Denial of Service Vulnerability in Cisco IOS Software IOx Environment
CVE-2025-20196

5.3MEDIUM

Key Information:

Vendor
Cisco
Status
iOS
Cisco iOS Xe Software
Vendor
CVE Published:
7 May 2025

Badges

👾 Exploit Exists

Summary

A vulnerability exists in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software, where improper handling of HTTP requests can lead to service disruptions. Unauthenticated remote attackers can exploit this by sending specially crafted HTTP requests to the affected devices, causing the IOx application environment to stop responding. Recovery from this state requires a manual restart of the IOx process, potentially leading to significant downtime.

Affected Version(s)

Cisco IOS XE Software 16.1.1

Cisco IOS XE Software 16.1.2

Cisco IOS XE Software 16.1.3

References

https://sec.cloudapps.cisco.com/security/center/content/C...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-20196 : Denial of Service Vulnerability in Cisco IOS Software IOx Environment | SecurityVulnerability.io