CSRF Vulnerability in Cisco IOS XE Software Web Management Interface

CVE-2025-20195

What is CVE-2025-20195?

A vulnerability exists in the web management interface of Cisco IOS XE Software, stemming from inadequate CSRF protections. An attacker can exploit this vulnerability by convincing an already authenticated user to click on a malicious link, leading to unauthorized command execution on the device's command-line interface (CLI). If successful, this could enable the attacker to clear vital logs, including syslog, parser, and licensing logs, provided the targeted user has the requisite permissions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References