7.7
High
CVE-2025-20327 A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to…
Description
A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted URL in an HTTP request. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| IOS | Versions not published |
References
- cisco-sa-ios-invalid-url-dos-Nvxszf6u sec.cloudapps.cisco.com
Timeline
- Published
- Last modified
Other CVEs of IOS
The 39 CVEs of IOS →
CVE-2026-20301
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of…
8.6
High
CVE-2026-20125
A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an…
7.7
High
CVE-2026-20012
A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software,…
8.6
High
CVE-2025-20363
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure…
9.0
Critical