PT-2025-39295 · Cisco · Cisco Ios +1

Published

2025-09-24

·

Updated

2025-09-25

·

CVE-2025-20149

CVSS v3.1
6.5
VectorAV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

**Name of the Vulnerable Software and Affected Versions**

Cisco IOS Software and Cisco IOS XE Software (affected versions not specified)

**Description**

A flaw exists in the Command Line Interface (CLI) of Cisco IOS Software and Cisco IOS XE Software that could allow a local attacker with authentication to trigger an unexpected device reload, leading to a denial of service (DoS) condition. This issue is caused by a buffer overflow. An attacker with limited privileges can exploit this by using specifically crafted commands at the CLI prompt. A successful exploit could result in a DoS condition.

**Recommendations**

At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

Related Identifiers

CVE-2025-20149

Affected Products

Cisco Ios
Cisco Ios Xe