5.3

CVE-2025-20196

A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application hosting environment to stop responding, resulting in a denial of service (DoS) condition.

 This vulnerability is due to the improper handling of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to cause the Cisco IOx application hosting environment to stop responding. The IOx process will need to be manually restarted to recover services.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Ios Xe Version 16.1.1
Cisco ≫ Ios Xe Version 16.1.2
Cisco ≫ Ios Xe Version 16.1.3
Cisco ≫ Ios Xe Version 16.2.1
Cisco ≫ Ios Xe Version 16.2.2
Cisco ≫ Ios Xe Version 16.3.1
Cisco ≫ Ios Xe Version 16.3.1a
Cisco ≫ Ios Xe Version 16.3.2
Cisco ≫ Ios Xe Version 16.3.3
Cisco ≫ Ios Xe Version 16.3.4
Cisco ≫ Ios Xe Version 16.3.5
Cisco ≫ Ios Xe Version 16.3.5b
Cisco ≫ Ios Xe Version 16.3.6
Cisco ≫ Ios Xe Version 16.3.7
Cisco ≫ Ios Xe Version 16.3.8
Cisco ≫ Ios Xe Version 16.3.9
Cisco ≫ Ios Xe Version 16.3.10
Cisco ≫ Ios Xe Version 16.3.11
Cisco ≫ Ios Xe Version 16.4.1
Cisco ≫ Ios Xe Version 16.4.2
Cisco ≫ Ios Xe Version 16.4.3
Cisco ≫ Ios Xe Version 16.5.1
Cisco ≫ Ios Xe Version 16.5.1a
Cisco ≫ Ios Xe Version 16.5.1b
Cisco ≫ Ios Xe Version 16.5.2
Cisco ≫ Ios Xe Version 16.5.3
Cisco ≫ Ios Xe Version 17.1.1
Cisco ≫ Ios Xe Version 17.1.1a
Cisco ≫ Ios Xe Version 17.1.1s
Cisco ≫ Ios Xe Version 17.1.1t
Cisco ≫ Ios Xe Version 17.1.3
Cisco ≫ Ios Xe Version 17.2.1
Cisco ≫ Ios Xe Version 17.2.1a
Cisco ≫ Ios Xe Version 17.2.1r
Cisco ≫ Ios Xe Version 17.2.1v
Cisco ≫ Ios Xe Version 17.2.2
Cisco ≫ Ios Xe Version 17.2.3
Cisco ≫ Ios Xe Version 17.3.1
Cisco ≫ Ios Xe Version 17.3.1a
Cisco ≫ Ios Xe Version 17.3.1w
Cisco ≫ Ios Xe Version 17.3.1x
Cisco ≫ Ios Xe Version 17.3.1z
Cisco ≫ Ios Xe Version 17.3.2
Cisco ≫ Ios Xe Version 17.3.2a
Cisco ≫ Ios Xe Version 17.3.3
Cisco ≫ Ios Xe Version 17.3.4
Cisco ≫ Ios Xe Version 17.3.4a
Cisco ≫ Ios Xe Version 17.3.4b
Cisco ≫ Ios Xe Version 17.3.4c
Cisco ≫ Ios Xe Version 17.3.5
Cisco ≫ Ios Xe Version 17.3.5a
Cisco ≫ Ios Xe Version 17.3.5b
Cisco ≫ Ios Xe Version 17.3.6
Cisco ≫ Ios Xe Version 17.3.7
Cisco ≫ Ios Xe Version 17.3.8
Cisco ≫ Ios Xe Version 17.3.8a
Cisco ≫ Ios Xe Version 17.4.1
Cisco ≫ Ios Xe Version 17.4.1a
Cisco ≫ Ios Xe Version 17.4.1b
Cisco ≫ Ios Xe Version 17.4.2
Cisco ≫ Ios Xe Version 17.4.2a
Cisco ≫ Ios Xe Version 17.5.1
Cisco ≫ Ios Xe Version 17.5.1a
Cisco ≫ Ios Xe Version 17.6.1
Cisco ≫ Ios Xe Version 17.6.1a
Cisco ≫ Ios Xe Version 17.6.1w
Cisco ≫ Ios Xe Version 17.6.1x
Cisco ≫ Ios Xe Version 17.6.1y
Cisco ≫ Ios Xe Version 17.6.1z
Cisco ≫ Ios Xe Version 17.6.1z1
Cisco ≫ Ios Xe Version 17.6.2
Cisco ≫ Ios Xe Version 17.6.3
Cisco ≫ Ios Xe Version 17.6.3a
Cisco ≫ Ios Xe Version 17.6.4
Cisco ≫ Ios Xe Version 17.6.5
Cisco ≫ Ios Xe Version 17.6.5a
Cisco ≫ Ios Xe Version 17.6.6
Cisco ≫ Ios Xe Version 17.6.6a
Cisco ≫ Ios Xe Version 17.6.7
Cisco ≫ Ios Xe Version 17.6.8
Cisco ≫ Ios Xe Version 17.6.8a
Cisco ≫ Ios Xe Version 17.7.1
Cisco ≫ Ios Xe Version 17.7.1a
Cisco ≫ Ios Xe Version 17.7.1b
Cisco ≫ Ios Xe Version 17.7.2
Cisco ≫ Ios Xe Version 17.8.1
Cisco ≫ Ios Xe Version 17.8.1a
Cisco ≫ Ios Xe Version 17.9.1
Cisco ≫ Ios Xe Version 17.9.1a
Cisco ≫ Ios Xe Version 17.9.1w
Cisco ≫ Ios Xe Version 17.9.1x
Cisco ≫ Ios Xe Version 17.9.1x1
