CVE-2025-20149

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software (affected versions not specified)

Description A flaw exists in the Command Line Interface (CLI) of Cisco IOS Software and Cisco IOS XE Software. A local attacker with authentication may be able to cause an unexpected device reload, leading to a denial of service (DoS) condition. This is due to a buffer overflow. An attacker with limited privileges can exploit this by using specially crafted commands at the CLI prompt.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.