CISCO-CVE-2025-20149

MEDIUM6.5

Cisco IOS and IOS XE Software CLI Denial of Service Vulnerability

Published Sep 24, 2025

Modified 5 months ago

Affected Packages

Cisco IOS

CiscoIOS

Affected versions:

12.2(6)I115.0(1)EX15.0(2)EA15.0(2)EA115.0(2)EJ15.0(2)EJ115.0(2)EK15.0(2)EK115.0(2)EX15.0(2)EX1+917 more

Cisco IOS XE

CiscoIOSXE

Affected versions:

16.1.116.1.216.1.316.10.116.10.1a16.10.1b16.10.1c16.10.1d16.10.1e16.10.1f+471 more

CVSS Analysis

CVSS v3.1

6.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

6.5/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Upstream

Ecosystems

Timeline

PublishedSep 24, 2025

ModifiedSep 24, 2025