Cisco ≫ Ios Xe Version 17.9.1y
Cisco ≫ Ios Xe Version 17.9.1y1
Cisco ≫ Ios Xe Version 17.9.2
Cisco ≫ Ios Xe Version 17.9.2a
Cisco ≫ Ios Xe Version 17.9.3
Cisco ≫ Ios Xe Version 17.9.3a
Cisco ≫ Ios Xe Version 17.9.4
Cisco ≫ Ios Xe Version 17.9.4a
Cisco ≫ Ios Xe Version 17.9.5
Cisco ≫ Ios Xe Version 17.9.5a
Cisco ≫ Ios Xe Version 17.9.5b
Cisco ≫ Ios Xe Version 17.9.5e
Cisco ≫ Ios Xe Version 17.9.5f
Cisco ≫ Ios Xe Version 17.9.6
Cisco ≫ Ios Xe Version 17.9.6a
Cisco ≫ Ios Xe Version 17.10.1
Cisco ≫ Ios Xe Version 17.10.1a
Cisco ≫ Ios Xe Version 17.10.1b
Cisco ≫ Ios Xe Version 17.11.1
Cisco ≫ Ios Xe Version 17.11.1a
Cisco ≫ Ios Xe Version 17.11.99sw
Cisco ≫ Ios Xe Version 17.12.1
Cisco ≫ Ios Xe Version 17.12.1a
Cisco ≫ Ios Xe Version 17.12.1w
Cisco ≫ Ios Xe Version 17.12.1x
Cisco ≫ Ios Xe Version 17.12.1y
Cisco ≫ Ios Xe Version 17.12.1z
Cisco ≫ Ios Xe Version 17.12.1z1
Cisco ≫ Ios Xe Version 17.12.1z2
Cisco ≫ Ios Xe Version 17.12.1z4
Cisco ≫ Ios Xe Version 17.12.2
Cisco ≫ Ios Xe Version 17.12.2a
Cisco ≫ Ios Xe Version 17.12.3
Cisco ≫ Ios Xe Version 17.12.3a
Cisco ≫ Ios Xe Version 17.12.4
Cisco ≫ Ios Xe Version 17.12.4a
Cisco ≫ Ios Xe Version 17.12.4b
Cisco ≫ Ios Xe Version 17.13.1
Cisco ≫ Ios Xe Version 17.13.1a
Cisco ≫ Ios Xe Version 17.14.1
Cisco ≫ Ios Xe Version 17.14.1a
Cisco ≫ Ios Xe Version 17.15.2
Cisco ≫ Ios Xe Version 17.15.2a
Cisco ≫ Ios Xe Version 17.15.2b
Cisco ≫ Ios Xe Version 17.15.2c
Cisco ≫ Cgr1000 Firmware Version < 15.9\(3\)m12
   Cisco ≫ Cgr1000 Version -
Cisco ≫ Ir510 Wpan Firmware Version -
   Cisco ≫ Ir510 Wpan Version -
Cisco ≫ Ios Xe Version < 17.15.2
   Cisco ≫ Catalyst 9100 Version -
   Cisco ≫ Catalyst 9105 Version -
   Cisco ≫ Catalyst 9105ax Version -
   Cisco ≫ Catalyst 9105axi Version -
   Cisco ≫ Catalyst 9105axw Version -
   Cisco ≫ Catalyst 9105i Version -
   Cisco ≫ Catalyst 9105w Version -
   Cisco ≫ Catalyst 9115 Version -
   Cisco ≫ Catalyst 9115 Ap Version -
   Cisco ≫ Catalyst 9115ax Version -
   Cisco ≫ Catalyst 9115axe Version -
   Cisco ≫ Catalyst 9115axi Version -
   Cisco ≫ Catalyst 9117 Version -
   Cisco ≫ Catalyst 9117 Ap Version -
   Cisco ≫ Catalyst 9117ax Version -
   Cisco ≫ Catalyst 9117axi Version -
   Cisco ≫ Catalyst 9120 Version -
   Cisco ≫ Catalyst 9120 Ap Version -
   Cisco ≫ Catalyst 9120ax Version -
   Cisco ≫ Catalyst 9120axe Version -
   Cisco ≫ Catalyst 9120axi Version -
   Cisco ≫ Catalyst 9120axp Version -
   Cisco ≫ Catalyst 9124 Version -
   Cisco ≫ Catalyst 9124ax Version -
   Cisco ≫ Catalyst 9124axd Version -
   Cisco ≫ Catalyst 9124axi Version -
   Cisco ≫ Catalyst 9124d Version -
   Cisco ≫ Catalyst 9124e Version -
   Cisco ≫ Catalyst 9124i Version -
   Cisco ≫ Catalyst 9130 Version -
   Cisco ≫ Catalyst 9130 Ap Version -
   Cisco ≫ Catalyst 9130ax Version -
   Cisco ≫ Catalyst 9130axe Version -
   Cisco ≫ Catalyst 9130axi Version -
   Cisco ≫ Catalyst 9136 Version -
   Cisco ≫ Catalyst 9162 Version -
   Cisco ≫ Catalyst 9164 Version -
   Cisco ≫ Catalyst 9166 Version -
   Cisco ≫ Catalyst 9166d1 Version -
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.4% 0.328
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Cisco PSIRT 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-307 Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-dos-95Fqnf7b
Vendor Advisory