CVEvulnerability
CVE-2025-20149
6.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-09-24
- Last modified
- 2026-09-26
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
- Weaknesses
- CWE-120
Description
A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.
This vulnerability is due to a buffer overflow. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Affected configurations
• cisco ios 15.0\(1\)ex
• cisco ios 15.0\(2\)ea
• cisco ios 15.0\(2\)ea1
• cisco ios 15.0\(2\)ej
• cisco ios 15.0\(2\)ej1
• cisco ios 15.0\(2\)ek
• cisco ios 15.0\(2\)ek1
• cisco ios 15.0\(2\)ex
• cisco ios 15.0\(2\)ex1
• cisco ios 15.0\(2\)ex2
• cisco ios 15.0\(2\)ex3
• cisco ios 15.0\(2\)ex4
• cisco ios 15.0\(2\)ex5
• cisco ios 15.0\(2\)ex8
• cisco ios 15.0\(2\)ex10
• cisco ios 15.0\(2\)ex11
• cisco ios 15.0\(2\)ex12
• cisco ios 15.0\(2\)ex13
• cisco ios 15.0\(2\)ey
• cisco ios 15.0\(2\)ey1
• cisco ios 15.0\(2\)ey2
• cisco ios 15.0\(2\)ey3
• cisco ios 15.0\(2\)ez
• cisco ios 15.0\(2\)se
• cisco ios 15.0\(2\)se1
• cisco ios 15.0\(2\)se2
• cisco ios 15.0\(2\)se3
• cisco ios 15.0\(2\)se4
• cisco ios 15.0\(2\)se5
• cisco ios 15.0\(2\)se6
• cisco ios 15.0\(2\)se7
• cisco ios 15.0\(2\)se8
• cisco ios 15.0\(2\)se9
• cisco ios 15.0\(2\)se10
• cisco ios 15.0\(2\)se10a
• cisco ios 15.0\(2\)se11
• cisco ios 15.0\(2\)se12
• cisco ios 15.0\(2\)se13
• cisco ios 15.0\(2a\)ex5
• cisco ios 15.1\(1\)sg
• cisco ios 15.1\(1\)sg1
• cisco ios 15.1\(1\)sg2
• cisco ios 15.1\(1\)sy
• cisco ios 15.1\(1\)sy1
• cisco ios 15.1\(1\)sy2
• cisco ios 15.1\(1\)sy3
• cisco ios 15.1\(1\)sy4
• cisco ios 15.1\(1\)sy5
• cisco ios 15.1\(1\)sy6
• cisco ios 15.1\(2\)s
• cisco ios 15.1\(2\)s1
• cisco ios 15.1\(2\)s2
• cisco ios 15.1\(2\)sg
• cisco ios 15.1\(2\)sg1
• cisco ios 15.1\(2\)sg2
• cisco ios 15.1\(2\)sg3
• cisco ios 15.1\(2\)sg4
• cisco ios 15.1\(2\)sg5
• cisco ios 15.1\(2\)sg6
• cisco ios 15.1\(2\)sg7
… and 1099 more
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness