CVE-2025-20221

CRÍTICO 9.1CVE-2025-20221 · Published 07/05/2025 · updated 17/06/2026

En resumen

CVE-2025-20221 es una vulnerabilidad CRÍTICO (CVSS 9.1).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.64%, mayor que el 50.7% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters. This vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by sending a crafted packet to the affected device. A successful exploit could allow the attacker to bypass the Layer 3 and Layer 4 traffic filters and inject a crafted packet into the network.

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-bypass-HHUVujdn · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free