جزئیات آسیبپذیری
CVE-2025-20160
Cisco IOS XE SoftwareCisco IOS
CVSS 3.1
8.1بالا
شرح رسمی (انگلیسی)
A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication. This vulnerability exists because the system does not properly check whether the required TACACS+ shared secret is configured. A machine-in-the-middle attacker could exploit this vulnerability by intercepting and reading unencrypted TACACS+ messages or impersonating the TACACS+ server and falsely accepting arbitrary authentication requests. A successful exploit could allow the attacker to view sensitive information in a TACACS+ message or bypass authentication and gain access to the affected device.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.1بالا | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
محصولات آسیبپذیر
۲۰۰ از ۳۵۹| فروشنده | محصول | نسخهها | منبع |
|---|---|---|---|
| Cisco | Cisco IOS XE Software | 16.10.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1c | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1d | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1e | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1f | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1g | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.11.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.11.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.11.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.11.1s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.11.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.10a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1c | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1t | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1w | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1x | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1y | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1z1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1z2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.2a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.2s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.3s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.4a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.5a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.5b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.6a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.5a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1c | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1d | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1e | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.1s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.5f | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.1.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.1.1s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.1.1t | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.1.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.10.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.10.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.10.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.11.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.11.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.11.99SW | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1w | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1x | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1y | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1z | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1z1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1z2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1z3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1z4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.2a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.4a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.4b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.5a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.5b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.5c | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.13.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.13.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.14.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.14.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.1w | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.1x | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.1y | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.2a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.2b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.2c | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.3b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.2.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.2.1r | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.2.1v | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.1w | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.1x | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.1z | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.2a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.4a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.4b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.4c | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.5a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.5b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.8a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.4.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.4.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.4.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.4.2a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.5.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.5.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1w | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1x | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1y | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1z | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1z1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.5a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.6a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.8a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.7.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.7.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.7.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.7.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.8.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1w | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1x | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1x1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1y | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1y1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.2a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.4a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.5a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.5b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.5e | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.5f | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.6 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیبپذیریهای تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۷/۰۲
- آخرین بهروزرسانی
- ۱۴۰۴/۱۲/۰۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیشبینی بهرهبرداری (EPSS)
۰٫۴۴٪
احتمال بهرهبرداری در ۳۰ روز
۳۹٫۱٪
صدک (نسبت به همهی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- خیر
- وضعیت بهرهبرداری
- ندارد
- اثر فنی
- کامل
ضعفها (CWE)
- CWE-287Improper Authentication