8895-0BDA04E8EE4C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1x:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0CD237B-2843-4D37-87D7-AE6D1A53458A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1y:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B80614B-6362-45F0-B305-2F137B053DCF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1z:*:*:*:*:*:*:*",
              "matchCriteriaId": "47B20C7E-1C9C-4EF4-91E4-388643C4B9C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.1z1:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB7966A0-D84D-47F7-AED9-D041BCDA6703",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "04D19D8C-FACF-49B4-BA99-CC3A3FDADAFB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B78942C-BEE1-4D18-9075-8E1D991BF621",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.3a:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B306D35-4A13-4D23-8EC2-D000E8ADCDA5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F21093D-1036-4F6B-B90F-ACE1EF99EA33",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "280D24C6-A2BF-46E8-B512-6A3FA7833922",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.5a:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F903F51-ABF4-49B0-A5BA-A6B51F79666F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3F244E7-8EE9-4E58-83FA-EEDD3C8F792D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.6a:*:*:*:*:*:*:*",
              "matchCriteriaId": "5238B1D1-740D-4B37-A0CB-1B3343E55D05",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "27E0750C-A622-49D6-A8EF-B59E2F8F1912",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "2258D93E-71AA-4964-A5DF-008E3479F2A4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.6.8a:*:*:*:*:*:*:*",
              "matchCriteriaId": "608ACC60-143B-4835-B6AC-E6C3111B4078",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "38B87B17-C653-40AC-8AE4-066BB1123C88",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "9012A66E-82C4-4ACF-A4BB-37EC54B87B50",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.1b:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C945710-7DC3-43D9-9FBE-F2A1B8666C73",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.7.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "849C6FF1-F7C0-4021-BCA2-A791C87E4F37",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7592C7E3-3735-425F-A276-9EE03224CD5E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.8.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "1103BE75-EB64-4A9A-801E-EDE6A1F861F5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B0C2129-8149-4362-827C-A5494C9D398B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "7452C7E9-6241-42C5-9A7F-13C0BD38A2B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1w:*:*:*:*:*:*:*",
              "matchCriteriaId": "38C48FC4-5362-4B61-8B8C-7CAFFB81045E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1x:*:*:*:*:*:*:*",
              "matchCriteriaId": "2BC43383-DF99-4D38-A220-0A202623B36A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1x1:*:*:*:*:*:*:*",
              "matchCriteriaId": "B7E6CD08-EC7E-42C1-B2C2-CA5E154545A0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1y:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE62DC68-E882-49E7-AAD2-2F73637FFB4A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.1y1:*:*:*:*:*:*:*",
              "matchCriteriaId": "57CD29C9-C629-48B0-ABDD-CEC3DEB6FB11",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D197445E-EC12-429C-BDD4-F63FA5C1B3E3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.2a:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD27DF50-9E81-4EC5-BA73-513F1DFB972C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "51EA3EAA-A379-467E-AF9A-FCFBACAE49C7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.3a:*:*:*:*:*:*:*",
              "matchCriteriaId": "4FC63AAF-758F-4A70-9738-96E75A0A1DDA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E67BE408-8DCF-491F-9EA9-E368565C1B49",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.4a:*:*:*:*:*:*:*",
              "matchCriteriaId": "D9CFE98A-FBA5-4837-BBD9-3C875ECEBF1B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "36A5F20F-3F38-4FB9-B49D-28569EB1A763",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5a:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D2264D7-5E89-4F50-B948-FAB41D07C8BA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5b:*:*:*:*:*:*:*",
              "matchCriteriaId": "6BB8368D-B9F9-4679-8154-1174E140CA17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5e:*:*:*:*:*:*:*",
              "matchCriteriaId": "78EEDF40-2CDA-4147-A9F2-A5F4B8FF35EC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.5f:*:*:*:*:*:*:*",
              "matchCriteriaId": "40CEA4FC-B946-4D54-A45B-686FC02D5411",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "7BDBE176-04ED-48F0-BA9F-45BECFEDBE2A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.9.6a:*:*:*:*:*:*:*",
