Bypass Vulnerability in Cisco IOS XR Software's Hybrid ACL Processing

CVE-2025-20144

What is CVE-2025-20144?

A vulnerability exists in the hybrid access control list (ACL) processing of IPv4 packets within Cisco IOS XR Software. This issue allows an unauthenticated, remote attacker the potential to bypass existing ACL configurations due to incorrect packet handling when a specific ACL setup is in place. Exploiting this vulnerability enables unauthorized traffic to traverse an affected device, which can compromise network security. Cisco has issued software updates to remediate this issue and also provides workarounds for affected customers.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References