Denial of Service Vulnerability in Cisco IOS Software IOx Environment

CVE-2025-20196

What is CVE-2025-20196?

A vulnerability exists in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software, where improper handling of HTTP requests can lead to service disruptions. Unauthenticated remote attackers can exploit this by sending specially crafted HTTP requests to the affected devices, causing the IOx application environment to stop responding. Recovery from this state requires a manual restart of the IOx process, potentially leading to significant downtime.

References