CVE-2025-20149

State: Published
Severity: 6.5 Medium
Published: Sep 24, 2025
Updated: Sep 24, 2025
Reserved: Oct 10, 2024

Description

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to a buffer overflow. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H	cisco

Weaknesses

CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected Products

Product	Versions
IOSCisco	15.2(1)SAffected 15.2(2)SAffected 15.2(1)S1Affected 15.2(4)SAffected 15.2(1)S2Affected 15.2(2)S1Affected 15.2(2)S2Affected 15.2(2)S0aAffected 15.2(2)S0cAffected 15.2(4)S1Affected 15.2(4)S4Affected 15.2(4)S6Affected 15.2(4)S2Affected 15.2(4)S5Affected 15.2(4)S3Affected 15.2(4)S3aAffected 15.2(4)S4aAffected 15.2(4)S7Affected 15.3(1)TAffected 15.3(2)TAffected 15.3(1)T1Affected 15.3(1)T2Affected 15.3(1)T3Affected 15.3(1)T4Affected 15.3(2)T1Affected and 714 more versions
Cisco IOS XE SoftwareCisco	3.7.0SAffected 3.7.1SAffected 3.7.2SAffected 3.7.3SAffected 3.7.4SAffected 3.7.5SAffected 3.7.6SAffected 3.7.7SAffected 3.7.4aSAffected 3.7.2tSAffected 3.7.0bSAffected 3.7.1aSAffected 3.3.0SGAffected 3.3.2SGAffected 3.3.1SGAffected 3.8.0SAffected 3.8.1SAffected 3.8.2SAffected 3.9.1SAffected 3.9.0SAffected 3.9.2SAffected 3.9.1aSAffected 3.9.0aSAffected 3.2.0SEAffected 3.2.1SEAffected and 395 more versions

Product

Versions

IOSCisco

15.2(1)SAffected
15.2(2)SAffected
15.2(1)S1Affected
15.2(4)SAffected
15.2(1)S2Affected
15.2(2)S1Affected
15.2(2)S2Affected
15.2(2)S0aAffected
15.2(2)S0cAffected
15.2(4)S1Affected
15.2(4)S4Affected
15.2(4)S6Affected
15.2(4)S2Affected
15.2(4)S5Affected
15.2(4)S3Affected
15.2(4)S3aAffected
15.2(4)S4aAffected
15.2(4)S7Affected
15.3(1)TAffected
15.3(2)TAffected
15.3(1)T1Affected
15.3(1)T2Affected
15.3(1)T3Affected
15.3(1)T4Affected
15.3(2)T1Affected
and 714 more versions

Cisco IOS XE SoftwareCisco

3.7.0SAffected
3.7.1SAffected
3.7.2SAffected
3.7.3SAffected
3.7.4SAffected
3.7.5SAffected
3.7.6SAffected
3.7.7SAffected
3.7.4aSAffected
3.7.2tSAffected
3.7.0bSAffected
3.7.1aSAffected
3.3.0SGAffected
3.3.2SGAffected
3.3.1SGAffected
3.8.0SAffected
3.8.1SAffected
3.8.2SAffected
3.9.1SAffected
3.9.0SAffected
3.9.2SAffected
3.9.1aSAffected
3.9.0aSAffected
3.2.0SEAffected
3.2.1SEAffected
and 395 more versions

References

cisco-sa-ios-cli-EB7cZ6yO

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.