CVE-2025-20196

EPSS 0.05%
Published 07.05.2025 17:38:10
Last modified 11.07.2025 14:55:33
Source psirt@cisco.com
Teams watchlist Login
Open Login

A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application hosting environment to stop responding, resulting in a denial of service (DoS) condition.

 This vulnerability is due to the improper handling of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to cause the Cisco IOx application hosting environment to stop responding. The IOx process will need to be manually restarted to recover services.

Affected products Warnungen 0 Metrics 2 CWE 1 References 4

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD

This information is available to logged-in users.

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Ios Xe Version16.1.1

Cisco ≫ Ios Xe Version16.1.2

Cisco ≫ Ios Xe Version16.1.3

Cisco ≫ Ios Xe Version16.2.1

Cisco ≫ Ios Xe Version16.2.2

Cisco ≫ Ios Xe Version16.3.1

Cisco ≫ Ios Xe Version16.3.1a

Cisco ≫ Ios Xe Version16.3.2

Cisco ≫ Ios Xe Version16.3.3

Cisco ≫ Ios Xe Version16.3.4

Cisco ≫ Ios Xe Version16.3.5

Cisco ≫ Ios Xe Version16.3.5b

Cisco ≫ Ios Xe Version16.3.6

Cisco ≫ Ios Xe Version16.3.7

Cisco ≫ Ios Xe Version16.3.8

Cisco ≫ Ios Xe Version16.3.9

Cisco ≫ Ios Xe Version16.3.10

Cisco ≫ Ios Xe Version16.3.11

Cisco ≫ Ios Xe Version16.4.1

Cisco ≫ Ios Xe Version16.4.2

Cisco ≫ Ios Xe Version16.4.3

Cisco ≫ Ios Xe Version16.5.1

Cisco ≫ Ios Xe Version16.5.1a

Cisco ≫ Ios Xe Version16.5.1b

Cisco ≫ Ios Xe Version16.5.2

Cisco ≫ Ios Xe Version16.5.3

Cisco ≫ Ios Xe Version17.1.1

Cisco ≫ Ios Xe Version17.1.1a

Cisco ≫ Ios Xe Version17.1.1s

Cisco ≫ Ios Xe Version17.1.1t

Cisco ≫ Ios Xe Version17.1.3

Cisco ≫ Ios Xe Version17.2.1

Cisco ≫ Ios Xe Version17.2.1a

Cisco ≫ Ios Xe Version17.2.1r

Cisco ≫ Ios Xe Version17.2.1v

Cisco ≫ Ios Xe Version17.2.2

Cisco ≫ Ios Xe Version17.2.3

Cisco ≫ Ios Xe Version17.3.1

Cisco ≫ Ios Xe Version17.3.1a

Cisco ≫ Ios Xe Version17.3.1w

Cisco ≫ Ios Xe Version17.3.1x

Cisco ≫ Ios Xe Version17.3.1z

Cisco ≫ Ios Xe Version17.3.2

Cisco ≫ Ios Xe Version17.3.2a

Cisco ≫ Ios Xe Version17.3.3

Cisco ≫ Ios Xe Version17.3.4

Cisco ≫ Ios Xe Version17.3.4a

Cisco ≫ Ios Xe Version17.3.4b

Cisco ≫ Ios Xe Version17.3.4c

Cisco ≫ Ios Xe Version17.3.5

Cisco ≫ Ios Xe Version17.3.5a

Cisco ≫ Ios Xe Version17.3.5b

Cisco ≫ Ios Xe Version17.3.6

Cisco ≫ Ios Xe Version17.3.7

Cisco ≫ Ios Xe Version17.3.8

Cisco ≫ Ios Xe Version17.3.8a

Cisco ≫ Ios Xe Version17.4.1

