CISCO-CVE-2025-20160

HIGH8.1

Cisco IOS and IOS XE Software TACACS+ Authentication Bypass Vulnerability

Published Sep 24, 2025

Modified 5 months ago

Affected Packages

Cisco IOS

CiscoIOS

Affected versions:

12.2(6)I115.1(3)SVR115.1(3)SVR1015.1(3)SVR215.1(3)SVR315.1(3)SVS15.1(3)SVS115.1(3)SVT115.1(3)SVT215.1(3)SVT3+156 more

Cisco IOS XE

CiscoIOSXE

Affected versions:

16.10.116.10.1a16.10.1b16.10.1c16.10.1d16.10.1e16.10.1f16.10.1g16.10.1s16.10.2+252 more

CVSS Analysis

CVSS v3.1

8.1

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

HighAC:H

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

8.1/CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Upstream

Ecosystems

Timeline

PublishedSep 24, 2025

ModifiedOct 1, 2025