The vulnerability of the Cisco AnyConnect VPN server in the microprogramming software for Cisco Meraki MX and Cisco Meraki Z series network devices, known as Teleworker Gateway, allows a intruder to cause a service failure.

🗓️ 20 Jun 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Cisco AnyConnect VPN server on Meraki Teleworker Gateways may cause service disruption due to uninitialized variable in VPN setup.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-20271	18 Jun 202517:30	–	circl
Cisco	Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service Vulnerability	18 Jun 202516:00	–	cisco
Tenable Nessus	Cisco Meraki 16.2 / 17 / 18.1 < 18.107.13 / 18.2 < 18.211.6 / 19.1 < 19.1.8 DoS (cisco-sa-meraki-mx-vpn-dos-sM5GCfm7)	2 Jul 202500:00	–	nessus
CNNVD	Cisco Meraki Z和Cisco Meraki MX 安全漏洞	18 Jun 202500:00	–	cnnvd
CVE	CVE-2025-20271	18 Jun 202516:38	–	cve
Cvelist	CVE-2025-20271 Cisco Meraki MX and Z Series AnyConnect VPN with Client Certificate Authentication Denial of Service Vulnerability	18 Jun 202516:38	–	cvelist
EUVD	EUVD-2025-18656	3 Oct 202520:07	–	euvd
NCSC	Vulnerability fixed in Cisco AnyConnect VPN for Meraki MX and Z	19 Jun 202508:42	–	ncsc
NVD	CVE-2025-20271	18 Jun 202517:15	–	nvd
Positive Technologies	PT-2025-26180 · Cisco · Cisco Meraki Z Series +2	18 Jun 202500:00	–	ptsecurity

Vulners

Node

cisco_systems cisco_meraki_mxRange<18.107.13

OR

cisco_systems cisco_meraki_mxRange<18.211.6

OR

cisco_systems cisco_meraki_mxRange<19.1.8

OR

cisco_systems cisco_meraki_mxMatch16.2

OR

cisco_systems cisco_meraki_mxRange<17

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-meraki-mx-vpn-dos-sM5GCfm7
web	www.web.nvd.nist.gov/view/vuln/detail

20 Jun 2025 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 27.8

CVSS 38.6

EPSS0.00477

Cisco AnyConnect Meraki Teleworker Gateways Uninitialized variable VPN session setup