Cisco ≫ Ios Xe Version17.4.1a

Cisco ≫ Ios Xe Version17.4.1b

Cisco ≫ Ios Xe Version17.4.2

Cisco ≫ Ios Xe Version17.4.2a

Cisco ≫ Ios Xe Version17.5.1

Cisco ≫ Ios Xe Version17.5.1a

Cisco ≫ Ios Xe Version17.6.1

Cisco ≫ Ios Xe Version17.6.1a

Cisco ≫ Ios Xe Version17.6.1w

Cisco ≫ Ios Xe Version17.6.1x

Cisco ≫ Ios Xe Version17.6.1y

Cisco ≫ Ios Xe Version17.6.1z

Cisco ≫ Ios Xe Version17.6.1z1

Cisco ≫ Ios Xe Version17.6.2

Cisco ≫ Ios Xe Version17.6.3

Cisco ≫ Ios Xe Version17.6.3a

Cisco ≫ Ios Xe Version17.6.4

Cisco ≫ Ios Xe Version17.6.5

Cisco ≫ Ios Xe Version17.6.5a

Cisco ≫ Ios Xe Version17.6.6

Cisco ≫ Ios Xe Version17.6.6a

Cisco ≫ Ios Xe Version17.6.7

Cisco ≫ Ios Xe Version17.6.8

Cisco ≫ Ios Xe Version17.6.8a

Cisco ≫ Ios Xe Version17.7.1

Cisco ≫ Ios Xe Version17.7.1a

Cisco ≫ Ios Xe Version17.7.1b

Cisco ≫ Ios Xe Version17.7.2

Cisco ≫ Ios Xe Version17.8.1

Cisco ≫ Ios Xe Version17.8.1a

Cisco ≫ Ios Xe Version17.9.1

Cisco ≫ Ios Xe Version17.9.1a

Cisco ≫ Ios Xe Version17.9.1w

Cisco ≫ Ios Xe Version17.9.1x

Cisco ≫ Ios Xe Version17.9.1x1

Cisco ≫ Ios Xe Version17.9.1y

Cisco ≫ Ios Xe Version17.9.1y1

Cisco ≫ Ios Xe Version17.9.2

Cisco ≫ Ios Xe Version17.9.2a

Cisco ≫ Ios Xe Version17.9.3

Cisco ≫ Ios Xe Version17.9.3a

Cisco ≫ Ios Xe Version17.9.4

Cisco ≫ Ios Xe Version17.9.4a

Cisco ≫ Ios Xe Version17.9.5

Cisco ≫ Ios Xe Version17.9.5a

Cisco ≫ Ios Xe Version17.9.5b

Cisco ≫ Ios Xe Version17.9.5e

Cisco ≫ Ios Xe Version17.9.5f

Cisco ≫ Ios Xe Version17.9.6

Cisco ≫ Ios Xe Version17.9.6a

Cisco ≫ Ios Xe Version17.10.1

Cisco ≫ Ios Xe Version17.10.1a

Cisco ≫ Ios Xe Version17.10.1b

Cisco ≫ Ios Xe Version17.11.1

Cisco ≫ Ios Xe Version17.11.1a

Cisco ≫ Ios Xe Version17.11.99sw

Cisco ≫ Ios Xe Version17.12.1

Cisco ≫ Ios Xe Version17.12.1a

Cisco ≫ Ios Xe Version17.12.1w

Cisco ≫ Ios Xe Version17.12.1x

Cisco ≫ Ios Xe Version17.12.1y

Cisco ≫ Ios Xe Version17.12.1z

Cisco ≫ Ios Xe Version17.12.1z1

Cisco ≫ Ios Xe Version17.12.1z2

Cisco ≫ Ios Xe Version17.12.1z4

Cisco ≫ Ios Xe Version17.12.2

Cisco ≫ Ios Xe Version17.12.2a

Cisco ≫ Ios Xe Version17.12.3

Cisco ≫ Ios Xe Version17.12.3a

Cisco ≫ Ios Xe Version17.12.4

Cisco ≫ Ios Xe Version17.12.4a

Cisco ≫ Ios Xe Version17.12.4b

Cisco ≫ Ios Xe Version17.13.1

Cisco ≫ Ios Xe Version17.13.1a

Cisco ≫ Ios Xe Version17.14.1

Cisco ≫ Ios Xe Version17.14.1a

Cisco ≫ Ios Xe Version17.15.2

Cisco ≫ Ios Xe Version17.15.2a

Cisco ≫ Ios Xe Version17.15.2b

Cisco ≫ Ios Xe Version17.15.2c

Cisco ≫ Cgr1000 Firmware Version < 15.9\(3\)m12

