PT-2025-20264 · Cisco · Cisco Ios Xe

Published 2025-05-07 · Updated 2025-05-10 · CVE-2025-20192

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this issue. This is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this by sending crafted IKEv1 messages to the affected device, potentially causing the device to reload.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-232

Related Identifiers

BDU:2025-10325

CVE-2025-20192

Affected Products

Cisco Ios Xe

References · 6

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10325 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-20192 · Security Note
• https://twitter.com/CVEnew/status/1920246409300783152 · Twitter Post
• https://t.me/cvetracker/23267 · Telegram Post
• https://twitter.com/transilienceai/status/1921353041523212519 · Twitter Post