CVE-2025-20327

Summary

A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted URL in an HTTP request. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Affected Software

VendorProductVersion RangeStatus
CiscoIOS15.2(6)E2affected
CiscoIOS15.2(7)Eaffected
CiscoIOS15.2(6)E2aaffected
CiscoIOS15.2(6)E2baffected
CiscoIOS15.2(7)E1affected
CiscoIOS15.2(7)E0aaffected
CiscoIOS15.2(7)E0baffected
CiscoIOS15.2(7)E0saffected
CiscoIOS15.2(6)E3affected
CiscoIOS15.2(7)E2affected
CiscoIOS15.2(7a)E0baffected
CiscoIOS15.2(7)E3affected
CiscoIOS15.2(7)E1aaffected
CiscoIOS15.2(7b)E0baffected
CiscoIOS15.2(7)E2aaffected
CiscoIOS15.2(7)E4affected
CiscoIOS15.2(7)E3kaffected
CiscoIOS15.2(8)Eaffected
CiscoIOS15.2(8)E1affected
CiscoIOS15.2(7)E5affected
CiscoIOS15.2(7)E6affected
CiscoIOS15.2(8)E2affected
CiscoIOS15.2(7)E7affected
CiscoIOS15.2(8)E3affected
CiscoIOS15.2(7)E8affected
CiscoIOS15.2(8)E4affected
CiscoIOS15.2(7)E9affected
CiscoIOS15.2(8)E5affected
CiscoIOS15.2(7)E10affected

Weaknesses

  • CWE-1287: Improper Validation of Specified Type of Input

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References