What is CVE-2025-20145?

CVE-2025-20145 is a medium-severity vulnerability in Cisco 8608, classified under CWE-264. CVSS score: 5.8/10. Published 2025-03-12.

How severe is CVE-2025-20145?

Medium severity. CVSS v3 base score is 5.8 out of 10.

Vulnerability in Cisco 8608

CVE-2025-20145

A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets a…

EPSS: 0.004 (29.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N.

Affected products

Cisco 8608
Cisco 8804
Cisco 8808
Cisco 8812
Cisco 8818
Cisco Ios Xr Software — versions 6.5.3, 6.5.2, 6.5.92
Cisco Ios_xr — versions 6.5.1, 6.5.2, 6.5.3
Cisco Ncs_5504
Cisco Ncs_5508
Cisco Ncs_5516

Weakness classification (CWE)

CWE-264

References

psirt@cisco.com (Vendor Advisory)
psirt@cisco.com (Technical Description)

Frequently asked questions

What is CVE-2025-20145?: CVE-2025-20145 is a medium-severity vulnerability in Cisco 8608, classified under CWE-264. CVSS score: 5.8/10. Published 2025-03-12.
How severe is CVE-2025-20145?: Medium severity. CVSS v3 base score is 5.8 out of 10.