CVE-2025-20221: Infoleak
A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters. This vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by sending a crafted packet to the affected device. A successful exploit could allow the attacker to bypass the Layer 3 and Layer 4 traffic filters and inject a crafted packet into the network.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20221?
CVE-2025-20221 has been classified with a medium severity level, indicating it poses a moderate risk to affected systems.
How do I fix CVE-2025-20221?
To mitigate CVE-2025-20221, users should apply the relevant Cisco IOS XE SD-WAN software updates as recommended by Cisco.
What systems are affected by CVE-2025-20221?
CVE-2025-20221 affects Cisco IOS XE SD-WAN Software deployments that utilize vulnerable packet filtering features.
Can CVE-2025-20221 be exploited remotely?
Yes, CVE-2025-20221 can be exploited by unauthenticated remote attackers to bypass Layer 3 and Layer 4 traffic filters.
What causes CVE-2025-20221?
CVE-2025-20221 is caused by improper traffic filtering conditions on affected devices within the Cisco IOS XE SD-WAN Software.