PT-2025-39302 · Cisco · Cisco Ios Xe

Published 2025-09-24 · Updated 2025-09-25 · CVE-2025-20315

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software (affected versions not specified)

Description A flaw exists in the Network-Based Application Recognition (NBAR) feature that may allow a remote attacker to cause a device to reload, resulting in a denial of service (DoS) condition. This issue stems from improper handling of malformed Control and Provisioning of Wireless Access Points (CAPWAP) packets. An attacker could exploit this by sending crafted CAPWAP packets through an affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-805

Related Identifiers

BDU:2025-11722

CVE-2025-20315

Affected Products

Cisco Ios Xe

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2025-20315 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/724900 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nbar-dos-LAvwTmeT · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11722 · Security Note
• https://twitter.com/0dayPublishing/status/1970903558678626813 · Twitter Post
• https://t.me/CVEtracker/33264 · Telegram Post
• https://twitter.com/CVEnew/status/1970996086488830394 · Twitter Post
• https://twitter.com/CveFindCom/status/1970905994306736587 · Twitter Post
• https://twitter.com/leftSECURE/status/1971300024782111038 · Twitter Post
• https://twitter.com/grok/status/1971300576807063975 · Twitter Post