8.6

CVE-2025-20315

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, causing a denial of service (DoS) condition.

 This vulnerability is due to improper handling of malformed Control and Provisioning of Wireless Access Points (CAPWAP) packets. An attacker could exploit this vulnerability by sending malformed CAPWAP packets through an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorCisco
≫
Product Cisco IOS XE Software
Version 3.7.0S
Status affected
Version 3.7.1S
Status affected
Version 3.7.2S
Status affected
Version 3.7.3S
Status affected
Version 3.7.4S
Status affected
Version 3.7.5S
Status affected
Version 3.7.6S
Status affected
Version 3.7.7S
Status affected
Version 3.7.4aS
Status affected
Version 3.7.2tS
Status affected
Version 3.7.0bS
Status affected
Version 3.7.1aS
Status affected
Version 3.8.0S
Status affected
Version 3.8.1S
Status affected
Version 3.8.2S
Status affected
Version 3.9.1S
Status affected
Version 3.9.0S
Status affected
Version 3.9.2S
Status affected
Version 3.9.1aS
Status affected
Version 3.9.0aS
Status affected
Version 3.11.1S
Status affected
Version 3.11.2S
Status affected
Version 3.11.0S
Status affected
Version 3.11.3S
Status affected
Version 3.11.4S
Status affected
Version 3.12.0S
Status affected
Version 3.12.1S
Status affected
Version 3.12.2S
Status affected
Version 3.12.3S
Status affected
Version 3.12.0aS
Status affected
Version 3.12.4S
Status affected
Version 3.13.0S
Status affected
Version 3.13.1S
Status affected
Version 3.13.2S
Status affected
Version 3.13.3S
Status affected
Version 3.13.4S
Status affected
Version 3.13.5S
Status affected
Version 3.13.2aS
Status affected
Version 3.13.0aS
Status affected
Version 3.13.5aS
Status affected
Version 3.13.6S
Status affected
Version 3.13.7S
Status affected
Version 3.13.6aS
Status affected
Version 3.13.7aS
Status affected
Version 3.13.8S
Status affected
Version 3.13.9S
Status affected
Version 3.13.10S
Status affected
Version 3.14.0S
Status affected
Version 3.14.1S
Status affected
Version 3.14.2S
Status affected
Version 3.14.3S
Status affected
Version 3.14.4S
Status affected
Version 3.15.0S
Status affected
Version 3.15.1S
Status affected
Version 3.15.2S
Status affected
Version 3.15.1cS
Status affected
Version 3.15.3S
Status affected
Version 3.15.4S
Status affected
Version 3.16.0S
Status affected
Version 3.16.1S
Status affected
Version 3.16.1aS
Status affected
Version 3.16.2S
Status affected
Version 3.16.2aS
Status affected
Version 3.16.0cS
Status affected
Version 3.16.3S
Status affected
Version 3.16.2bS
Status affected
Version 3.16.3aS
Status affected
Version 3.16.4S
Status affected
Version 3.16.4aS
Status affected
Version 3.16.4bS
Status affected
Version 3.16.5S
Status affected
Version 3.16.4dS
Status affected
Version 3.16.6S
Status affected
Version 3.16.7S
Status affected
Version 3.16.6bS
Status affected
Version 3.16.7aS
Status affected
Version 3.16.7bS
Status affected
Version 3.16.8S
Status affected
Version 3.16.9S
Status affected
Version 3.16.10S
Status affected
Version 3.17.0S
Status affected
Version 3.17.1S
Status affected
Version 3.17.2S
Status affected
Version 3.17.1aS
Status affected
Version 3.17.3S
Status affected
Version 3.17.4S
Status affected
Version 16.1.1
Status affected
Version 16.1.2
Status affected
Version 16.1.3
Status affected
Version 16.2.1
Status affected
Version 16.2.2
Status affected
Version 16.3.1
Status affected
Version 16.3.2
Status affected
Version 16.3.3
Status affected
Version 16.3.1a
Status affected
Version 16.3.4
Status affected
Version 16.3.5
Status affected
Version 16.3.5b
Status affected
Version 16.3.6
Status affected
Version 16.3.7
Status affected
Version 16.3.8
Status affected
Version 16.3.9
Status affected
Version 16.3.10
Status affected
Version 16.3.11
Status affected
Version 16.4.1
Status affected
Version 16.4.2
Status affected
Version 16.4.3
Status affected
Version 16.5.1
Status affected
