CVEvulnerability

CVE-2025-20149

6.5 MEDIUM Published 2025-09-24 Modified 2026-09-26 Official page ↗
Status
Analyzed
Published
2025-09-24
Last modified
2026-09-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weaknesses
CWE-120

Description

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to a buffer overflow. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Affected configurations

• cisco ios 15.0\(1\)ex • cisco ios 15.0\(2\)ea • cisco ios 15.0\(2\)ea1 • cisco ios 15.0\(2\)ej • cisco ios 15.0\(2\)ej1 • cisco ios 15.0\(2\)ek • cisco ios 15.0\(2\)ek1 • cisco ios 15.0\(2\)ex • cisco ios 15.0\(2\)ex1 • cisco ios 15.0\(2\)ex2 • cisco ios 15.0\(2\)ex3 • cisco ios 15.0\(2\)ex4 • cisco ios 15.0\(2\)ex5 • cisco ios 15.0\(2\)ex8 • cisco ios 15.0\(2\)ex10 • cisco ios 15.0\(2\)ex11 • cisco ios 15.0\(2\)ex12 • cisco ios 15.0\(2\)ex13 • cisco ios 15.0\(2\)ey • cisco ios 15.0\(2\)ey1 • cisco ios 15.0\(2\)ey2 • cisco ios 15.0\(2\)ey3 • cisco ios 15.0\(2\)ez • cisco ios 15.0\(2\)se • cisco ios 15.0\(2\)se1 • cisco ios 15.0\(2\)se2 • cisco ios 15.0\(2\)se3 • cisco ios 15.0\(2\)se4 • cisco ios 15.0\(2\)se5 • cisco ios 15.0\(2\)se6 • cisco ios 15.0\(2\)se7 • cisco ios 15.0\(2\)se8 • cisco ios 15.0\(2\)se9 • cisco ios 15.0\(2\)se10 • cisco ios 15.0\(2\)se10a • cisco ios 15.0\(2\)se11 • cisco ios 15.0\(2\)se12 • cisco ios 15.0\(2\)se13 • cisco ios 15.0\(2a\)ex5 • cisco ios 15.1\(1\)sg • cisco ios 15.1\(1\)sg1 • cisco ios 15.1\(1\)sg2 • cisco ios 15.1\(1\)sy • cisco ios 15.1\(1\)sy1 • cisco ios 15.1\(1\)sy2 • cisco ios 15.1\(1\)sy3 • cisco ios 15.1\(1\)sy4 • cisco ios 15.1\(1\)sy5 • cisco ios 15.1\(1\)sy6 • cisco ios 15.1\(2\)s • cisco ios 15.1\(2\)s1 • cisco ios 15.1\(2\)s2 • cisco ios 15.1\(2\)sg • cisco ios 15.1\(2\)sg1 • cisco ios 15.1\(2\)sg2 • cisco ios 15.1\(2\)sg3 • cisco ios 15.1\(2\)sg4 • cisco ios 15.1\(2\)sg5 • cisco ios 15.1\(2\)sg6 • cisco ios 15.1\(2\)sg7 … and 1099 more

Related

Weakness · CWE (1)

  • CWE-120 Buffer Copy without Checking Size of Input weakness

References