PT-2025-37065 · Cisco · Cisco Ios Xr

Published 2025-09-10 · Updated 2025-09-15 · CVE-2025-20340

Positive Technologies (AI Summary)

CVSS v3.1

7.4

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software (affected versions not specified)

Description: A vulnerability in the Address Resolution Protocol (ARP) implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a broadcast storm, leading to a denial of service (DoS) condition on an affected device. This issue is due to how Cisco IOS XR Software processes a high, sustained rate of ARP traffic hitting the management interface. An attacker could exploit this vulnerability by sending an excessive amount of traffic to the management interface, overwhelming its ARP processing capabilities. A successful exploit could result in degraded device performance, loss of management connectivity, and complete unresponsiveness of the system, leading to a DoS condition.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2025-11018

CVE-2025-20340

Affected Products

Cisco Ios Xr

References · 9

• https://bdu.fstec.ru/vul/2025-11018 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-arp-storm-EjUU55yM · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20340 · Security Note
• https://twitter.com/0dayPublishing/status/1965829915342782644 · Twitter Post
• https://twitter.com/grok/status/1966523064126226598 · Twitter Post
• https://twitter.com/ZeroPathLabs/status/1965817510172758473 · Twitter Post
• https://twitter.com/cracbot/status/1967543986748526989 · Twitter Post
• https://twitter.com/CVEnew/status/1965920228065337648 · Twitter Post
• https://twitter.com/TweetThreatNews/status/1966634135063040291 · Twitter Post