Vulnerability details
CVE-2025-20160
Cisco IOS XE SoftwareCisco IOS
CVSS 3.1
8.1High
Official description
A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication. This vulnerability exists because the system does not properly check whether the required TACACS+ shared secret is configured. A machine-in-the-middle attacker could exploit this vulnerability by intercepting and reading unencrypted TACACS+ messages or impersonating the TACACS+ server and falsely accepting arbitrary authentication requests. A successful exploit could allow the attacker to view sensitive information in a TACACS+ message or bypass authentication and gain access to the affected device.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.1High | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
200 of 359| Vendor | Product | Versions | Source |
|---|---|---|---|
| Cisco | Cisco IOS XE Software | 16.10.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1c | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1d | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1e | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1f | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1g | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.1s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.10.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.11.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.11.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.11.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.11.1s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.11.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.10a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.11 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.12 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1c | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1t | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1w | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1x | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1y | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1z1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.1z2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.2a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.2s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.3s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.4a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.5a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.5b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.6a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.12.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.5a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.6.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1c | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1d | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1e | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.1s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.8.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.1s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.5f | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 16.9.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.1.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.1.1s | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.1.1t | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.1.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.10.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.10.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.10.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.11.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.11.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.11.99SW | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1w | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1x | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1y | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1z | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1z1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1z2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1z3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.1z4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.2a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.4a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.4b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.5a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.5b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.12.5c | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.13.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.13.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.14.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.14.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.1w | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.1x | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.1y | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.2a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.2b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.2c | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.15.3b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.2.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.2.1r | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.2.1v | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.2.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.2.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.1w | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.1x | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.1z | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.2a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.4a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.4b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.4c | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.5a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.5b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.3.8a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.4.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.4.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.4.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.4.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.4.2a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.5.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.5.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1w | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1x | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1y | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1z | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.1z1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.5a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.6a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.8 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.6.8a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.7.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.7.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.7.1b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.7.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.8.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.8.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1w | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1x | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1x1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1y | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.1y1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.2a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.3a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.4a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.5 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.5a | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.5b | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.5e | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.5f | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco IOS XE Software | 17.9.6 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-09-24
- Last updated
- 2026-02-26
- State
- Published
- Assigner (CNA)
- cisco
Exploit prediction (EPSS)
0.44%
Probability of exploitation in 30 days
39.1%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-287Improper Authentication