CVE-2025-20196: Medium severity cisco ios vulnerability

Published May 7, 2025
·
Updated

A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application hosting environment to stop responding, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to cause the Cisco IOx application hosting environment to stop responding. The IOx process will need to be manually restarted to recover services.

Affected Software

191 affected components
Cisco IOS Software
Cisco IOS XE Software
Cisco IOS XE=16.1.1
Cisco IOS XE=16.1.2
Cisco IOS XE=16.1.3
Cisco IOS XE=16.2.1
Cisco IOS XE=16.2.2
Cisco IOS XE=16.3.1
Cisco IOS XE=16.3.1a
Cisco IOS XE=16.3.2
Cisco IOS XE=16.3.3
Cisco IOS XE=16.3.4
Cisco IOS XE=16.3.5
Cisco IOS XE=16.3.5b
Cisco IOS XE=16.3.6
Cisco IOS XE=16.3.7
Cisco IOS XE=16.3.8
Cisco IOS XE=16.3.9
Cisco IOS XE=16.3.10
Cisco IOS XE=16.3.11
Cisco IOS XE=16.4.1
Cisco IOS XE=16.4.2
Cisco IOS XE=16.4.3
Cisco IOS XE=16.5.1
Cisco IOS XE=16.5.1a
Cisco IOS XE=16.5.1b
Cisco IOS XE=16.5.2
Cisco IOS XE=16.5.3
Cisco IOS XE=17.1.1
Cisco IOS XE=17.1.1a
Cisco IOS XE=17.1.1s
Cisco IOS XE=17.1.1t
Cisco IOS XE=17.1.3
Cisco IOS XE=17.2.1
Cisco IOS XE=17.2.1a
Cisco IOS XE=17.2.1r
Cisco IOS XE=17.2.1v
Cisco IOS XE=17.2.2
Cisco IOS XE=17.2.3
Cisco IOS XE=17.3.1
Cisco IOS XE=17.3.1a
Cisco IOS XE=17.3.1w
Cisco IOS XE=17.3.1x
Cisco IOS XE=17.3.1z
Cisco IOS XE=17.3.2
Cisco IOS XE=17.3.2a
Cisco IOS XE=17.3.3
Cisco IOS XE=17.3.4
Cisco IOS XE=17.3.4a
Cisco IOS XE=17.3.4b
Cisco IOS XE=17.3.4c
Cisco IOS XE=17.3.5
Cisco IOS XE=17.3.5a
Cisco IOS XE=17.3.5b
Cisco IOS XE=17.3.6
Cisco IOS XE=17.3.7
Cisco IOS XE=17.3.8
Cisco IOS XE=17.3.8a
Cisco IOS XE=17.4.1
Cisco IOS XE=17.4.1a
Cisco IOS XE=17.4.1b
Cisco IOS XE=17.4.2
Cisco IOS XE=17.4.2a
Cisco IOS XE=17.5.1
Cisco IOS XE=17.5.1a
Cisco IOS XE=17.6.1
Cisco IOS XE=17.6.1a
Cisco IOS XE=17.6.1w
Cisco IOS XE=17.6.1x
Cisco IOS XE=17.6.1y
Cisco IOS XE=17.6.1z
Cisco IOS XE=17.6.1z1
Cisco IOS XE=17.6.2
Cisco IOS XE=17.6.3
Cisco IOS XE=17.6.3a
Cisco IOS XE=17.6.4
Cisco IOS XE=17.6.5
Cisco IOS XE=17.6.5a
Cisco IOS XE=17.6.6
Cisco IOS XE=17.6.6a
Cisco IOS XE=17.6.7
Cisco IOS XE=17.6.8
Cisco IOS XE=17.6.8a
Cisco IOS XE=17.7.1
Cisco IOS XE=17.7.1a
Cisco IOS XE=17.7.1b
Cisco IOS XE=17.7.2
Cisco IOS XE=17.8.1
Cisco IOS XE=17.8.1a
Cisco IOS XE=17.9.1
Cisco IOS XE=17.9.1a
Cisco IOS XE=17.9.1w
Cisco IOS XE=17.9.1x
Cisco IOS XE=17.9.1x1
Cisco IOS XE=17.9.1y
Cisco IOS XE=17.9.1y1
Cisco IOS XE=17.9.2
Cisco IOS XE=17.9.2a
Cisco IOS XE=17.9.3
Cisco IOS XE=17.9.3a
Cisco IOS XE=17.9.4
Cisco IOS XE=17.9.4a
Cisco IOS XE=17.9.5
Cisco IOS XE=17.9.5a
Cisco IOS XE=17.9.5b
Cisco IOS XE=17.9.5e
Cisco IOS XE=17.9.5f
Cisco IOS XE=17.9.6
Cisco IOS XE=17.9.6a
