Cisco has published a security advisory highlighting vulnerabilities in the following products on September 24th, 2025. It is recommended that you take the necessary precaution by ensuring your products are always updated.
- Cisco Access Point Software – multiple versions and platforms
- Cisco Catalyst 9500X and 9600X Series Switches – multiple versions
- Cisco IOS XE Software for Catalyst 9XXX Series Switches – multiple versions and platforms
- Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers for Cloud – multiple versions and platforms
- Cisco IOS and IOS XE Software – multiple versions and platforms
- Cisco Industrial Ethernet (IE) Series Switches – multiple versions and platforms
- Cisco SD-WAN vEdge Routers – multiple versions and platforms
- Cisco SD-WAN vEdge Software Release – versions prior to 20.8, 20.9 and 20.10
- Cisco Wireless Access Point (AP) Software – multiple versions and platforms
- Cisco Wireless LAN Controller (WLC) IOS XE Software – multiple versions and platforms
Update 1
On September 29th, 2025, CISA announced that CVE-2025-20352 is actively being exploited in the wild and has included it in its Known Exploited Vulnerabilities (KEV) Catalog.
For more information on this update, you can follow these URLs:
The Guyana National CIRT recommends that users and administrators review this update and apply it where necessary.
PDF Download: Cisco Security Advisory – Update 1
References