Product:
Cisco IOS Software and Cisco IOS XE Software
Summary
A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service condition. This vulnerability is due to a buffer overflow. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2025-20149 |
Exploitation
An attacker with a low-privileged account can exploit this vulnerability by sending specially crafted commands to the CLI of the affected device. If successful, this could lead to the device reloading unexpectedly, causing a denial of service condition.
Affected Products
- Cisco IOS Software: Affected versions may experience unexpected reloads due to the vulnerability in the CLI.
- Cisco IOS XE Software: Similar to IOS, affected versions can be exploited leading to a denial of service.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security patches provided by Cisco for the affected software versions. Additionally, restricting access to the CLI for low-privileged users can help reduce the risk of exploitation.