CSRF Vulnerability in Cisco IOS XE Software Web Management Interface

CVE-2025-20195

What is CVE-2025-20195?

A vulnerability exists in the web management interface of Cisco IOS XE Software, stemming from inadequate CSRF protections. An attacker can exploit this vulnerability by convincing an already authenticated user to click on a malicious link, leading to unauthorized command execution on the device's command-line interface (CLI). If successful, this could enable the attacker to clear vital logs, including syslog, parser, and licensing logs, provided the targeted user has the requisite permissions.

References