Denial of Service Vulnerability in Cisco IOS Software and Related Products
CVE-2025-20191

7.4HIGH

Key Information:

Vendor

Cisco
Status
Cisco Nx-os Software
Cisco Wireless Lan Controller (wlc)
Vendor
CVE Published:
7 May 2025

Badges

👾 Exploit Exists

What is CVE-2025-20191?

A vulnerability in the Switch Integrated Security Features (SISF) within multiple Cisco products allows an unauthenticated adjacent attacker to create a denial of service condition. This issue arises from improper handling of DHCPv6 packets, enabling the attacker to send specially crafted packets to the device, potentially leading to its reload and unavailability. This can disrupt services and impact network stability, highlighting the importance of applying security updates and mitigation measures.

Affected Version(s)

Cisco NX-OS Software 8.2(5)

Cisco NX-OS Software 7.3(5)D1(1)

Cisco NX-OS Software 8.4(2)

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-20191 : Denial of Service Vulnerability in Cisco IOS Software and Related Products