              "matchCriteriaId": "94E52AA0-0A77-47DF-9600-7D5B8A6D09B6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "42FAEC29-D754-49D6-85F1-F5DDFAF6E80F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "CCE76032-948F-444F-BA5D-72A34D1CD382",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.10.1b:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A965A2A-129C-45C3-BCB1-2860F583D020",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "F313F2EC-F3D6-4639-934C-402DDA3DA806",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.11.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "4AFB2CA6-8332-4E4D-BDB4-C3B770D3AD6C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "1BF0778B-015D-481B-BAC0-40667F3453D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1w:*:*:*:*:*:*:*",
              "matchCriteriaId": "66D0DB87-6BB7-4FCF-BF20-6D4D48D72B79",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1x:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0A766E7-CF3C-4529-AFA4-D780059A66BC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1y:*:*:*:*:*:*:*",
              "matchCriteriaId": "46B7F7EA-6512-433F-B1E4-B2F889427464",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z:*:*:*:*:*:*:*",
              "matchCriteriaId": "63527910-7F55-4D40-BFE7-D497C91C334D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.1z1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6EACA43F-64DB-496B-A6B1-DB9FAF6606EB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE165207-A066-44C1-B78A-6EFD80023204",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.2a:*:*:*:*:*:*:*",
              "matchCriteriaId": "4AF792BC-C270-4294-8E4E-71FAC3ACFCF8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "1098FCEA-6A9F-4634-A0EF-EC55ABCCEA3E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.3a:*:*:*:*:*:*:*",
              "matchCriteriaId": "53B97B06-206B-42F0-B68F-5C5136EAD2B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "6281EB0F-EE0E-4B06-A7A1-29460A98A8CA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4a:*:*:*:*:*:*:*",
              "matchCriteriaId": "07650346-67D7-4805-BF81-BB145304CC87",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.12.4b:*:*:*:*:*:*:*",
              "matchCriteriaId": "9C6C0D21-ABD5-42F1-B04B-745CA6115D07",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.13.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8577AF01-F2C7-48D3-AB0B-78BD63A60029",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.13.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "CD0D2D94-6470-4E4B-A1B1-0124F92AA793",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.14.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "31789E98-7C8D-4C5A-8A3F-FC9AFE9A248C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:cisco:ios_xe:17.14.1a:*:*:*:*:*:*:*",
              "matchCriteriaId": "7A62648B-3273-4D75-8533-A5CBE1B1BCE0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:asr_903:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "51938C0A-AFDB-4B12-BB64-9C67FC0C738F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition.\r\n\r This vulnerability is due to improper memory management when Cisco IOS XE Software is processing Address Resolution Protocol (ARP) messages. An attacker could exploit this vulnerability by sending crafted ARP messages at a high rate over a period of time to an affected device. A successful exploit could allow the attacker to exhaust system resources, which eventually triggers a reload of the active route switch processor (RSP). If a redundant RSP is not present, the router reloads."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en la funci\u00f3n Cisco Express Forwarding del software Cisco IOS XE para routers de servicios de agregaci\u00f3n Cisco ASR 903 con procesador de conmutaci\u00f3n de ruta 3 (RSP3C) podr\u00eda permitir que un atacante adyacente no autenticado active una denegaci\u00f3n de servicio (DoS). Esta vulnerabilidad se debe a una gesti\u00f3n de memoria inadecuada cuando el software Cisco IOS XE procesa mensajes del protocolo de resoluci\u00f3n de direcciones (ARP). Un atacante podr\u00eda explotar esta vulnerabilidad enviando mensajes ARP manipulados a alta velocidad durante un per\u00edodo de tiempo a un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante agotar los recursos del sistema, lo que eventualmente desencadena la recarga del procesador de conmutaci\u00f3n de ruta (RSP) activo. Si no hay un RSP redundante, el router se recarga."
    }
  ],
  "id": "CVE-2025-20189",
  "lastModified": "2025-08-05T14:36:20.273",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.4,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 4.0,
        "source": "psirt@cisco.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-05-07T18:15:38.770",
  "references": [
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-762"
        }
      ],
      "source": "psirt@cisco.com",
      "type": "Secondary"
    }
  ]
}

GHSA-V76P-4WXX-WRPQ

Vulnerability from github – Published: 2025-05-07 18:30 – Updated: 2025-05-07 18:30

Details

This vulnerability is due to improper memory management when Cisco IOS XE Software is processing Address Resolution Protocol (ARP) messages. An attacker could exploit this vulnerability by sending crafted ARP messages at a high rate over a period of time to an affected device. A successful exploit could allow the attacker to exhaust system resources, which eventually triggers a reload of the active route switch processor (RSP). If a redundant RSP is not present, the router reloads.

Severity ?

7.4 (High)


                  
                    CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-20189"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-762"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-05-07T18:15:38Z",
    "severity": "HIGH"
  },
  "details": "A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition.\n\n This vulnerability is due to improper memory management when Cisco IOS XE Software is processing Address Resolution Protocol (ARP) messages. An attacker could exploit this vulnerability by sending crafted ARP messages at a high rate over a period of time to an affected device. A successful exploit could allow the attacker to exhaust system resources, which eventually triggers a reload of the active route switch processor (RSP). If a redundant RSP is not present, the router reloads.",
  "id": "GHSA-v76p-4wxx-wrpq",
  "modified": "2025-05-07T18:30:49Z",
  "published": "2025-05-07T18:30:49Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-20189"
    },
    {
      "type": "WEB",
      "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ]
}

NCSC-2025-0146

Vulnerability from csaf_ncscnl - Published: 2025-05-08 08:43 - Updated: 2025-05-08 08:43

Summary

Kwetsbaarheden verholpen in Cisco IOS XE Software

Notes

The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions: NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein. NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory. This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.

Feiten: Cisco heeft kwetsbaarheden verholpen in Cisco IOS XE Software.

Interpretaties: De kwetsbaarheden in Cisco IOS XE Software omvatten verschillende problemen, waaronder onvoldoende invoervalidatie en onjuist geheugenbeheer. Deze kwetsbaarheden kunnen worden misbruikt door ongeauthenticeerde aanvallers om Denial-of-Service (DoS) situaties te veroorzaken, ongeautoriseerde toegang te verkrijgen, en zelfs om configuraties te manipuleren. Kwetsbare systemen kunnen onverwacht opnieuw opstarten of kunnen worden blootgesteld aan ongeautoriseerde commando-injectie-aanvallen, wat de integriteit en beschikbaarheid van netwerken in gevaar kan brengen.

Oplossingen: Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.

Kans: medium

Schade: high

CWE-762: Mismatched Memory Management Routines

CWE-805: Buffer Access with Incorrect Length Value

CWE-347: Improper Verification of Cryptographic Signature

CWE-232: Improper Handling of Undefined Values

CWE-798: Use of Hard-coded Credentials

CWE-352: Cross-Site Request Forgery (CSRF)

CWE-284: Improper Access Control

CWE-400: Uncontrolled Resource Consumption

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-787: Out-of-bounds Write

CWE-789: Memory Allocation with Excessive Size Value

CWE-20: Improper Input Validation

CVE-2025-20137

4.7 (Medium)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

CWE-284 - Improper Access Control

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20140

7.4 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-789 - Memory Allocation with Excessive Size Value

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20154

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20162

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-400 - Uncontrolled Resource Consumption

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20181

6.8 (Medium)


                        
                          CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-347 - Improper Verification of Cryptographic Signature

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20182

8.6 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20186

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20188

10.0 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CWE-798 - Use of Hard-coded Credentials

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20189

7.4 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-762 - Mismatched Memory Management Routines

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20190

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CWE-284 - Improper Access Control

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20192

7.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CWE-232 - Improper Handling of Undefined Values

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20194

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

CVE-2025-20202

7.4 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CWE-805 - Buffer Access with Incorrect Length Value

Affected products

Known affected 42 products

Product	Identifier	Version	Remediation
vers:cisco/16.1.3 Cisco / Cisco IOS XE Software		vers:cisco/16.1.3
vers:cisco/16.10.3 Cisco / Cisco IOS XE Software		vers:cisco/16.10.3
vers:cisco/16.11.2 Cisco / Cisco IOS XE Software		vers:cisco/16.11.2
vers:cisco/16.12.9 Cisco / Cisco IOS XE Software		vers:cisco/16.12.9
vers:cisco/3.16.10bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.10bs
vers:cisco/3.16.10s Cisco / Cisco IOS XE Software		vers:cisco/3.16.10s
vers:cisco/16.2.2 Cisco / Cisco IOS XE Software		vers:cisco/16.2.2
vers:cisco/16.3.11 Cisco / Cisco IOS XE Software		vers:cisco/16.3.11
vers:cisco/16.4.3 Cisco / Cisco IOS XE Software		vers:cisco/16.4.3
vers:cisco/16.5.3 Cisco / Cisco IOS XE Software		vers:cisco/16.5.3
vers:cisco/16.6.10 Cisco / Cisco IOS XE Software		vers:cisco/16.6.10
vers:cisco/3.16.7bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.7bs
vers:cisco/3.16.7s Cisco / Cisco IOS XE Software		vers:cisco/3.16.7s
vers:cisco/16.8.3 Cisco / Cisco IOS XE Software		vers:cisco/16.8.3
vers:cisco/3.16.9s Cisco / Cisco IOS XE Software		vers:cisco/3.16.9s
vers:cisco/3.10.9s Cisco / Cisco IOS XE Software		vers:cisco/3.10.9s
vers:cisco/3.11.9e Cisco / Cisco IOS XE Software		vers:cisco/3.11.9e
vers:cisco/3.12.4s Cisco / Cisco IOS XE Software		vers:cisco/3.12.4s
vers:cisco/3.13.9s Cisco / Cisco IOS XE Software		vers:cisco/3.13.9s
vers:cisco/3.14.4s Cisco / Cisco IOS XE Software		vers:cisco/3.14.4s
vers:cisco/3.15.4s Cisco / Cisco IOS XE Software		vers:cisco/3.15.4s
vers:cisco/3.16.2as Cisco / Cisco IOS XE Software		vers:cisco/3.16.2as
vers:cisco/3.16.2bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.2bs
vers:cisco/3.16.2s Cisco / Cisco IOS XE Software		vers:cisco/3.16.2s
vers:cisco/3.16.3as Cisco / Cisco IOS XE Software		vers:cisco/3.16.3as
vers:cisco/3.16.3s Cisco / Cisco IOS XE Software		vers:cisco/3.16.3s
vers:cisco/3.16.4s Cisco / Cisco IOS XE Software		vers:cisco/3.16.4s
vers:cisco/3.16.4gs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4gs
vers:cisco/3.16.4es Cisco / Cisco IOS XE Software		vers:cisco/3.16.4es
vers:cisco/3.16.4ds Cisco / Cisco IOS XE Software		vers:cisco/3.16.4ds
vers:cisco/3.16.4cs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4cs
vers:cisco/3.16.4bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.4bs
vers:cisco/3.16.4as Cisco / Cisco IOS XE Software		vers:cisco/3.16.4as
vers:cisco/3.16.5as Cisco / Cisco IOS XE Software		vers:cisco/3.16.5as
vers:cisco/3.16.5bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.5bs
vers:cisco/3.16.5s Cisco / Cisco IOS XE Software		vers:cisco/3.16.5s
vers:cisco/3.16.6bs Cisco / Cisco IOS XE Software		vers:cisco/3.16.6bs
vers:cisco/3.16.6s Cisco / Cisco IOS XE Software		vers:cisco/3.16.6s
vers:cisco/3.16.7as Cisco / Cisco IOS XE Software		vers:cisco/3.16.7as
vers:cisco/3.16.8s Cisco / Cisco IOS XE Software		vers:cisco/3.16.8s
vers:cisco/3.16.1as Cisco / Cisco IOS XE Software		vers:cisco/3.16.1as
vers:cisco/3.16.1s Cisco / Cisco IOS XE Software		vers:cisco/3.16.1s

