Product:
TACACS+
Summary
A vulnerability in the implementation of the TACACS+ protocol in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to view sensitive data or bypass authentication. This vulnerability exists because the system does not properly check whether the required TACACS+ shared secret is configured. A successful exploit could allow the attacker to view sensitive information in a TACACS+ message or bypass authentication and gain access to the affected device.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.1 | CVE-2025-20160 |
Exploitation
An attacker can exploit this vulnerability by intercepting and reading unencrypted TACACS+ messages or by impersonating the TACACS+ server. By doing so, they can falsely accept arbitrary authentication requests, allowing them to gain unauthorized access to the affected device.
Affected Products
- Cisco IOS Software: Vulnerable due to improper handling of TACACS+ shared secrets.
- Cisco IOS XE Software: Also affected by the same vulnerability in TACACS+ implementation.
Mitigation
To mitigate this vulnerability, it is essential to ensure that the TACACS+ shared secret is properly configured and that all TACACS+ messages are encrypted. Regularly updating the software and applying security patches provided by Cisco can also help protect against potential exploits.