Packet Filtering Bypass Vulnerability in Cisco IOS XE SD-WAN Software

CVE-2025-20221

What is CVE-2025-20221?

A vulnerability exists in the packet filtering capabilities of Cisco IOS XE SD-WAN Software that permits unauthenticated remote attackers to evade Layer 3 and Layer 4 traffic filters. This issue arises from inadequate filtering conditions on affected devices, enabling an attacker to exploit the vulnerability by sending specially crafted packets. Successfully executing this attack allows the attacker to circumvent established traffic filters, potentially leading to malicious packet injection into the network.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References