CVE-2025-20221

A vulnerability in the packet filtering features of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to bypass Layer 3 and Layer 4 traffic filters. This vulnerability is due to improper traffic filtering conditions on an affected device. An attacker could exploit this vulnerability by sending a crafted packet to the affected device. A successful exploit could allow the attacker to bypass the Layer 3 and Layer 4 traffic filters and inject a crafted packet into the network.

• CWE-200

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-bypass-HHUVujdnVendor Advisory

Published

May 7, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20216A vulnerability in the web interface of Cisco Catalyst SD-WA…4.3
• CVE-2025-20217A vulnerability in the packet inspection functionality of th…8.6
• CVE-2025-20218A vulnerability in the web-based management interface of Cis…4.9
• CVE-2025-20219A vulnerability in the implementation of access control rule…5.3
• CVE-2025-2022Ashlar-Vellum Cobalt VS File Parsing Type Confusion Remote C…7.8
• CVE-2025-20220A vulnerability in the CLI of Cisco Secure Firewall Manageme…6
• CVE-2025-20222A vulnerability in the RADIUS proxy feature for the IPsec VP…8.6
• CVE-2025-20223A vulnerability in Cisco Catalyst Center, formerly Cisco DNA…4.7
• CVE-2025-20224A vulnerability in the Internet Key Exchange Version 2 (IKEv…5.8
• CVE-2025-20225A vulnerability in the Internet Key Exchange Version 2 (IKEv…5.8
• CVE-2025-20226In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and…5.7
• CVE-2025-20227In Splunk Enterprise versions below 9.4.1, 9.3.3, 9.2.5, and…4.3