csirt@kutim:~/threat-intel/cve/CVE-2025-20315

Katalog CVE

CVSS 8.6 · High EPSS 0,44%

Kerentanan Buffer Access with Incorrect Length Value pada cisco ios xe. Skor CVSS 3.1 8.6 (High) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, causing a denial of service (DoS) condition. This vulnerability is due to improper handling of malformed Control and Provisioning of Wireless Access Points (CAPWAP) packets. An attacker could exploit this vulnerability by sending malformed CAPWAP packets through an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

Rincian

Terbit di NVD
24 September 2025
Terakhir diubah
28 September 2026
Status NVD
Analyzed
CVSS 3.1
8.6 (High), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-805: Buffer Access with Incorrect Length Value
EPSS (30 hari)
0,44% peluang dieksploitasi; lebih tinggi dari 36,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ios xe Versi 3.7.0bs
cisco ios xe Versi 3.7.0s
cisco ios xe Versi 3.7.1as
cisco ios xe Versi 3.7.1s
cisco ios xe Versi 3.7.2s
cisco ios xe Versi 3.7.2ts
cisco ios xe Versi 3.7.3s
cisco ios xe Versi 3.7.4as
cisco ios xe Versi 3.7.4s
cisco ios xe Versi 3.7.5s
cisco ios xe Versi 3.7.6s
cisco ios xe Versi 3.7.7s
cisco ios xe Versi 3.8.0s
cisco ios xe Versi 3.8.1s
cisco ios xe Versi 3.8.2s
cisco ios xe Versi 3.9.0as
cisco ios xe Versi 3.9.0s
cisco ios xe Versi 3.9.1as
cisco ios xe Versi 3.9.1s
cisco ios xe Versi 3.9.2s
cisco ios xe Versi 3.11.0s
cisco ios xe Versi 3.11.1s
cisco ios xe Versi 3.11.2s
cisco ios xe Versi 3.11.3s
cisco ios xe Versi 3.11.4s
cisco ios xe Versi 3.12.0as
cisco ios xe Versi 3.12.0s
cisco ios xe Versi 3.12.1s
cisco ios xe Versi 3.12.2s
cisco ios xe Versi 3.12.3s
cisco ios xe Versi 3.12.4s
cisco ios xe Versi 3.13.0as
cisco ios xe Versi 3.13.0s
cisco ios xe Versi 3.13.1s
cisco ios xe Versi 3.13.2as
cisco ios xe Versi 3.13.2s
cisco ios xe Versi 3.13.3s
cisco ios xe Versi 3.13.4s
cisco ios xe Versi 3.13.5as
cisco ios xe Versi 3.13.5s
cisco ios xe Versi 3.13.6as
cisco ios xe Versi 3.13.6s
cisco ios xe Versi 3.13.7as
cisco ios xe Versi 3.13.7s
cisco ios xe Versi 3.13.8s
cisco ios xe Versi 3.13.9s
cisco ios xe Versi 3.13.10s
cisco ios xe Versi 3.14.0s
cisco ios xe Versi 3.14.1s
cisco ios xe Versi 3.14.2s
cisco ios xe Versi 3.14.3s
cisco ios xe Versi 3.14.4s
cisco ios xe Versi 3.15.0s
cisco ios xe Versi 3.15.1cs
cisco ios xe Versi 3.15.1s
cisco ios xe Versi 3.15.2s
cisco ios xe Versi 3.15.3s
cisco ios xe Versi 3.15.4s
cisco ios xe Versi 3.16.0cs
cisco ios xe Versi 3.16.0s

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 340 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.