CVE-2025-20192: cisco cisco ios xe software Improper Handling of Undefined Values

Analyzed

Published 07-05-2025Last modified 07-05-2025

Vulnerability summary

CVE-2025-20192 is a high (CVSS 7.7) Improper Handling of Undefined Values vulnerability in cisco cisco ios xe software. EPSS estimates a 0.47% chance of exploitation in the next 30 days, higher than 39.5% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.7/10

010

High · v3.1 (CVE.org)

EPSS score

0.47%

0%100%

Low · +0.03 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

07-05-2025
PublishedVulnerability first disclosed.
07-05-2025
Last modifiedVulnerability information updated.

Description

A vulnerability in the Internet Key Exchange version 1 (IKEv1) implementation of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. The attacker must have valid IKEv1 VPN credentials to exploit this vulnerability. This vulnerability is due to improper validation of IKEv1 phase 2 parameters before the IPsec security association creation request is handed off to the hardware cryptographic accelerator of an affected device. An attacker could exploit this vulnerability by sending crafted IKEv1 messages to the affected device. A successful exploit could allow the attacker to cause the device to reload.

CVSS metrics

2 scores · 2 sources · 1 version

v3.17.7

EPSS trend

Probability

0.47%

Chance of exploitation in the next 30 days

Percentile

40%

Versus all other CVEs

30-day change

Increase +0.03 pp

From 0.44% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-232Improper Handling of Undefined ValuesThe product does not handle or incorrectly handles when a value is not defined or supported for the associated parameter, field, or argument name.

