Vulnerabilities fixed in Cisco IOS XE Software

🗓️ 08 May 2025 08:43:57Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 52 Views

Cisco IOS XE fixes input validation and memory flaws enabling DoS, unauthorized access, and config manipulation.

Reporter	Title	Published	Views	Family All 159
ATTACKERKB	CVE-2025-20186	7 May 202518:15	–	attackerkb
ATTACKERKB	CVE-2025-20194	7 May 202518:15	–	attackerkb
BDU FSTEC	The vulnerability of the access point loading function in Cisco IOS XE wireless local control devices allows a attacker to execute arbitrary commands.	9 May 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the LAN Controller feature of the Cisco IOS XE operating system allows a hacker to execute arbitrary commands.	9 Jul 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ipsla_ippm_server function in Cisco IOS, IOS XE, and Cisco IOS XR systems allows a attacker to cause a service failure.	27 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Cisco IOS operating system’s access control list mechanism allows a perpetrator to circumvent existing security restrictions.	27 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DHCP Snooping security function in Cisco IOS XE, related to uncontrolled resource consumption, allows a attacker to trigger a service failure.	27 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Internet Key Exchange version 1 protocol (IKEv1) in Cisco IOS XE operating systems allows a attacker to induce a service failure.	27 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface for controlling Cisco IOS XE operating systems allows attackers to compromise the confidentiality and integrity of the protected information.	27 Aug 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Cisco IOS XE’s Wireless Network Control (wncd) operating system allows a hacker to trigger a service failure.	27 Aug 202500:00	–	bdu_fstec

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-cdp-dos-fpeks9K
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-ikev1-dos-XHk3HzFC
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-user-del-hQxMpUDj
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr903-rsp3-arp-dos-WmfzdvJZ
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-file-uplpd-rHZG9UfC
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-dhcpsn-dos-xBn8Mtks
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wlc-wncd-p6Gvt6HL

08 May 2025 08:43Current

7.9High risk

Vulners AI Score7.9

CVSS 3.110

CVSS 36.8

EPSS0.17894

SSVC

Cisco IOS XE input validation memory flaws denial of service unauthorized access config manipulation