References

23 references

URL	Category
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://sec.cloudapps.cisco.com/security/center/c…	external
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self
https://api.ncsc.nl/velma/v1/vulnerabilities/2025…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "nl",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n    NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n    NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n    This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
      },
      {
        "category": "description",
        "text": "Cisco heeft kwetsbaarheden verholpen in Cisco IOS XE Software.",
        "title": "Feiten"
      },
      {
        "category": "description",
        "text": "De kwetsbaarheden in Cisco IOS XE Software omvatten verschillende problemen, waaronder onvoldoende invoervalidatie en onjuist geheugenbeheer. Deze kwetsbaarheden kunnen worden misbruikt door ongeauthenticeerde aanvallers om Denial-of-Service (DoS) situaties te veroorzaken, ongeautoriseerde toegang te verkrijgen, en zelfs om configuraties te manipuleren. Kwetsbare systemen kunnen onverwacht opnieuw opstarten of kunnen worden blootgesteld aan ongeautoriseerde commando-injectie-aanvallen, wat de integriteit en beschikbaarheid van netwerken in gevaar kan brengen.",
        "title": "Interpretaties"
      },
      {
        "category": "description",
        "text": "Cisco heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
        "title": "Oplossingen"
      },
      {
        "category": "general",
        "text": "medium",
        "title": "Kans"
      },
      {
        "category": "general",
        "text": "high",
        "title": "Schade"
      },
      {
        "category": "general",
        "text": "Mismatched Memory Management Routines",
        "title": "CWE-762"
      },
      {
        "category": "general",
        "text": "Buffer Access with Incorrect Length Value",
        "title": "CWE-805"
      },
      {
        "category": "general",
        "text": "Improper Verification of Cryptographic Signature",
        "title": "CWE-347"
      },
      {
        "category": "general",
        "text": "Improper Handling of Undefined Values",
        "title": "CWE-232"
      },
      {
        "category": "general",
        "text": "Use of Hard-coded Credentials",
        "title": "CWE-798"
      },
      {
        "category": "general",
        "text": "Cross-Site Request Forgery (CSRF)",
        "title": "CWE-352"
      },
      {
        "category": "general",
        "text": "Improper Access Control",
        "title": "CWE-284"
      },
      {
        "category": "general",
        "text": "Uncontrolled Resource Consumption",
        "title": "CWE-400"
      },
      {
        "category": "general",
        "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
        "title": "CWE-78"
      },
      {
        "category": "general",
        "text": "Out-of-bounds Write",
        "title": "CWE-787"
      },
      {
        "category": "general",
        "text": "Memory Allocation with Excessive Size Value",
        "title": "CWE-789"
      },
      {
        "category": "general",
        "text": "Improper Input Validation",
        "title": "CWE-20"
      }
    ],
    "publisher": {
      "category": "coordinator",
      "contact_details": "cert@ncsc.nl",
      "name": "Nationaal Cyber Security Centrum",
      "namespace": "https://www.ncsc.nl/"
    },
    "references": [
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-user-del-hQxMpUDj"
      },
      {
        "category": "external",
        "summary": "Reference - cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-file-uplpd-rHZG9UfC"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn"
      },
      {
        "category": "external",
        "summary": "Reference - cisco; cveprojectv5; nvd",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL"
      }
    ],
    "title": "Kwetsbaarheden verholpen in Cisco IOS XE Software",
    "tracking": {
      "current_release_date": "2025-05-08T08:43:57.415709Z",
      "generator": {
        "date": "2025-02-25T15:15:00Z",
        "engine": {
          "name": "V.A.",
          "version": "1.0"
        }
      },
      "id": "NCSC-2025-0146",
      "initial_release_date": "2025-05-08T08:43:57.415709Z",
      "revision_history": [
        {
          "date": "2025-05-08T08:43:57.415709Z",
          "number": "1.0.0",
          "summary": "Initiele versie"
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.1.3",
                "product": {
                  "name": "vers:cisco/16.1.3",
                  "product_id": "CSAFPID-2714930"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.10.3",
                "product": {
                  "name": "vers:cisco/16.10.3",
                  "product_id": "CSAFPID-2715313"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.11.2",
                "product": {
                  "name": "vers:cisco/16.11.2",
                  "product_id": "CSAFPID-2715043"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.12.9",
                "product": {
                  "name": "vers:cisco/16.12.9",
                  "product_id": "CSAFPID-2715520"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.10bs",
                "product": {
                  "name": "vers:cisco/3.16.10bs",
                  "product_id": "CSAFPID-2715459"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.10s",
                "product": {
                  "name": "vers:cisco/3.16.10s",
                  "product_id": "CSAFPID-2715039"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.2.2",
                "product": {
                  "name": "vers:cisco/16.2.2",
                  "product_id": "CSAFPID-2714932"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.3.11",
                "product": {
                  "name": "vers:cisco/16.3.11",
                  "product_id": "CSAFPID-2715445"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.4.3",
                "product": {
                  "name": "vers:cisco/16.4.3",
                  "product_id": "CSAFPID-2715031"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.5.3",
                "product": {
                  "name": "vers:cisco/16.5.3",
                  "product_id": "CSAFPID-2715164"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.6.10",
                "product": {
                  "name": "vers:cisco/16.6.10",
                  "product_id": "CSAFPID-2715478"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.7bs",
                "product": {
                  "name": "vers:cisco/3.16.7bs",
                  "product_id": "CSAFPID-2715170"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.7s",
