CVE-2025-20144

Summary

CVE-2025-20144 is a vulnerability affecting the hybrid access control list (ACL) processing of IPv4 packets in Cisco IOS XR Software. This issue enables unauthenticated, remote attackers to bypass configured ACLs. The vulnerability stems from the incorrect handling of packets when a specific configuration of the hybrid ACL exists. attackers can exploit this flaw by sending malicious traffic to an affected device, potentially gaining unauthorized access. Cisco has issued software updates to address this vulnerability and offers workarounds as temporary solutions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.