Cisco IOS Software on Cisco Catalyst 1000 and 2960L Switches Access Control List Bypass Vulnerability
A vulnerability in the access control list (ACL) programming of Cisco IOS Software that is running on Cisco Catalyst 1000 Switches and Cisco Catalyst 2960L Switches could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the use of both an IPv4 ACL and a dynamic ACL of IP Source Guard on the same interface, which is an unsupported configuration. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an ACL on the affected device. Note: Cisco documentation has been updated to reflect that this is an unsupported configuration. However, Cisco is publishing this advisory because the device will not prevent an administrator from configuring both features on the same interface. There are no plans to implement the ability to configure both features on the same interface on Cisco Catalyst 1000 or Catalyst 2960L Switches. Cisco has not released software updates that address this vulnerability. There are workarounds that address this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-20137US | — | — | ||
A vulnerability in the access control list (ACL) programming of Cisco IOS Software that is running on Cisco Catalyst 1000 Switches and Cisco Catalyst 2960L Switches could allow an… | ||||
references
External citations — patches, advisories, analysis.
remediations (66)
- Fixed12.2(6)I1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVR3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVS
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVS1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVT4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU11
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU20
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVU21
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVV4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVW
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVW1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVX
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.1(3)SVX1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(5a)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(5b)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(5c)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E0c
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E1a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E1s
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E2b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(6)E3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E0a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E0s
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E10
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E11
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E12
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E13
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E14
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E15
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E1a
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E3k
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E7
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7)E9
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7a)E0b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(7b)E0b
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(8)E
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(8)E1
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(8)E2
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(8)E3
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(8)E4
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(8)E5
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(8)E6
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - Fixed15.2(8)E8
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan