CVE-2025-20192: High severity cisco ios xe vulnerability
A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability. This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20192?
CVE-2025-20192 has a severity rating that indicates it could lead to a denial of service condition under specific circumstances.
Who is affected by CVE-2025-20192?
CVE-2025-20192 affects devices running the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software.
How do I fix CVE-2025-20192?
To mitigate CVE-2025-20192, users should apply the latest patches or updates provided by Cisco for affected IOS XE Software versions.
Can CVE-2025-20192 be exploited without authentication?
No, an attacker must have valid IKEv1 VPN credentials to exploit CVE-2025-20192.
What kind of attack does CVE-2025-20192 allow?
CVE-2025-20192 allows an authenticated remote attacker to cause a denial of service (DoS) condition.