Cisco ≫ Cgr1000 Version-

Cisco ≫ Ir510 Wpan Firmware Version-

Cisco ≫ Ir510 Wpan Version-

Cisco ≫ Ic3000 Industrial Compute Gateway Firmware Version < 1.5.2

Cisco ≫ Ic3000 Industrial Compute Gateway Version-

Cisco ≫ 807 Industrial Integrated Services Router Firmware Version < 15.9\(3\)m11

Cisco ≫ 807 Industrial Integrated Services Router Version-

Cisco ≫ 809 Industrial Integrated Services Router Firmware Version < 15.9\(3\)m11

Cisco ≫ 809 Industrial Integrated Services Router Version-

Cisco ≫ 829 Industrial Integrated Services Router Firmware Version < 15.9\(3\)m11

Cisco ≫ 829 Industrial Integrated Services Router Version-

Cisco ≫ Ios Xe Version < 17.15.2

   Cisco ≫ Catalyst 9100 Version-
   Cisco ≫ Catalyst 9105 Version-
   Cisco ≫ Catalyst 9105ax Version-
   Cisco ≫ Catalyst 9105axi Version-
   Cisco ≫ Catalyst 9105axw Version-
   Cisco ≫ Catalyst 9105i Version-
   Cisco ≫ Catalyst 9105w Version-
   Cisco ≫ Catalyst 9115 Version-
   Cisco ≫ Catalyst 9115 Ap Version-
   Cisco ≫ Catalyst 9115ax Version-
   Cisco ≫ Catalyst 9115axe Version-
   Cisco ≫ Catalyst 9115axi Version-
   Cisco ≫ Catalyst 9117 Version-
   Cisco ≫ Catalyst 9117 Ap Version-
   Cisco ≫ Catalyst 9117ax Version-
   Cisco ≫ Catalyst 9117axi Version-
   Cisco ≫ Catalyst 9120 Version-
   Cisco ≫ Catalyst 9120 Ap Version-
   Cisco ≫ Catalyst 9120ax Version-
   Cisco ≫ Catalyst 9120axe Version-
   Cisco ≫ Catalyst 9120axi Version-
   Cisco ≫ Catalyst 9120axp Version-
   Cisco ≫ Catalyst 9124 Version-
   Cisco ≫ Catalyst 9124ax Version-
   Cisco ≫ Catalyst 9124axd Version-
   Cisco ≫ Catalyst 9124axi Version-
   Cisco ≫ Catalyst 9124d Version-
   Cisco ≫ Catalyst 9124e Version-
   Cisco ≫ Catalyst 9124i Version-
   Cisco ≫ Catalyst 9130 Version-
   Cisco ≫ Catalyst 9130 Ap Version-
   Cisco ≫ Catalyst 9130ax Version-
   Cisco ≫ Catalyst 9130axe Version-
   Cisco ≫ Catalyst 9130axi Version-
   Cisco ≫ Catalyst 9136 Version-
   Cisco ≫ Catalyst 9162 Version-
   Cisco ≫ Catalyst 9164 Version-
   Cisco ≫ Catalyst 9166 Version-
   Cisco ≫ Catalyst 9166d1 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.155

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
psirt@cisco.com	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE-307 Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-dos-95Fqnf7b

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-20196

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-20196

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-20196

EUVD