Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-20144

A vulnerability in the hybrid access control list (ACL) processing of IPv4 packets in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to incorrect handling of packets when a specific configuration of the hybrid ACL exists. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass a configured ACL on the affected device. For more information, see the section of this advisory. Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerability.

Published

2025-03-12T16:15:21.890

Last Modified

2025-08-04T12:02:45.527

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.0 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-284
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios_xr 6.5.1 Yes
Operating System cisco ios_xr 6.5.2 Yes
Operating System cisco ios_xr 6.5.3 Yes
Operating System cisco ios_xr 6.5.92 Yes
Operating System cisco ios_xr 6.5.93 Yes
Operating System cisco ios_xr 6.6.1 Yes
Operating System cisco ios_xr 6.6.2 Yes
Operating System cisco ios_xr 6.6.3 Yes
Operating System cisco ios_xr 6.6.4 Yes
Operating System cisco ios_xr 6.6.25 Yes
Operating System cisco ios_xr 7.0.1 Yes
Operating System cisco ios_xr 7.0.2 Yes
Operating System cisco ios_xr 7.0.90 Yes
Operating System cisco ios_xr 7.1.1 Yes
Operating System cisco ios_xr 7.1.2 Yes
Operating System cisco ios_xr 7.2.1 Yes
Operating System cisco ios_xr 7.2.2 Yes
Operating System cisco ios_xr 7.3.1 Yes
Operating System cisco ios_xr 7.3.2 Yes
Operating System cisco ios_xr 7.3.3 Yes
Operating System cisco ios_xr 7.3.4 Yes
Operating System cisco ios_xr 7.3.5 Yes
Operating System cisco ios_xr 7.3.6 Yes
Operating System cisco ios_xr 7.4.1 Yes
Operating System cisco ios_xr 7.4.2 Yes
Operating System cisco ios_xr 7.5.1 Yes
Operating System cisco ios_xr 7.5.2 Yes
Operating System cisco ios_xr 7.5.3 Yes
Operating System cisco ios_xr 7.5.4 Yes
Operating System cisco ios_xr 7.5.5 Yes
Operating System cisco ios_xr 7.6.1 Yes
Operating System cisco ios_xr 7.6.2 Yes
Operating System cisco ios_xr 7.7.1 Yes
Operating System cisco ios_xr 7.7.2 Yes
Operating System cisco ios_xr 7.7.21 Yes
Operating System cisco ios_xr 7.8.1 Yes
Operating System cisco ios_xr 7.8.2 Yes
Operating System cisco ios_xr 7.8.22 Yes
Operating System cisco ios_xr 7.9.1 Yes
Operating System cisco ios_xr 7.9.2 Yes
Operating System cisco ios_xr 7.10.1 Yes
Operating System cisco ios_xr 7.10.2 Yes
Operating System cisco ios_xr 7.11.1 Yes
Hardware cisco ncs_540-12z20g-sys-a - No
Hardware cisco ncs_540-12z20g-sys-d - No
Hardware cisco ncs_540-24q2c2dd-sys - No
Hardware cisco ncs_540-24q8l2dd-sys - No
Hardware cisco ncs_540-24z8q2c-sys - No
Hardware cisco ncs_540-28z4c-sys-a - No
Hardware cisco ncs_540-28z4c-sys-d - No
Hardware cisco ncs_540-6z14s-sys-d - No
Hardware cisco ncs_540-6z18g-sys-a - No
Hardware cisco ncs_540-6z18g-sys-d - No
Hardware cisco ncs_540-acc-sys - No
Hardware cisco ncs_540-fh-agg - No
Hardware cisco ncs_540-fh-csr-sys - No
Hardware cisco ncs_540x-12z16g-sys-a - No
Hardware cisco ncs_540x-12z16g-sys-d - No
Hardware cisco ncs_540x-16z4g8q2c-a - No
Hardware cisco ncs_540x-16z4g8q2c-d - No
Hardware cisco ncs_540x-16z8q2c-d - No
Hardware cisco ncs_540x-4z14g2q-a - No
Hardware cisco ncs_540x-4z14g2q-d - No
Hardware cisco ncs_540x-6z18g-sys-a - No
Hardware cisco ncs_540x-6z18g-sys-d - No
Hardware cisco ncs_540x-8z16g-sys-a - No
Hardware cisco ncs_540x-8z16g-sys-d - No
Hardware cisco ncs_540x-acc-sys - No
Hardware cisco ncs_5501 - No
Hardware cisco ncs_5501-se - No
Hardware cisco ncs_5502 - No
Hardware cisco ncs_5502-se - No
Hardware cisco ncs_5508 - No
Hardware cisco ncs_5516 - No
Hardware cisco ncs_560-4 - No
Hardware cisco ncs_560-7 - No
Hardware cisco ncs_57b1-5dse-sys - No
Hardware cisco ncs_57b1-6d24-sys - No
Hardware cisco ncs_57c1-48q6-sys - No
Hardware cisco ncs_57c3-mod-sys - No
Hardware cisco ncs_57d2-18dd-sys - No
References