CVE-2025-20145

MEDIUM Year: 2025
CVSS v3 Score
5.8
Medium
Weakness Type
CWE-264
View all →

Vulnerability Description

A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled incorrectly when they are received on an ingress interface on one line card and destined out of an egress interface on another line card where the egress ACL is configured. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an egress ACL on the affected device. For more information about this vulnerability, see the section of this advisory. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Related Vulnerabilities

CVE-2016-5847

MEDIUM
CVSS:5.8(Medium)

SAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain privileges via a hard link attack on files extracted from an archive, possibly related to SAP Security ...

CWE-2642016

CVE-2017-6620

MEDIUM
CVSS:5.8(Medium)

A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass the remote management AC...

CWE-2642017

CVE-2019-1969

MEDIUM
CVSS:5.8(Medium)

A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perf...

CWE-2642019

CVE-2019-1978

MEDIUM
CVSS:5.8(Medium)

A vulnerability in the stream reassembly component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an ...

CWE-2642019

CVE-2019-1980

MEDIUM
CVSS:5.8(Medium)

A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an...

CWE-2642019

CVE-2019-1981

MEDIUM
CVSS:5.8(Medium)

A vulnerability in the normalization functionality of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an ...

CWE-2642019