7.7
Élevée
CVE-2025-20327 A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to…
Description
A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted URL in an HTTP request. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| IOS | Versions non publiées |
Références
- cisco-sa-ios-invalid-url-dos-Nvxszf6u sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de IOS
Les 39 CVE de IOS →
CVE-2026-20301
A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External Client protocol, of…
8.6
Élevée
CVE-2026-20125
A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an…
7.7
Élevée
CVE-2026-20012
A vulnerability in the Internet Key Exchange version 2 (IKEv2) feature of Cisco IOS Software, Cisco IOS XE Software,…
8.6
Élevée
CVE-2025-20363
A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure…
9.0
Critique