CVE-2025-20141
CVSS 3.1 Score 7.4 of 10 (high)
Details
Published Mar 12, 2025
CWE ID 770
Summary
CVE-2025-20141 is a vulnerability affecting Cisco IOS XR Software Release 7.9.2. An unauthenticated, adjacent attacker can exploit this issue by sending malicious packets to an affected device. The vulnerability stems from the incorrect handling of packets that are punted to the route processor. Successful exploitation leads to a denial of service (DoS) condition, with control plane traffic stopping to function on multiple Cisco IOS XR platforms.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cisco IOS
Affected Vendors
- Cisco