- Vulnerability/
- cisco-sa-xrike-9wYGpRGq
cisco-sa-xrike-9wYGpRGq: Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability
First published: Wed Mar 12 2025(Updated: )
A vulnerability in the Internet Key Exchange version 2 (IKEv2) function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets. This vulnerability is due to improper handling of malformed IKEv2 packets. An attacker could exploit this vulnerability by sending malformed IKEv2 packets to an affected device. A successful exploit could allow the attacker to prevent the affected device from processing any control plane UDP packets, resulting in a denial of service (DoS) condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xrike-9wYGpRGqThis advisory is part of the March 2025 release of the Cisco IOS XR Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: March 2025 Semiannual Cisco IOS XR Software Security Advisory Bundled Publication.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS XRv 9000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-xrike-9wYGpRGq?
The vulnerability cisco-sa-xrike-9wYGpRGq is rated as critical due to its potential to disrupt the control plane of affected devices.
How do I fix cisco-sa-xrike-9wYGpRGq?
To mitigate the effects of cisco-sa-xrike-9wYGpRGq, you should apply the relevant software patches provided by Cisco.
What systems are affected by cisco-sa-xrike-9wYGpRGq?
The vulnerability cisco-sa-xrike-9wYGpRGq affects devices running Cisco IOS XR Software.
What type of attack does cisco-sa-xrike-9wYGpRGq enable?
cisco-sa-xrike-9wYGpRGq allows unauthenticated remote attackers to prevent an affected device from processing control plane UDP packets.
How can I determine if my system is vulnerable to cisco-sa-xrike-9wYGpRGq?
You can determine vulnerability to cisco-sa-xrike-9wYGpRGq by checking if your devices are running an affected version of Cisco IOS XR Software.
- collector/cisco-recent
- source/Cisco
- agent/references
- agent/title
- agent/last-modified-date
- agent/severity
- agent/source
- agent/first-publish-date
- agent/description
- agent/type
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- vendor/cisco
- canonical/cisco ios xrv 9000