Description
A vulnerability in the CLI of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to a buffer overflow. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the CLI prompt. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Metrics
CVSS 3.1 6.5/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | IOS | 15.2(1)S; 15.2(2)S; 15.2(1)S1; 15.2(4)S; 15.2(1)S2; 15.2(2)S1; 15.2(2)S2; 15.2(2)S0a; 15.2(2)S0c; 15.2(4)S1; 15.2(4)S4; 15.2(4)S6; 15.2(4)S2; 15.2(4)S5; 15.2(4)S3; 15.2(4)S3a; 15.2(4)S4a; 15.2(4)S7; 15.3(1)T; 15.3(2)T |
| Cisco | Cisco IOS XE Software | 3.7.0S; 3.7.1S; 3.7.2S; 3.7.3S; 3.7.4S; 3.7.5S; 3.7.6S; 3.7.7S; 3.7.4aS; 3.7.2tS; 3.7.0bS; 3.7.1aS; 3.3.0SG; 3.3.2SG; 3.3.1SG; 3.8.0S; 3.8.1S; 3.8.2S; 3.9.1S; 3.9.0S |
References
Timeline
- Published
- Sep 24, 2025
- Last modified
- Sep 26, 2026
- NVD status
- Analyzed