Version 16.5.1a
Status affected
Version 16.5.1b
Status affected
Version 16.5.2
Status affected
Version 16.5.3
Status affected
Version 3.18.0aS
Status affected
Version 3.18.0S
Status affected
Version 3.18.1S
Status affected
Version 3.18.2S
Status affected
Version 3.18.3S
Status affected
Version 3.18.4S
Status affected
Version 3.18.0SP
Status affected
Version 3.18.1SP
Status affected
Version 3.18.1aSP
Status affected
Version 3.18.1bSP
Status affected
Version 3.18.1cSP
Status affected
Version 3.18.2SP
Status affected
Version 3.18.2aSP
Status affected
Version 3.18.3SP
Status affected
Version 3.18.4SP
Status affected
Version 3.18.3aSP
Status affected
Version 3.18.3bSP
Status affected
Version 3.18.5SP
Status affected
Version 3.18.6SP
Status affected
Version 3.18.7SP
Status affected
Version 3.18.8aSP
Status affected
Version 3.18.9SP
Status affected
Version 16.6.1
Status affected
Version 16.6.2
Status affected
Version 16.6.3
Status affected
Version 16.6.4
Status affected
Version 16.6.5
Status affected
Version 16.6.4a
Status affected
Version 16.6.5a
Status affected
Version 16.6.6
Status affected
Version 16.6.7
Status affected
Version 16.6.8
Status affected
Version 16.6.9
Status affected
Version 16.6.10
Status affected
Version 16.7.1
Status affected
Version 16.7.1a
Status affected
Version 16.7.1b
Status affected
Version 16.7.2
Status affected
Version 16.7.3
Status affected
Version 16.7.4
Status affected
Version 16.8.1
Status affected
Version 16.8.1a
Status affected
Version 16.8.1b
Status affected
Version 16.8.1s
Status affected
Version 16.8.1c
Status affected
Version 16.8.1d
Status affected
Version 16.8.2
Status affected
Version 16.8.1e
Status affected
Version 16.8.3
Status affected
Version 16.9.1
Status affected
Version 16.9.2
Status affected
Version 16.9.1a
Status affected
Version 16.9.1b
Status affected
Version 16.9.1s
Status affected
Version 16.9.3
Status affected
Version 16.9.4
Status affected
Version 16.9.3a
Status affected
Version 16.9.5
Status affected
Version 16.9.5f
Status affected
Version 16.9.6
Status affected
Version 16.9.7
Status affected
Version 16.9.8
Status affected
Version 16.10.1
Status affected
Version 16.10.1a
Status affected
Version 16.10.1b
Status affected
Version 16.10.1s
Status affected
Version 16.10.1c
Status affected
Version 16.10.1e
Status affected
Version 16.10.1d
Status affected
Version 16.10.2
Status affected
Version 16.10.1f
Status affected
Version 16.10.1g
Status affected
Version 16.10.3
Status affected
Version 16.11.1
Status affected
Version 16.11.1a
Status affected
Version 16.11.1b
Status affected
Version 16.11.2
Status affected
Version 16.11.1s
Status affected
Version 16.12.1
Status affected
Version 16.12.1s
Status affected
Version 16.12.1a
Status affected
Version 16.12.1c
Status affected
Version 16.12.1w
Status affected
Version 16.12.2
Status affected
Version 16.12.1y
Status affected
Version 16.12.2a
Status affected
Version 16.12.3
Status affected
Version 16.12.8
Status affected
Version 16.12.2s
Status affected
Version 16.12.1x
Status affected
Version 16.12.1t
Status affected
Version 16.12.4
Status affected
Version 16.12.3s
Status affected
Version 16.12.3a
Status affected
Version 16.12.4a
Status affected
Version 16.12.5
Status affected
Version 16.12.6
Status affected
Version 16.12.1z1
Status affected
Version 16.12.5a
Status affected
Version 16.12.5b
Status affected
Version 16.12.1z2
Status affected
Version 16.12.6a
Status affected
Version 16.12.7
Status affected
Version 16.12.9
Status affected
Version 16.12.10
Status affected
Version 16.12.10a
Status affected
Version 16.12.11
Status affected
Version 16.12.12
Status affected
Version 16.12.13
Status affected
Version 17.1.1
Status affected
Version 17.1.1a
Status affected
Version 17.1.1s
Status affected
Version 17.1.1t
Status affected
Version 17.1.3
Status affected
Version 17.2.1
Status affected
Version 17.2.1r
Status affected
