Product:
Cisco IOS Software
Summary
A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted URL in an HTTP request.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.7 | CVE-2025-20327 |
Exploitation
An attacker can exploit this vulnerability by sending a specially crafted URL in an HTTP request to the affected device. If successful, this could lead to the device reloading and resulting in a denial of service condition. The attack requires low privileges and does not need user interaction.
Affected Products
- Cisco IOS Software: Vulnerable due to improper input validation in the web UI, allowing for potential denial of service.
Mitigation
To mitigate this vulnerability, it is recommended to apply any available patches or updates from Cisco. Additionally, restricting access to the web UI and monitoring for unusual activity can help reduce the risk of exploitation.