CVE-2025-20327
EUVD-2025-3103324.09.2025, 18:15
A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted URL in an HTTP request. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| cisco | ios | 15.2\(6\)e2 |
| cisco | ios | 15.2\(6\)e2a |
| cisco | ios | 15.2\(6\)e2b |
| cisco | ios | 15.2\(6\)e3 |
| cisco | ios | 15.2\(7\)e |
| cisco | ios | 15.2\(7\)e0a |
| cisco | ios | 15.2\(7\)e0b |
| cisco | ios | 15.2\(7\)e0s |
| cisco | ios | 15.2\(7\)e1 |
| cisco | ios | 15.2\(7\)e1a |
| cisco | ios | 15.2\(7\)e2 |
| cisco | ios | 15.2\(7\)e2a |
| cisco | ios | 15.2\(7\)e3 |
| cisco | ios | 15.2\(7\)e3k |
| cisco | ios | 15.2\(7\)e4 |
| cisco | ios | 15.2\(7\)e5 |
| cisco | ios | 15.2\(7\)e6 |
| cisco | ios | 15.2\(7\)e7 |
| cisco | ios | 15.2\(7\)e8 |
| cisco | ios | 15.2\(7\)e9 |
| cisco | ios | 15.2\(7\)e10 |
| cisco | ios | 15.2\(7a\)e0b |
| cisco | ios | 15.2\(7b\)e0b |
| cisco | ios | 15.2\(8\)e |
| cisco | ios | 15.2\(8\)e1 |
| cisco | ios | 15.2\(8\)e2 |
| cisco | ios | 15.2\(8\)e3 |
| cisco | ios | 15.2\(8\)e4 |
| cisco | ios | 15.2\(8\)e5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration