CVE-2025-20137

🗓️ 07 May 2025 18:15:36Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 15 Views

Vulnerability in Cisco IOS allows attackers to bypass access control lists on specific switches.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of the Cisco IOS operating system’s access control list mechanism allows a perpetrator to circumvent existing security restrictions.	27 Aug 202500:00	–	bdu_fstec
Cisco	Cisco IOS Software on Cisco Catalyst 1000 and 2960L Switches Access Control List Bypass Vulnerability	7 May 202516:00	–	cisco
CNNVD	Cisco IOS 访问控制错误漏洞	7 May 202500:00	–	cnnvd
CNVD	Cisco IOS Access Control Error Vulnerability (CNVD-2025-15478)	14 May 202500:00	–	cnvd
CVE	CVE-2025-20137	7 May 202517:31	–	cve
Cvelist	CVE-2025-20137	7 May 202517:31	–	cvelist
EUVD	EUVD-2025-13909	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco IOS XE Software	8 May 202508:43	–	ncsc
Positive Technologies	PT-2025-20247 · Cisco · Cisco Ios	7 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-20137	9 May 202518:08	–	redhatcve

NVD

Node

cisco iosMatch15.2(5a)e

OR

cisco iosMatch15.2(5b)e

OR

cisco iosMatch15.2(5c)e

OR

cisco iosMatch15.2(6)e

OR

cisco iosMatch15.2(6)e0c

OR

cisco iosMatch15.2(6)e1

OR

cisco iosMatch15.2(6)e2

OR

cisco iosMatch15.2(6)e2b

OR

cisco iosMatch15.2(6)e3

OR

cisco iosMatch15.2(7)e

OR

cisco iosMatch15.2(7)e0a

OR

cisco iosMatch15.2(7)e0s

OR

cisco iosMatch15.2(7)e1

OR

cisco iosMatch15.2(7)e1a

OR

cisco iosMatch15.2(7)e2

OR

cisco iosMatch15.2(7)e3

OR

cisco iosMatch15.2(7)e3k

OR

cisco iosMatch15.2(7)e4

OR

cisco iosMatch15.2(7)e5

OR

cisco iosMatch15.2(7)e6

OR

cisco iosMatch15.2(7)e7

OR

cisco iosMatch15.2(7)e8

OR

cisco iosMatch15.2(7)e9

OR

cisco iosMatch15.2(7)e10

OR

cisco iosMatch15.2(7)e11

OR

cisco iosMatch15.2(7)e12

OR

cisco iosMatch15.2(7a)e0b

OR

cisco iosMatch15.2(7b)e0b

OR

cisco iosMatch15.2(8)e

OR

cisco iosMatch15.2(8)e1

OR

cisco iosMatch15.2(8)e2

OR

cisco iosMatch15.2(8)e3

OR

cisco iosMatch15.2(8)e4

OR

cisco iosMatch15.2(8)e5

OR

cisco iosMatch15.2(8)e6

AND

cisco catalyst_1000-16fp-2g-lMatch-

OR

cisco catalyst_1000-16p-2g-lMatch-

OR

cisco catalyst_1000-16t-2g-lMatch-

OR

cisco catalyst_1000-16t-e-2g-lMatch-

OR

cisco catalyst_1000-24fp-4g-lMatch-

OR

cisco catalyst_1000-24fp-4x-lMatch-

OR

cisco catalyst_1000-24p-4g-lMatch-

OR

cisco catalyst_1000-24p-4x-lMatch-

OR

cisco catalyst_1000-24pp-4g-lMatch-

OR

cisco catalyst_1000-24t-4g-lMatch-

OR

cisco catalyst_1000-24t-4x-lMatch-

OR

cisco catalyst_1000-48fp-4g-lMatch-

OR

cisco catalyst_1000-48fp-4x-lMatch-

OR

cisco catalyst_1000-48p-4g-lMatch-

OR

cisco catalyst_1000-48p-4x-lMatch-

OR

cisco catalyst_1000-48pp-4g-lMatch-

OR

cisco catalyst_1000-48t-4g-lMatch-

OR

cisco catalyst_1000-48t-4x-lMatch-

OR

cisco catalyst_1000-8fp-2g-lMatch-

OR

cisco catalyst_1000-8fp-e-2g-lMatch-

OR

cisco catalyst_1000-8p-2g-lMatch-

OR

cisco catalyst_1000-8p-e-2g-lMatch-

OR

cisco catalyst_1000-8t-2g-lMatch-

OR

cisco catalyst_1000-8t-e-2g-lMatch-

OR

cisco catalyst_1000fe-24p-4g-lMatch-

OR

cisco catalyst_1000fe-24t-4g-lMatch-

OR

cisco catalyst_1000fe-48p-4g-lMatch-

OR

cisco catalyst_1000fe-48t-4g-lMatch-

OR

cisco catalyst_2960l-16ps-llMatch-

OR

cisco catalyst_2960l-16ts-llMatch-

OR

cisco catalyst_2960l-24pq-llMatch-

OR

cisco catalyst_2960l-24ps-llMatch-

OR

cisco catalyst_2960l-24tq-llMatch-

OR

cisco catalyst_2960l-24ts-llMatch-

OR

cisco catalyst_2960l-48pq-llMatch-

OR

cisco catalyst_2960l-48ps-llMatch-

OR

cisco catalyst_2960l-48tq-llMatch-

OR

cisco catalyst_2960l-48ts-llMatch-

OR

cisco catalyst_2960l-8ps-llMatch-

OR

cisco catalyst_2960l-8ts-llMatch-

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipsgacl-pg6qfZk

17 Jun 2026 08:40Current

CVSS 3.14.7

EPSS0.00228

cve identifier access control list cisco ios software catalyst 1000 switches catalyst 2960l switches remote attacker unsupported configuration.