cveboard RSS feed

CVE-2025-20209

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability

A vulnerability in the Internet Key Exchange version 2 (IKEv2) function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets.  This vulnerability is due to improper handling of malformed IKEv2 packets. An attacker could exploit this vulnerability by sending malformed IKEv2 packets to an affected device. A successful exploit could allow the attacker to prevent the affected device from processing any control plane UDP packets, resulting in a denial of service (DoS) condition. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Cisco IOS XR Software

Vendor
Cisco
Product
Cisco IOS XR Software
Platforms
Unknown
Default status
unknown
Cisco IOS XR Software · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
6.5.3affectedUnavailableUnavailableUnavailableNone listed
6.6.1affectedUnavailableUnavailableUnavailableNone listed
6.5.2affectedUnavailableUnavailableUnavailableNone listed
6.6.2affectedUnavailableUnavailableUnavailableNone listed
6.5.1affectedUnavailableUnavailableUnavailableNone listed
7.0.1affectedUnavailableUnavailableUnavailableNone listed
6.6.25affectedUnavailableUnavailableUnavailableNone listed
7.0.0affectedUnavailableUnavailableUnavailableNone listed
7.1.1affectedUnavailableUnavailableUnavailableNone listed
6.6.3affectedUnavailableUnavailableUnavailableNone listed
7.0.2affectedUnavailableUnavailableUnavailableNone listed
7.2.0affectedUnavailableUnavailableUnavailableNone listed
7.1.2affectedUnavailableUnavailableUnavailableNone listed
7.2.1affectedUnavailableUnavailableUnavailableNone listed
7.3.1affectedUnavailableUnavailableUnavailableNone listed
7.4.1affectedUnavailableUnavailableUnavailableNone listed
7.2.2affectedUnavailableUnavailableUnavailableNone listed
7.3.2affectedUnavailableUnavailableUnavailableNone listed
7.5.1affectedUnavailableUnavailableUnavailableNone listed
7.3.27affectedUnavailableUnavailableUnavailableNone listed
7.6.1affectedUnavailableUnavailableUnavailableNone listed
7.5.2affectedUnavailableUnavailableUnavailableNone listed
7.7.1affectedUnavailableUnavailableUnavailableNone listed
7.4.2affectedUnavailableUnavailableUnavailableNone listed
7.6.2affectedUnavailableUnavailableUnavailableNone listed
7.8.1affectedUnavailableUnavailableUnavailableNone listed
7.7.2affectedUnavailableUnavailableUnavailableNone listed
7.9.1affectedUnavailableUnavailableUnavailableNone listed
7.8.2affectedUnavailableUnavailableUnavailableNone listed
7.8.22affectedUnavailableUnavailableUnavailableNone listed
7.10.1affectedUnavailableUnavailableUnavailableNone listed
7.7.21affectedUnavailableUnavailableUnavailableNone listed
7.9.2affectedUnavailableUnavailableUnavailableNone listed
7.11.1affectedUnavailableUnavailableUnavailableNone listed
7.10.2affectedUnavailableUnavailableUnavailableNone listed
24.1.1affectedUnavailableUnavailableUnavailableNone listed
7.11.2affectedUnavailableUnavailableUnavailableNone listed
24.2.1affectedUnavailableUnavailableUnavailableNone listed
24.1.2affectedUnavailableUnavailableUnavailableNone listed
24.2.11affectedUnavailableUnavailableUnavailableNone listed