Denial of Service in Cisco IOS and IOS XE due to TWAMP Server Vulnerability

CVE-2025-20154

What is CVE-2025-20154?

A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature within Cisco IOS Software and Cisco IOS XE Software allows unauthenticated remote attackers to exploit out-of-bounds array access when processing specially crafted TWAMP control packets. Successfully sending these packets could cause the affected device to reload, leading to a denial of service condition. In addition, the Cisco IOS XR Software may see the ipsla_ippm_server process reload unexpectedly, but only if debug mode is enabled. This vulnerability poses a risk to network resilience and operational continuity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References