csirt@kutim:~/threat-intel/cve/CVE-2025-20154

Katalog CVE

CVSS 8.6 · High EPSS 0,54%

Kerentanan Improper Input Validation pada cisco ios, cisco ios xe +1 lainnya. Skor CVSS 3.1 8.6 (High) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. For Cisco IOS XR Software, this vulnerability could cause the ipsla_ippm_server process to reload unexpectedly if debugs are enabled. This vulnerability is due to out-of-bounds array access when processing specially crafted TWAMP control packets. An attacker could exploit this vulnerability by sending crafted TWAMP control packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: For Cisco IOS XR Software, only the ipsla_ippm_server process reloads unexpectedly and only when debugs are enabled. The vulnerability details for Cisco IOS XR Software are as follows:    Security Impact Rating (SIR): Low    CVSS Base Score: 3.7    CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Rincian

Terbit di NVD
7 Mei 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
8.6 (High), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-20: Improper Input Validation
EPSS (30 hari)
0,54% peluang dieksploitasi; lebih tinggi dari 43,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ios Semua versi hingga 15.9\(3\)m11
cisco ios xe Versi 16.6.1 hingga 17.2.3
cisco ios xr Versi 6.5.1
cisco ios xr Versi 6.5.2
cisco ios xr Versi 6.5.3
cisco ios xr Versi 6.5.15
cisco ios xr Versi 6.5.25
cisco ios xr Versi 6.5.26
cisco ios xr Versi 6.5.28
cisco ios xr Versi 6.5.29
cisco ios xr Versi 6.5.31
cisco ios xr Versi 6.5.32
cisco ios xr Versi 6.5.33
cisco ios xr Versi 6.5.35
cisco ios xr Versi 6.5.90
cisco ios xr Versi 6.5.92
cisco ios xr Versi 6.5.93
cisco ios xr Versi 6.6.1
cisco ios xr Versi 6.6.2
cisco ios xr Versi 6.6.3
cisco ios xr Versi 6.6.4
cisco ios xr Versi 6.6.11
cisco ios xr Versi 6.6.12
cisco ios xr Versi 6.6.25
cisco ios xr Versi 6.7.1
cisco ios xr Versi 6.7.2
cisco ios xr Versi 6.7.3
cisco ios xr Versi 6.7.4
cisco ios xr Versi 6.7.35
cisco ios xr Versi 6.8.1
cisco ios xr Versi 6.8.2
cisco ios xr Versi 6.9.1
cisco ios xr Versi 6.9.2
cisco ios xr Versi 7.0.0
cisco ios xr Versi 7.0.1
cisco ios xr Versi 7.0.2
cisco ios xr Versi 7.0.11
cisco ios xr Versi 7.0.12
cisco ios xr Versi 7.0.14
cisco ios xr Versi 7.0.90
cisco ios xr Versi 7.1.1
cisco ios xr Versi 7.1.2
cisco ios xr Versi 7.1.3
cisco ios xr Versi 7.1.15
cisco ios xr Versi 7.1.25
cisco ios xr Versi 7.2.0
cisco ios xr Versi 7.2.1
cisco ios xr Versi 7.2.2
cisco ios xr Versi 7.2.12
cisco ios xr Versi 7.3.1
cisco ios xr Versi 7.3.2
cisco ios xr Versi 7.3.3
cisco ios xr Versi 7.3.4
cisco ios xr Versi 7.3.5
cisco ios xr Versi 7.3.6
cisco ios xr Versi 7.3.15
cisco ios xr Versi 7.3.16
cisco ios xr Versi 7.3.27
cisco ios xr Versi 7.4.1
cisco ios xr Versi 7.4.2

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 94 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.