CVE-2025-20141: cisco ios xr

csirt@kutim:~/threat-intel/cve/CVE-2025-20141

CVSS 7.4 · High EPSS 0,24%

Kerentanan Allocation of Resources Without Limits or Throttling pada cisco ios xr. Skor CVSS 3.1 7.4 (High) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the handling of specific packets that are punted from a line card to a route processor in Cisco IOS XR Software Release 7.9.2 could allow an unauthenticated, adjacent attacker to cause control plane traffic to stop working on multiple Cisco IOS XR platforms.  This vulnerability is due to incorrect handling of packets that are punted to the route processor. An attacker could exploit this vulnerability by sending traffic, which must be handled by the Linux stack on the route processor, to an affected device. A successful exploit could allow the attacker to cause control plane traffic to stop working, resulting in a denial of service (DoS) condition.

Rincian

Terbit di NVD: 12 Maret 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 7.4 (High), sumber cisco.com
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-770: Allocation of Resources Without Limits or Throttling
EPSS (30 hari): 0,24% peluang dieksploitasi; lebih tinggi dari 14,1% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
cisco	ios xr	Versi 7.9.2

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.