Denial of Service in Cisco IOS and IOS XE due to TWAMP Server Vulnerability

CVE-2025-20154

Summary

A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature within Cisco IOS Software and Cisco IOS XE Software allows unauthenticated remote attackers to exploit out-of-bounds array access when processing specially crafted TWAMP control packets. Successfully sending these packets could cause the affected device to reload, leading to a denial of service condition. In addition, the Cisco IOS XR Software may see the ipsla_ippm_server process reload unexpectedly, but only if debug mode is enabled. This vulnerability poses a risk to network resilience and operational continuity.

References