Description

A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to a buffer overflow. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.

INFO

Published Date :

2025-09-24T17:14:03.164Z

Last Modified :

2025-09-24T17:32:27.719Z

Source :

cisco
AFFECTED PRODUCTS

The following products are affected by CVE-2025-20149 vulnerability.

Vendors Products
Cisco
  • Ios
  • Ios Xe Software
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-20149.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact