Denial-of-Service Vulnerability in Cisco IOS Software Web UI

CVE-2025-20327

What is CVE-2025-20327?

A vulnerability exists in the web UI of Cisco IOS Software due to improper input validation. This flaw permits an authenticated, remote attacker with low privileges to craft specific HTTP requests that exploit the vulnerability. If successfully executed, this attack could lead to a denial of service condition, forcing the affected device to reload and become temporarily unavailable. Organizations using Cisco IOS Software should assess their systems and apply necessary patches to safeguard against potential exploitation.

References