CVE-2025-20189
- EPSS 0.02%
- Published 07.05.2025 17:35:47
- Last modified 05.08.2025 14:36:20
A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could allow an unauthenticated, adjacent attacker to trigger a denial of servi...
CVE-2025-20202
- EPSS 0.02%
- Published 07.05.2025 17:35:14
- Last modified 08.07.2025 17:17:00
A vulnerability in Cisco IOS XE Wireless Controller Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of access...
CVE-2025-20190
- EPSS 0.03%
- Published 07.05.2025 17:34:54
- Last modified 31.07.2025 15:48:08
A vulnerability in the lobby ambassador web interface of Cisco IOS XE Wireless Controller Software could allow an authenticated, remote attacker to remove arbitrary users that are defined on an affected device. This vulnerability is due to insuffi...
- EPSS 3.11%
- Published 07.05.2025 17:34:36
- Last modified 23.06.2025 15:15:11
A vulnerability in the Out-of-Band Access Point (AP) Image Download, the Clean Air Spectral Recording, and the client debug bundles features of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker ...
CVE-2025-20214
- EPSS 0.05%
- Published 07.05.2025 17:34:14
- Last modified 05.08.2025 14:36:54
A vulnerability in the Network Configuration Access Control Module (NACM) of Cisco IOS XE Software could allow an authenticated, remote attacker to obtain unauthorized read access to configuration or operational data. This vulnerability exists bec...
CVE-2025-20154
- EPSS 0.14%
- Published 07.05.2025 17:18:50
- Last modified 31.07.2025 16:44:45
A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service...
CVE-2025-20151
- EPSS 0.05%
- Published 07.05.2025 17:18:44
- Last modified 05.08.2025 14:33:40
A vulnerability in the implementation of the Simple Network Management Protocol Version 3 (SNMPv3) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to poll an affected device using SNMP, even if th...
CVE-2025-20191
- EPSS 0.02%
- Published 07.05.2025 17:18:35
- Last modified 08.05.2025 14:39:09
A vulnerability in the Switch Integrated Security Features (SISF) of Cisco IOS Software, Cisco IOS XE Software, Cisco NX-OS Software, and Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a...
CVE-2025-20182
- EPSS 0.09%
- Published 07.05.2025 17:18:14
- Last modified 01.08.2025 16:12:19
A vulnerability in the Internet Key Exchange version 2 (IKEv2) protocol processing of Cisco Adaptive Security Appliance (ASA) Software, Cisco Firepower Threat Defense (FTD) Software, Cisco IOS Software, and Cisco IOS XE Software could allow an unauth...
CVE-2025-20172
- EPSS 0.13%
- Published 05.02.2025 17:15:24
- Last modified 03.07.2025 15:48:37
A vulnerability in the SNMP subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error...