                "product": {
                  "name": "vers:cisco/3.16.7s",
                  "product_id": "CSAFPID-2715017"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/16.8.3",
                "product": {
                  "name": "vers:cisco/16.8.3",
                  "product_id": "CSAFPID-2714865"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.9s",
                "product": {
                  "name": "vers:cisco/3.16.9s",
                  "product_id": "CSAFPID-2714842"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.10.9s",
                "product": {
                  "name": "vers:cisco/3.10.9s",
                  "product_id": "CSAFPID-2714989"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.11.9e",
                "product": {
                  "name": "vers:cisco/3.11.9e",
                  "product_id": "CSAFPID-2715536"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.12.4s",
                "product": {
                  "name": "vers:cisco/3.12.4s",
                  "product_id": "CSAFPID-2714784"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.13.9s",
                "product": {
                  "name": "vers:cisco/3.13.9s",
                  "product_id": "CSAFPID-2715032"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.14.4s",
                "product": {
                  "name": "vers:cisco/3.14.4s",
                  "product_id": "CSAFPID-2714746"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.15.4s",
                "product": {
                  "name": "vers:cisco/3.15.4s",
                  "product_id": "CSAFPID-2714941"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.2as",
                "product": {
                  "name": "vers:cisco/3.16.2as",
                  "product_id": "CSAFPID-2714791"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.2bs",
                "product": {
                  "name": "vers:cisco/3.16.2bs",
                  "product_id": "CSAFPID-2714942"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.2s",
                "product": {
                  "name": "vers:cisco/3.16.2s",
                  "product_id": "CSAFPID-2714788"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.3as",
                "product": {
                  "name": "vers:cisco/3.16.3as",
                  "product_id": "CSAFPID-2714943"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.3s",
                "product": {
                  "name": "vers:cisco/3.16.3s",
                  "product_id": "CSAFPID-2714798"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4s",
                "product": {
                  "name": "vers:cisco/3.16.4s",
                  "product_id": "CSAFPID-2714944"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4gs",
                "product": {
                  "name": "vers:cisco/3.16.4gs",
                  "product_id": "CSAFPID-2714974"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4es",
                "product": {
                  "name": "vers:cisco/3.16.4es",
                  "product_id": "CSAFPID-2714985"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4ds",
                "product": {
                  "name": "vers:cisco/3.16.4ds",
                  "product_id": "CSAFPID-2714983"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4cs",
                "product": {
                  "name": "vers:cisco/3.16.4cs",
                  "product_id": "CSAFPID-2714978"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4bs",
                "product": {
                  "name": "vers:cisco/3.16.4bs",
                  "product_id": "CSAFPID-2714971"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.4as",
                "product": {
                  "name": "vers:cisco/3.16.4as",
                  "product_id": "CSAFPID-2714967"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.5as",
                "product": {
                  "name": "vers:cisco/3.16.5as",
                  "product_id": "CSAFPID-2714992"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.5bs",
                "product": {
                  "name": "vers:cisco/3.16.5bs",
                  "product_id": "CSAFPID-2714996"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.5s",
                "product": {
                  "name": "vers:cisco/3.16.5s",
                  "product_id": "CSAFPID-2714975"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.6bs",
                "product": {
                  "name": "vers:cisco/3.16.6bs",
                  "product_id": "CSAFPID-2715025"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.6s",
                "product": {
                  "name": "vers:cisco/3.16.6s",
                  "product_id": "CSAFPID-2714987"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.7as",
                "product": {
                  "name": "vers:cisco/3.16.7as",
                  "product_id": "CSAFPID-2715168"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.8s",
                "product": {
                  "name": "vers:cisco/3.16.8s",
                  "product_id": "CSAFPID-2715178"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.1as",
                "product": {
                  "name": "vers:cisco/3.16.1as",
                  "product_id": "CSAFPID-2714787"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:cisco/3.16.1s",
                "product": {
                  "name": "vers:cisco/3.16.1s",
                  "product_id": "CSAFPID-2714773"
                }
              }
            ],
            "category": "product_name",
            "name": "Cisco IOS XE Software"
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-20137",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20137",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20137.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20137"
    },
    {
      "cve": "CVE-2025-20140",
      "cwe": {
        "id": "CWE-789",
        "name": "Memory Allocation with Excessive Size Value"
      },
      "notes": [
        {
          "category": "other",
          "text": "Memory Allocation with Excessive Size Value",
          "title": "CWE-789"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20140",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20140.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20140"
    },
    {
      "cve": "CVE-2025-20154",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Input Validation",
          "title": "CWE-20"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20154",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20154.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20154"
    },
    {
      "cve": "CVE-2025-20162",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "other",
          "text": "Uncontrolled Resource Consumption",
          "title": "CWE-400"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20162",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20162.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20162"
    },
    {
      "cve": "CVE-2025-20181",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Verification of Cryptographic Signature",
          "title": "CWE-347"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20181",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20181.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20181"
    },
    {
      "cve": "CVE-2025-20182",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "other",
          "text": "Out-of-bounds Write",
          "title": "CWE-787"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20182",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20182.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20182"
    },
    {
      "cve": "CVE-2025-20186",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "title": "CWE-78"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20186",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20186.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20186"
    },
    {
      "cve": "CVE-2025-20188",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "category": "other",
          "text": "Use of Hard-coded Credentials",
          "title": "CWE-798"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20188",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20188.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 10.0,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20188"
    },
    {
      "cve": "CVE-2025-20189",
      "cwe": {
        "id": "CWE-762",
        "name": "Mismatched Memory Management Routines"
      },
      "notes": [
        {
          "category": "other",
          "text": "Mismatched Memory Management Routines",
          "title": "CWE-762"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20189",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20189.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20189"
    },
    {
      "cve": "CVE-2025-20190",
      "cwe": {
        "id": "CWE-284",
        "name": "Improper Access Control"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Access Control",
          "title": "CWE-284"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20190",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20190.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20190"
    },
    {
      "cve": "CVE-2025-20192",
      "cwe": {
        "id": "CWE-232",
        "name": "Improper Handling of Undefined Values"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Handling of Undefined Values",
          "title": "CWE-232"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20192",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20192.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20192"
    },
    {
      "cve": "CVE-2025-20194",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "notes": [
        {
          "category": "other",
          "text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
          "title": "CWE-78"
        },
        {
          "category": "other",
          "text": "Cross-Site Request Forgery (CSRF)",
          "title": "CWE-352"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20194",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20194.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20194"
    },
    {
      "cve": "CVE-2025-20202",
      "cwe": {
        "id": "CWE-805",
        "name": "Buffer Access with Incorrect Length Value"
      },
      "notes": [
        {
          "category": "other",
          "text": "Buffer Access with Incorrect Length Value",
          "title": "CWE-805"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-2714930",
          "CSAFPID-2715313",
          "CSAFPID-2715043",
          "CSAFPID-2715520",
          "CSAFPID-2715459",
          "CSAFPID-2715039",
          "CSAFPID-2714932",
          "CSAFPID-2715445",
          "CSAFPID-2715031",
          "CSAFPID-2715164",
          "CSAFPID-2715478",
          "CSAFPID-2715170",
          "CSAFPID-2715017",
          "CSAFPID-2714865",
          "CSAFPID-2714842",
          "CSAFPID-2714989",
          "CSAFPID-2715536",
          "CSAFPID-2714784",
          "CSAFPID-2715032",
          "CSAFPID-2714746",
          "CSAFPID-2714941",
          "CSAFPID-2714791",
          "CSAFPID-2714942",
          "CSAFPID-2714788",
          "CSAFPID-2714943",
          "CSAFPID-2714798",
          "CSAFPID-2714944",
          "CSAFPID-2714974",
          "CSAFPID-2714985",
          "CSAFPID-2714983",
          "CSAFPID-2714978",
          "CSAFPID-2714971",
          "CSAFPID-2714967",
          "CSAFPID-2714992",
          "CSAFPID-2714996",
          "CSAFPID-2714975",
          "CSAFPID-2715025",
          "CSAFPID-2714987",
          "CSAFPID-2715168",
          "CSAFPID-2715178",
          "CSAFPID-2714787",
          "CSAFPID-2714773"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2025-20202",
          "url": "https://api.ncsc.nl/velma/v1/vulnerabilities/2025/CVE-2025-20202.json"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-2714930",
            "CSAFPID-2715313",
            "CSAFPID-2715043",
            "CSAFPID-2715520",
            "CSAFPID-2715459",
            "CSAFPID-2715039",
            "CSAFPID-2714932",
            "CSAFPID-2715445",
            "CSAFPID-2715031",
            "CSAFPID-2715164",
            "CSAFPID-2715478",
            "CSAFPID-2715170",
            "CSAFPID-2715017",
            "CSAFPID-2714865",
            "CSAFPID-2714842",
            "CSAFPID-2714989",
            "CSAFPID-2715536",
            "CSAFPID-2714784",
            "CSAFPID-2715032",
            "CSAFPID-2714746",
            "CSAFPID-2714941",
            "CSAFPID-2714791",
            "CSAFPID-2714942",
            "CSAFPID-2714788",
            "CSAFPID-2714943",
            "CSAFPID-2714798",
            "CSAFPID-2714944",
            "CSAFPID-2714974",
            "CSAFPID-2714985",
            "CSAFPID-2714983",
            "CSAFPID-2714978",
            "CSAFPID-2714971",
            "CSAFPID-2714967",
            "CSAFPID-2714992",
            "CSAFPID-2714996",
            "CSAFPID-2714975",
            "CSAFPID-2715025",
            "CSAFPID-2714987",
            "CSAFPID-2715168",
            "CSAFPID-2715178",
            "CSAFPID-2714787",
            "CSAFPID-2714773"
          ]
        }
      ],
      "title": "CVE-2025-20202"
    }
  ]
}

