CVE-2025-20221

A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters. This vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by sending a crafted packet to the affected device. A successful exploit could allow the attacker to bypass the Layer 3 and Layer 4 traffic filters and inject a crafted packet into the network.

• cisco ios xe 16.12.13 • cisco ios xe 17.1.1 • cisco ios xe 17.1.1s • cisco ios xe 17.1.1t • cisco ios xe 17.1.3 • cisco ios xe 17.2.1 • cisco ios xe 17.2.1a • cisco ios xe 17.2.1r • cisco ios xe 17.2.1v • cisco ios xe 17.2.2 • cisco ios xe 17.2.3 • cisco ios xe 17.3.1 • cisco ios xe 17.3.1a • cisco ios xe 17.3.2 • cisco ios xe 17.3.2a • cisco ios xe 17.3.3 • cisco ios xe 17.3.4 • cisco ios xe 17.3.4a • cisco ios xe 17.3.5 • cisco ios xe 17.3.6 • cisco ios xe 17.3.7 • cisco ios xe 17.3.8 • cisco ios xe 17.3.8a • cisco ios xe 17.4.1 • cisco ios xe 17.4.1a • cisco ios xe 17.4.1b • cisco ios xe 17.4.2 • cisco ios xe 17.5.1 • cisco ios xe 17.5.1a • cisco ios xe 17.6.1 • cisco ios xe 17.6.1a • cisco ios xe 17.6.1y • cisco ios xe 17.6.2 • cisco ios xe 17.6.3 • cisco ios xe 17.6.3a • cisco ios xe 17.6.4 • cisco ios xe 17.6.5 • cisco ios xe 17.6.5a • cisco ios xe 17.6.6 • cisco ios xe 17.6.6a • cisco ios xe 17.6.7 • cisco ios xe 17.6.8 • cisco ios xe 17.6.8a • cisco ios xe 17.7.1 • cisco ios xe 17.7.1a • cisco ios xe 17.7.2 • cisco ios xe 17.8.1 • cisco ios xe 17.8.1a • cisco ios xe 17.9.1 • cisco ios xe 17.9.1a • cisco ios xe 17.9.2 • cisco ios xe 17.9.2a • cisco ios xe 17.9.3 • cisco ios xe 17.9.3a • cisco ios xe 17.9.4 • cisco ios xe 17.9.4a • cisco ios xe 17.9.5 • cisco ios xe 17.9.5a • cisco ios xe 17.9.5b • cisco ios xe 17.9.5e … and 29 more