CVE-2025-20327
Summary
| CVE | CVE-2025-20327 |
|---|---|
| State | PUBLISHED |
| Assigner | cisco |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2025-09-24 18:15:36 UTC |
| Updated | 2026-09-26 00:10:00 UTC |
| Description | A vulnerability in the web UI of Cisco IOS Software could allow an authenticated, remote attacker with low privileges to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper input validation. An attacker could exploit this vulnerability by sending a crafted URL in an HTTP request. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. |
Risk And Classification
Primary CVSS: v3.1 7.7 HIGH from [email protected]
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
EPSS: 0.003880000 probability, percentile 0.302460000 (date 2026-09-27)
Problem Types: CWE-1287 | CWE-1287 Improper Validation of Specified Type of Input
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 7.7 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H |
| 3.1 | CNA | CVSSV3_1 | 7.7 | HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
LowUser Interaction
NoneScope
ChangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cisco | Ios | 15.2\(6\)e2 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(6\)e2a | All | All | All |
| Operating System | Cisco | Ios | 15.2\(6\)e2b | All | All | All |
| Operating System | Cisco | Ios | 15.2\(6\)e3 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7a\)e0b | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7b\)e0b | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e0a | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e0b | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e0s | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e1 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e10 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e1a | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e2 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e2a | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e3 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e3k | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e4 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e5 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e6 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e7 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e8 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(7\)e9 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(8\)e | All | All | All |
| Operating System | Cisco | Ios | 15.2\(8\)e1 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(8\)e2 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(8\)e3 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(8\)e4 | All | All | All |
| Operating System | Cisco | Ios | 15.2\(8\)e5 | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Cisco | IOS | affected 15.2(6)E2 | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E | Not specified |
| CNA | Cisco | IOS | affected 15.2(6)E2a | Not specified |
| CNA | Cisco | IOS | affected 15.2(6)E2b | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E1 | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E0a | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E0b | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E0s | Not specified |
| CNA | Cisco | IOS | affected 15.2(6)E3 | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E2 | Not specified |
| CNA | Cisco | IOS | affected 15.2(7a)E0b | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E3 | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E1a | Not specified |
| CNA | Cisco | IOS | affected 15.2(7b)E0b | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E2a | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E4 | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E3k | Not specified |
| CNA | Cisco | IOS | affected 15.2(8)E | Not specified |
| CNA | Cisco | IOS | affected 15.2(8)E1 | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E5 | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E6 | Not specified |
| CNA | Cisco | IOS | affected 15.2(8)E2 | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E7 | Not specified |
| CNA | Cisco | IOS | affected 15.2(8)E3 | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E8 | Not specified |
| CNA | Cisco | IOS | affected 15.2(8)E4 | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E9 | Not specified |
| CNA | Cisco | IOS | affected 15.2(8)E5 | Not specified |
| CNA | Cisco | IOS | affected 15.2(7)E10 | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-in... | [email protected] | sec.cloudapps.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Additional Advisory Data
Exploits
CNA: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.
There are currently no legacy QID mappings associated with this CVE.