← Back

CVE-2025-20327

nvd nist
Published: Sep 24, 2025Modified: Sep 17, 2026

JSON object

Loading...
7.7
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Exploitability: 3.1 / Impact: 4.0
Source: psirt@cisco.com (Secondary)

Description

A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted URL in an HTTP request. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Affected (29)

Products: Cisco: Ios
Cisco
1 product
Ios
Configuration A
29 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Ios
Version 15.2(6)e2
Ios
Version 15.2(6)e2a
Ios
Version 15.2(6)e2b
Ios
Version 15.2(6)e3
Ios
Version 15.2(7)e0a
Ios
Version 15.2(7)e0b
Ios
Version 15.2(7)e0s
Ios
Version 15.2(7)e10
Ios
Version 15.2(7)e1
Ios
Version 15.2(7)e1a
Ios
Version 15.2(7)e2
Ios
Version 15.2(7)e2a
Ios
Version 15.2(7)e3
Ios
Version 15.2(7)e3k
Ios
Version 15.2(7)e4
Ios
Version 15.2(7)e5
Ios
Version 15.2(7)e6
Ios
Version 15.2(7)e7
Ios
Version 15.2(7)e8
Ios
Version 15.2(7)e9
Ios
Version 15.2(7)e
Ios
Version 15.2(7a)e0b
Ios
Version 15.2(7b)e0b
Ios
Version 15.2(8)e1
Ios
Version 15.2(8)e2
Ios
Version 15.2(8)e3
Ios
Version 15.2(8)e4
Ios
Version 15.2(8)e5
Ios
Version 15.2(8)e

Related CWEs

CWE-1287
Improper Validation of Specified Type of Input
The product receives input that is expected to be of a certain type, but it does not validate or incorrectly validates that the input is actually of the expected type.

References (1)

Source: psirt@cisco.com
Vendor Advisory

Timeline

No history available yet.