CVE-2025-20327
A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulner
Severity
High 7.7
CVSS 3.1
Exploited
Not listed
EPSS
0.004
28.0th percentile
Discovered by
Third party
Published by the vendor
Published
Sep 24, 2025
Assigned by cisco
Description
A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted URL in an HTTP request. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Weakness: CWE-1287
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco IOS Software | Routing & Switching | cna-assigner |
Vendor-reported affected versions (1)
- Cisco · IOS