CVE-2025-20315: cisco cisco ios xe software

Vulnerability summary

CVE-2025-20315 is a high (CVSS 8.6) vulnerability in cisco cisco ios xe software. EPSS estimates a 0.44% chance of exploitation in the next 30 days, higher than 37.5% of scored vulnerabilities.

Timeline

1. 24-09-2025
   PublishedVulnerability first disclosed.
2. 24-09-2025
   Last modifiedVulnerability information updated.

Description

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, causing a denial of service (DoS) condition. This vulnerability is due to improper handling of malformed Control and Provisioning of Wireless Access Points (CAPWAP) packets. An attacker could exploit this vulnerability by sending malformed CAPWAP packets through an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

• CWE-805Buffer Access with Incorrect Length ValueThe product uses a sequential operation to read or write a buffer, but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer.