CVE-2025-20159: Cisco IOS XR Software Management Interface ACL Bypass Vulnerability
A vulnerability in the management interface access control list (ACL) processing feature in Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass configured ACLs for the SSH, NetConf, and gRPC features. This vulnerability exists because management interface ACLs have not been supported on Cisco IOS XR Software Packet I/O infrastructure platforms for Linux-handled features such as SSH, NetConf, or gRPC. An attacker could exploit this vulnerability by attempting to send traffic to an affected device. A successful exploit could allow the attacker to bypass an ingress ACL that is applied on the management interface of the affected device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20159?
The severity of CVE-2025-20159 is considered high due to the potential for unauthenticated remote access.
How do I fix CVE-2025-20159?
To fix CVE-2025-20159, apply the recommended Cisco IOS XR Software patches that address the ACL processing vulnerability.
Who is affected by CVE-2025-20159?
Users of Cisco IOS XR Software managing SSH, NetConf, and gRPC features are affected by CVE-2025-20159.
What impact does CVE-2025-20159 have?
CVE-2025-20159 allows attackers to bypass configured access control lists, potentially leading to unauthorized access.
Is remediation mandatory for CVE-2025-20159?
Yes, remediation is mandatory for CVE-2025-20159 to secure the management interface against unauthorized access.