{"id":"CVE-2025-20209","state":"PUBLISHED","title":"Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability","description":"A vulnerability in the Internet Key Exchange version 2 (IKEv2) function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets. \r\n\r\nThis vulnerability is due to improper handling of malformed IKEv2 packets. An attacker could exploit this vulnerability by sending malformed IKEv2 packets to an affected device. A successful exploit could allow the attacker to prevent the affected device from processing any control plane UDP packets, resulting in a denial of service (DoS) condition.\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.","publishedAt":"2025-03-12T16:13:12.340Z","updatedAt":"2025-03-12T17:51:32.083Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","source":"cisco"},"assigner":"cisco","products":["Cisco Cisco IOS XR Software"],"affected":[{"vendor":"Cisco","product":"Cisco IOS XR Software","defaultStatus":"unknown","versions":[{"version":"6.5.3","status":"affected"},{"version":"6.6.1","status":"affected"},{"version":"6.5.2","status":"affected"},{"version":"6.6.2","status":"affected"},{"version":"6.5.1","status":"affected"},{"version":"7.0.1","status":"affected"},{"version":"6.6.25","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"7.1.1","status":"affected"},{"version":"6.6.3","status":"affected"},{"version":"7.0.2","status":"affected"},{"version":"7.2.0","status":"affected"},{"version":"7.1.2","status":"affected"},{"version":"7.2.1","status":"affected"},{"version":"7.3.1","status":"affected"},{"version":"7.4.1","status":"affected"},{"version":"7.2.2","status":"affected"},{"version":"7.3.2","status":"affected"},{"version":"7.5.1","status":"affected"},{"version":"7.3.27","status":"affected"},{"version":"7.6.1","status":"affected"},{"version":"7.5.2","status":"affected"},{"version":"7.7.1","status":"affected"},{"version":"7.4.2","status":"affected"},{"version":"7.6.2","status":"affected"},{"version":"7.8.1","status":"affected"},{"version":"7.7.2","status":"affected"},{"version":"7.9.1","status":"affected"},{"version":"7.8.2","status":"affected"},{"version":"7.8.22","status":"affected"},{"version":"7.10.1","status":"affected"},{"version":"7.7.21","status":"affected"},{"version":"7.9.2","status":"affected"},{"version":"7.11.1","status":"affected"},{"version":"7.10.2","status":"affected"},{"version":"24.1.1","status":"affected"},{"version":"7.11.2","status":"affected"},{"version":"24.2.1","status":"affected"},{"version":"24.1.2","status":"affected"},{"version":"24.2.11","status":"affected"}]}],"references":["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xrike-9wYGpRGq","https://blog.apnic.net/2024/09/02/crafting-endless-as-paths-in-bgp/"],"weaknesses":["CWE-770"],"ingestedAt":"2026-10-29T20:08:39.238Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/20xxx/CVE-2025-20209.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-20209","state":"PUBLISHED","datePublished":"2025-03-12T16:13:12.340Z","dateUpdated":"2025-03-12T17:51:32.083Z","assignerShortName":"cisco","assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","dateReserved":"2024-10-10T19:15:13.231Z"},"containers":{"cna":{"title":"Cisco IOS XR Software Internet Key Exchange Version 2 Denial of Service Vulnerability","descriptions":[{"lang":"en","value":"A vulnerability in the Internet Key Exchange version 2 (IKEv2) function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to prevent an affected device from processing any control plane UDP packets. \r\n\r\nThis vulnerability is due to improper handling of malformed IKEv2 packets. An attacker could exploit this vulnerability by sending malformed IKEv2 packets to an affected device. A successful exploit could allow the attacker to prevent the affected device from processing any control plane UDP packets, resulting in a denial of service (DoS) condition.\r\nCisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability."}],"affected":[{"vendor":"Cisco","product":"Cisco IOS XR Software","defaultStatus":"unknown","versions":[{"version":"6.5.3","status":"affected"},{"version":"6.6.1","status":"affected"},{"version":"6.5.2","status":"affected"},{"version":"6.6.2","status":"affected"},{"version":"6.5.1","status":"affected"},{"version":"7.0.1","status":"affected"},{"version":"6.6.25","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"7.1.1","status":"affected"},{"version":"6.6.3","status":"affected"},{"version":"7.0.2","status":"affected"},{"version":"7.2.0","status":"affected"},{"version":"7.1.2","status":"affected"},{"version":"7.2.1","status":"affected"},{"version":"7.3.1","status":"affected"},{"version":"7.4.1","status":"affected"},{"version":"7.2.2","status":"affected"},{"version":"7.3.2","status":"affected"},{"version":"7.5.1","status":"affected"},{"version":"7.3.27","status":"affected"},{"version":"7.6.1","status":"affected"},{"version":"7.5.2","status":"affected"},{"version":"7.7.1","status":"affected"},{"version":"7.4.2","status":"affected"},{"version":"7.6.2","status":"affected"},{"version":"7.8.1","status":"affected"},{"version":"7.7.2","status":"affected"},{"version":"7.9.1","status":"affected"},{"version":"7.8.2","status":"affected"},{"version":"7.8.22","status":"affected"},{"version":"7.10.1","status":"affected"},{"version":"7.7.21","status":"affected"},{"version":"7.9.2","status":"affected"},{"version":"7.11.1","status":"affected"},{"version":"7.10.2","status":"affected"},{"version":"24.1.1","status":"affected"},{"version":"7.11.2","status":"affected"},{"version":"24.2.1","status":"affected"},{"version":"24.1.2","status":"affected"},{"version":"24.2.11","status":"affected"}]}],"references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xrike-9wYGpRGq","name":"cisco-sa-xrike-9wYGpRGq"},{"url":"https://blog.apnic.net/2024/09/02/crafting-endless-as-paths-in-bgp/","name":"Crafting endless AS-PATHS in BGP"}],"metrics":[{"format":"cvssV3_1","cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-770","lang":"en","description":"Allocation of Resources Without Limits or Throttling","type":"cwe"}]}],"providerMetadata":{"shortName":"cisco","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","dateUpdated":"2025-03-12T16:13:12.340Z"},"exploits":[{"lang":"en","value":"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}],"source":{"advisory":"cisco-sa-xrike-9wYGpRGq","discovery":"INTERNAL","defects":["CSCwk64612"]}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-03-12T17:50:42.688446Z","id":"CVE-2025-20209","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-03-12T17:51:32.083Z"}}]}}}