Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2025-20327

A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected de

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
cisco

Description

A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted URL in an HTTP request. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco IOS

  • 15.2(6)E2affected
  • 15.2(7)Eaffected
  • 15.2(6)E2aaffected
  • 15.2(6)E2baffected
  • 15.2(7)E1affected
  • 15.2(7)E0aaffected
  • 15.2(7)E0baffected
  • 15.2(7)E0saffected
  • 15.2(6)E3affected
  • 15.2(7)E2affected
  • 15.2(7a)E0baffected
  • 15.2(7)E3affected
  • 15.2(7)E1aaffected
  • 15.2(7b)E0baffected
  • 15.2(7)E2aaffected
  • 15.2(7)E4affected
  • 15.2(7)E3kaffected
  • 15.2(8)Eaffected
  • 15.2(8)E1affected
  • 15.2(7)E5affected
  • 15.2(7)E6affected
  • 15.2(8)E2affected
  • 15.2(7)E7affected
  • 15.2(8)E3affected
  • 15.2(7)E8affected
  • 15.2(8)E4affected
  • 15.2(7)E9affected
  • 15.2(8)E5affected
  • 15.2(7)E10affected

References