Version 17.2.1a
Status affected
Version 17.2.1v
Status affected
Version 17.2.2
Status affected
Version 17.2.3
Status affected
Version 17.3.1
Status affected
Version 17.3.2
Status affected
Version 17.3.3
Status affected
Version 17.3.1a
Status affected
Version 17.3.1w
Status affected
Version 17.3.2a
Status affected
Version 17.3.1x
Status affected
Version 17.3.1z
Status affected
Version 17.3.4
Status affected
Version 17.3.5
Status affected
Version 17.3.4a
Status affected
Version 17.3.6
Status affected
Version 17.3.4b
Status affected
Version 17.3.4c
Status affected
Version 17.3.5a
Status affected
Version 17.3.5b
Status affected
Version 17.3.7
Status affected
Version 17.3.8
Status affected
Version 17.3.8a
Status affected
Version 17.4.1
Status affected
Version 17.4.2
Status affected
Version 17.4.1a
Status affected
Version 17.4.1b
Status affected
Version 17.4.2a
Status affected
Version 17.5.1
Status affected
Version 17.5.1a
Status affected
Version 17.6.1
Status affected
Version 17.6.2
Status affected
Version 17.6.1w
Status affected
Version 17.6.1a
Status affected
Version 17.6.1x
Status affected
Version 17.6.3
Status affected
Version 17.6.1y
Status affected
Version 17.6.1z
Status affected
Version 17.6.3a
Status affected
Version 17.6.4
Status affected
Version 17.6.1z1
Status affected
Version 17.6.5
Status affected
Version 17.6.6
Status affected
Version 17.6.6a
Status affected
Version 17.6.5a
Status affected
Version 17.6.7
Status affected
Version 17.6.8
Status affected
Version 17.6.8a
Status affected
Version 17.7.1
Status affected
Version 17.7.1a
Status affected
Version 17.7.1b
Status affected
Version 17.7.2
Status affected
Version 17.10.1
Status affected
Version 17.10.1a
Status affected
Version 17.10.1b
Status affected
Version 17.8.1
Status affected
Version 17.8.1a
Status affected
Version 17.9.1
Status affected
Version 17.9.1w
Status affected
Version 17.9.2
Status affected
Version 17.9.1a
Status affected
Version 17.9.1x
Status affected
Version 17.9.1y
Status affected
Version 17.9.3
Status affected
Version 17.9.2a
Status affected
Version 17.9.1x1
Status affected
Version 17.9.3a
Status affected
Version 17.9.4
Status affected
Version 17.9.1y1
Status affected
Version 17.9.5
Status affected
Version 17.9.4a
Status affected
Version 17.9.5a
Status affected
Version 17.9.5b
Status affected
Version 17.9.6
Status affected
Version 17.9.6a
Status affected
Version 17.9.5e
Status affected
Version 17.9.5f
Status affected
Version 17.11.1
Status affected
Version 17.11.1a
Status affected
Version 17.12.1
Status affected
Version 17.12.1w
Status affected
Version 17.12.1a
Status affected
Version 17.12.1x
Status affected
Version 17.12.2
Status affected
Version 17.12.3
Status affected
Version 17.12.2a
Status affected
Version 17.12.1y
Status affected
Version 17.12.1z
Status affected
Version 17.12.4
Status affected
Version 17.12.3a
Status affected
Version 17.12.1z1
Status affected
Version 17.12.1z2
Status affected
Version 17.12.4a
Status affected
Version 17.12.4b
Status affected
Version 17.12.1z3
Status affected
Version 17.13.1
Status affected
Version 17.13.1a
Status affected
Version 17.14.1
Status affected
Version 17.14.1a
Status affected
Version 17.11.99SW
Status affected
Version 17.15.1
Status affected
Version 17.15.1w
Status affected
Version 17.15.1a
Status affected
Version 17.15.2
Status affected
Version 17.15.1b
Status affected
Version 17.15.1x
Status affected
Version 17.15.1z
Status affected
Version 17.15.2c
Status affected
Version 17.15.2a
Status affected
Version 17.15.2b
Status affected
Version 17.16.1
Status affected
Version 17.16.1a
Status affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.14% 0.345
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
psirt@cisco.com 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-805 Buffer Access with Incorrect Length Value

The product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.