CVE-2025-20196
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Exploitability: 3.9 / Impact: 1.4
Source: psirt@cisco.com (Secondary)
Description
A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application hosting environment to stop responding, resulting in a denial of service (DoS) condition.
This vulnerability is due to the improper handling of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to cause the Cisco IOx application hosting environment to stop responding. The IOx process will need to be manually restarted to recover services.
Affected (144)
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.9\(3\)m12 |
| Running on/with | Platform Versions |
|---|---|
Cisco Cgr1000 | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Cisco Ir510 Wpan | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 1.5.2 |
| Running on/with | Platform Versions |
|---|---|
Cisco Ic3000 Industrial Compute Gateway | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.9\(3\)m11 |
| Running on/with | Platform Versions |
|---|---|
Cisco 807 Industrial Integrated Services Router | All versions |
Configuration F
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.9\(3\)m11 |
| Running on/with | Platform Versions |
|---|---|
Cisco 809 Industrial Integrated Services Router | All versions |
Configuration G
| Vulnerable Software | Affected Versions |
|---|---|
| Before 15.9\(3\)m11 |
| Running on/with | Platform Versions |
|---|---|
Cisco 829 Industrial Integrated Services Router | All versions |
Configuration H
| Vulnerable Software | Affected Versions |
|---|---|
| Before 17.15.2 |
| Running on/with | Platform Versions |
|---|---|
Cisco Catalyst 9100 | All versions |
Cisco Catalyst 9105 | All versions |
Cisco Catalyst 9105ax | All versions |
Cisco Catalyst 9105axi | All versions |
Cisco Catalyst 9105axw | All versions |
Cisco Catalyst 9105i | All versions |
Cisco Catalyst 9105w | All versions |
Cisco Catalyst 9115 | All versions |
Cisco Catalyst 9115 Ap | All versions |
Cisco Catalyst 9115ax | All versions |
Cisco Catalyst 9115axe | All versions |
Cisco Catalyst 9115axi | All versions |
Cisco Catalyst 9117 | All versions |
Cisco Catalyst 9117 Ap | All versions |
Cisco Catalyst 9117ax | All versions |
Cisco Catalyst 9117axi | All versions |
Cisco Catalyst 9120 | All versions |
Cisco Catalyst 9120 Ap | All versions |
Cisco Catalyst 9120ax | All versions |
Cisco Catalyst 9120axe | All versions |
Cisco Catalyst 9120axi | All versions |
Cisco Catalyst 9120axp | All versions |
Cisco Catalyst 9124 | All versions |
Cisco Catalyst 9124ax | All versions |
Cisco Catalyst 9124axd | All versions |
Cisco Catalyst 9124axi | All versions |
Cisco Catalyst 9124d | All versions |
Cisco Catalyst 9124e | All versions |
Cisco Catalyst 9124i | All versions |
Cisco Catalyst 9130 | All versions |
Cisco Catalyst 9130 Ap | All versions |
Cisco Catalyst 9130ax | All versions |
Cisco Catalyst 9130axe | All versions |
Cisco Catalyst 9130axi | All versions |
Cisco Catalyst 9136 | All versions |
Cisco Catalyst 9162 | All versions |
Cisco Catalyst 9164 | All versions |
Cisco Catalyst 9166 | All versions |
Cisco Catalyst 9166d1 | All versions |
References (1)
Source: psirt@cisco.com
Vendor Advisory
Timeline
No history available yet.