Affected systems

Cisco2 products

cisco ios xe software3.13.0S | 3.13.1S | 3.13.2S | 3.13.3S | 3.13.4S | 3.13.5S | 3.13.6S | 3.13.7S | 3.13.6aS | 3.13.8S | 3.13.9S | 3.13.10S | 3.14.0S | 3.14.1S | 3.14.2S | 3.14.3S | 3.14.4S | 3.15.0S | 3.15.1S | 3.15.2S | 3.15.1cS | 3.15.3S | 3.15.4S | 3.16.0S | 3.16.1aS | 3.16.2S | 3.16.0cS | 3.16.3S | 3.16.4aS | 3.16.4bS | 3.16.5S | 3.16.4dS | 3.16.6S | 3.16.7S | 3.16.6bS | 3.16.7aS | 3.16.7bS | 3.16.8S | 3.16.9S | 3.16.10S | 3.17.0S | 3.17.1S | 3.17.2S | 3.17.3S | 3.17.4S | 16.2.1 | 16.2.2 | 16.3.1 | 16.3.2 | 16.3.3 | 16.3.1a | 16.3.4 | 16.3.5 | 16.3.6 | 16.3.7 | 16.3.8 | 16.3.9 | 16.3.10 | 16.3.11 | 16.4.1 | 16.4.2 | 16.4.3 | 16.5.1 | 16.5.1b | 16.5.2 | 16.5.3 | 3.18.2aSP | 16.6.1 | 16.6.2 | 16.6.3 | 16.6.4 | 16.6.5 | 16.6.6 | 16.6.7 | 16.6.8 | 16.6.9 | 16.6.10 | 16.7.1 | 16.7.2 | 16.7.3 | 16.8.1 | 16.8.1s | 16.8.2 | 16.8.3 | 16.9.1 | 16.9.2 | 16.9.1s | 16.9.3 | 16.9.4 | 16.9.5 | 16.9.6 | 16.9.7 | 16.9.8 | 16.10.1 | 16.10.1a | 16.10.1b | 16.10.1s | 16.10.1e | 16.10.2 | 16.10.3 | 16.11.1 | 16.11.1a | 16.11.2 | 16.11.1s | 16.12.1 | 16.12.1s | 16.12.1a | 16.12.1c | 16.12.2 | 16.12.3 | 16.12.8 | 16.12.2s | 16.12.4 | 16.12.3s | 16.12.5 | 16.12.6 | 16.12.7 | 17.1.1 | 17.1.1s | 17.1.1t | 17.1.3 | 17.2.1 | 17.2.1r | 17.2.1v | 17.2.2 | 17.2.3 | 17.3.1 | 17.3.2 | 17.3.3 | 17.3.1a | 17.3.4 | 17.3.5 | 17.3.4a | 17.3.6 | 17.3.7 | 17.3.8 | 17.3.8a | 17.4.1 | 17.4.2 | 17.4.1a | 17.4.1b | 17.5.1 | 17.5.1a | 17.6.1 | 17.6.2 | 17.6.1a | 17.6.3 | 17.6.1y | 17.6.3a | 17.6.4 | 17.6.5 | 17.6.6 | 17.6.6a | 17.6.5a | 17.6.7 | 17.6.8 | 17.6.8a | 17.7.1 | 17.7.1a | 17.7.2 | 17.10.1 | 17.10.1a | 17.8.1 | 17.8.1a | 17.9.1 | 17.9.2 | 17.9.1a | 17.9.3 | 17.9.2a | 17.9.3a | 17.9.4 | 17.9.5 | 17.9.4a | 17.9.5a | 17.9.5b | 17.9.5e | 17.9.5f | 17.11.1 | 17.11.1a | 17.12.1 | 17.12.1a | 17.12.2 | 17.12.3 | 17.12.2a | 17.12.3a | 17.13.1 | 17.13.1a | 17.14.1 | 17.14.1a
ios_xe3.13.0s | 3.13.1s | 3.13.2s | 3.13.3s | 3.13.4s | 3.13.5s | 3.13.6as | 3.13.6s | 3.13.7s | 3.13.8s | 3.13.9s | 3.13.10s | 3.14.0s | 3.14.1s | 3.14.2s | 3.14.3s | 3.14.4s | 3.15.0s | 3.15.1cs | 3.15.1s | 3.15.2s | 3.15.3s | 3.15.4s | 3.16.0cs | 3.16.0s | 3.16.1as | 3.16.2s | 3.16.3s | 3.16.4as | 3.16.4bs | 3.16.4ds | 3.16.5s | 3.16.6bs | 3.16.6s | 3.16.7as | 3.16.7bs | 3.16.7s | 3.16.8s | 3.16.9s | 3.16.10s | 3.17.0s | 3.17.1s | 3.17.2s | 3.17.3s | 3.17.4s | 3.18.2asp | 16.2.1 | 16.2.2 | 16.3.1 | 16.3.1a | 16.3.2 | 16.3.3 | 16.3.4 | 16.3.5 | 16.3.6 | 16.3.7 | 16.3.8 | 16.3.9 | 16.3.10 | 16.3.11 | 16.4.1 | 16.4.2 | 16.4.3 | 16.5.1 | 16.5.1b | 16.5.2 | 16.5.3 | 16.6.1 | 16.6.2 | 16.6.3 | 16.6.4 | 16.6.5 | 16.6.6 | 16.6.7 | 16.6.8 | 16.6.9 | 16.6.10 | 16.7.1 | 16.7.2 | 16.7.3 | 16.8.1 | 16.8.1s | 16.8.2 | 16.8.3 | 16.9.1 | 16.9.1s | 16.9.2 | 16.9.3 | 16.9.4 | 16.9.5 | 16.9.6 | 16.9.7 | 16.9.8 | 16.10.1 | 16.10.1a | 16.10.1b | 16.10.1e | 16.10.1s | 16.10.2 | 16.10.3 | 16.11.1 | 16.11.1a | 16.11.1s | 16.11.2 | 16.12.1 | 16.12.1a | 16.12.1c | 16.12.1s | 16.12.2 | 16.12.2s | 16.12.3 | 16.12.3s | 16.12.4 | 16.12.5 | 16.12.6 | 16.12.7 | 16.12.8 | 17.1.1 | 17.1.1s | 17.1.1t | 17.1.3 | 17.2.1 | 17.2.1r | 17.2.1v | 17.2.2 | 17.2.3 | 17.3.1 | 17.3.1a | 17.3.2 | 17.3.3 | 17.3.4 | 17.3.4a | 17.3.5 | 17.3.6 | 17.3.7 | 17.3.8 | 17.3.8a | 17.4.1 | 17.4.1a | 17.4.1b | 17.4.2 | 17.5.1 | 17.5.1a | 17.6.1 | 17.6.1a | 17.6.1y | 17.6.2 | 17.6.3 | 17.6.3a | 17.6.4 | 17.6.5 | 17.6.5a | 17.6.6 | 17.6.6a | 17.6.7 | 17.6.8 | 17.6.8a | 17.7.1 | 17.7.1a | 17.7.2 | 17.8.1 | 17.8.1a | 17.9.1 | 17.9.1a | 17.9.2 | 17.9.2a | 17.9.3 | 17.9.3a | 17.9.4 | 17.9.4a | 17.9.5 | 17.9.5a | 17.9.5b | 17.9.5e | 17.9.5f | 17.10.1 | 17.10.1a | 17.11.1 | 17.11.1a | 17.12.1 | 17.12.1a | 17.12.2 | 17.12.2a | 17.12.3 | 17.12.3a | 17.13.1 | 17.13.1a | 17.14.1 | 17.14.1a

1 vendor · 2 products

References

1 links

sec.cloudapps.cisco.com/security/…Vendor Advisory