WID-SEC-W-2025-0973

Vulnerability from csaf_certbund - Published: 2025-05-07 22:00 - Updated: 2025-05-07 22:00

Summary

Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers: Schwachstelle ermöglicht Denial of Service

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.

Angriff: Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers ausnutzen, um einen Denial of Service Angriff durchzuführen.

Betroffene Betriebssysteme: - CISCO Appliance

CVE-2025-20189

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
Cisco IOS XE Cisco	`cpe:/o:cisco:ios_xe:-`	—

References

3 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://sec.cloudapps.cisco.com/security/center/c…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das f\u00fcr Cisco Ger\u00e4te wie z. B. Router und Switches eingesetzt wird.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer aus einem angrenzenden Netzwerk kann eine Schwachstelle in Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- CISCO Appliance",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-0973 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0973.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-0973 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0973"
      },
      {
        "category": "external",
        "summary": "Cisco Security Advisory cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ vom 2025-05-07",
        "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ"
      }
    ],
    "source_lang": "en-US",
    "title": "Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers: Schwachstelle erm\u00f6glicht Denial of Service",
    "tracking": {
      "current_release_date": "2025-05-07T22:00:00.000+00:00",
      "generator": {
        "date": "2025-05-08T10:04:15.661+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2025-0973",
      "initial_release_date": "2025-05-07T22:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-05-07T22:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Cisco IOS XE",
            "product": {
              "name": "Cisco IOS XE",
              "product_id": "T043482",
              "product_identification_helper": {
                "cpe": "cpe:/o:cisco:ios_xe:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Cisco"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-20189",
      "product_status": {
        "known_affected": [
          "T043482"
        ]
      },
      "release_date": "2025-05-07T22:00:00.000+00:00",
      "title": "CVE-2025-20189"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CVE-2025-20189 (GCVE-0-2025-20189)

Solutions

Solutions

Tags

Sightings

Nomenclature