Packet Filtering Bypass Vulnerability in Cisco IOS XE SD-WAN Software

CVE-2025-20221

Summary

A vulnerability exists in the packet filtering capabilities of Cisco IOS XE SD-WAN Software that permits unauthenticated remote attackers to evade Layer 3 and Layer 4 traffic filters. This issue arises from inadequate filtering conditions on affected devices, enabling an attacker to exploit the vulnerability by sending specially crafted packets. Successfully executing this attack allows the attacker to circumvent established traffic filters, potentially leading to malicious packet injection into the network.

References