CVE-2025-20189
Cisco Cisco IOS XE Software
At a glance
- Source
- NVD
- EPSS
- EPSS 0.25 % · percentile 16 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- cisco
- NVD status
- Analyzed
Description
A vulnerability in the Cisco Express Forwarding functionality of Cisco IOS XE Software for Cisco ASR 903 Aggregation Services Routers with Route Switch Processor 3 (RSP3C) could allow an unauthenticated, adjacent attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper memory management when Cisco IOS XE Software is processing Address Resolution Protocol (ARP) messages. An attacker could exploit this vulnerability by sending crafted ARP messages at a high rate over a period of time to an affected device. A successful exploit could allow the attacker to exhaust system resources, which eventually triggers a reload of the active route switch processor (RSP). If a redundant RSP is not present, the router reloads.
Weaknesses (CWE)
- CWE-762 — Mismatched Memory Management Routines
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.4 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H | cisco |
| CVSS 3.1 | HIGH 7.4 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H | NVD · psirt@cisco.com (Secondary) |
European references
- ENISA EUVD · EUVD-2025-13902
- GCVE · GCVE-0-2025-20189
CERT-FR advisories
- CERTFR-2025-AVI-0378 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.6bs:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.7as:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.7bs:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.7s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.8s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.9s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.16.10s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.17.4s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.18.1asp:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.18.1csp:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.18.2asp:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.18.2sp:*:*:*:*:*:*:*cpe:2.3:o:cisco:ios_xe:3.18.3asp:*:*:*:*:*:*:*- +226 more
Affected products
| Product | Versions |
|---|---|
| Cisco · Cisco IOS XE Software | affected 3.16.0S ; affected 3.16.1S ; affected 3.16.1aS ; affected 3.16.2S ; affected 3.16.2aS ; affected 3.16.0cS |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |