Access Control Bypass in Cisco IOS XR Software

CVE-2025-20159

What is CVE-2025-20159?

A flaw in the management interface's access control list (ACL) processing in Cisco IOS XR Software permits an unauthenticated, remote attacker to bypass established ACLs. This vulnerability arises due to the lack of support for management interface ACLs on the Packet I/O infrastructure, which affects features such as SSH, NetConf, and gRPC. An attacker can exploit this vulnerability by sending traffic to a device running the affected software, potentially bypassing ingress ACLs and gaining unauthorized access to the management interface.

References