Cisco IOS XE=17.10.1
Cisco IOS XE=17.10.1a
Cisco IOS XE=17.10.1b
Cisco IOS XE=17.11.1
Cisco IOS XE=17.11.1a
Cisco IOS XE=17.11.99sw
Cisco IOS XE=17.12.1
Cisco IOS XE=17.12.1a
Cisco IOS XE=17.12.1w
Cisco IOS XE=17.12.1x
Cisco IOS XE=17.12.1y
Cisco IOS XE=17.12.1z
Cisco IOS XE=17.12.1z1
Cisco IOS XE=17.12.1z2
Cisco IOS XE=17.12.1z4
Cisco IOS XE=17.12.2
Cisco IOS XE=17.12.2a
Cisco IOS XE=17.12.3
Cisco IOS XE=17.12.3a
Cisco IOS XE=17.12.4
Cisco IOS XE=17.12.4a
Cisco IOS XE=17.12.4b
Cisco IOS XE=17.13.1
Cisco IOS XE=17.13.1a
Cisco IOS XE=17.14.1
Cisco IOS XE=17.14.1a
Cisco IOS XE=17.15.2
Cisco IOS XE=17.15.2a
Cisco IOS XE=17.15.2b
Cisco IOS XE=17.15.2c
All of the following
Cisco Cgr1000 Firmware<15.9\(3\)m12
Cisco Cgr1000
All of the following
Cisco Ir510 Wpan Firmware
Cisco Ir510 Wpan
All of the following
Cisco Ic3000 Industrial Compute Gateway Firmware<1.5.2
Cisco IC3000 Industrial Compute Gateway
All of the following
Cisco 807 Industrial Integrated Services Router Firmware<15.9\(3\)m11
Cisco 807 Industrial Integrated Services Router
All of the following
Cisco 809 Industrial Integrated Services Router Firmware<15.9\(3\)m11
Cisco 809 Industrial Integrated Services Router
All of the following
Cisco 829 Industrial Integrated Services Router Firmware<15.9\(3\)m11
Cisco 829 Industrial Integrated Services Router
All of the following
Cisco IOS XE<17.15.2
Any of the following
Cisco Catalyst 9100
Cisco Catalyst 9105
Cisco Catalyst 9105ax
Cisco Catalyst 9105axi
Cisco Catalyst 9105axw
Cisco Catalyst 9105i
Cisco Catalyst 9105w
Cisco Catalyst 9115
Cisco Catalyst 9115 Ap
Cisco Catalyst 9115ax
Cisco Catalyst 9115axe
Cisco Catalyst 9115axi
Cisco Catalyst 9117
Cisco Catalyst 9117 Ap
Cisco Catalyst 9117ax
Cisco Catalyst 9117axi
Cisco Catalyst 9120
Cisco Catalyst 9120 Ap
Cisco Catalyst 9120ax
Cisco Catalyst 9120axe
Cisco Catalyst 9120axi
Cisco Catalyst 9120axp
Cisco Catalyst 9124
Cisco Catalyst 9124ax
Cisco Catalyst 9124axd
Cisco Catalyst 9124axi
Cisco Catalyst 9124d
Cisco Catalyst 9124e
Cisco Catalyst 9124i
Cisco Catalyst 9130
Cisco Catalyst 9130 Ap
Cisco Catalyst 9130ax
Cisco Catalyst 9130axe
Cisco Catalyst 9130axi
Cisco Catalyst 9136
Cisco Catalyst 9162
Cisco Catalyst 9164
Cisco Catalyst 9166
Cisco Catalyst 9166d1

Event History

May 7, 2025
CVE Published
via MITRE·05:38 PM
Data Sourced
via MITRE·05:38 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-20196?

CVE-2025-20196 is classified as a denial of service vulnerability.

2

How do I fix CVE-2025-20196?

To address CVE-2025-20196, update affected Cisco IOS and IOS XE Software to the latest patched version.

3

What systems are affected by CVE-2025-20196?

CVE-2025-20196 affects devices running Cisco IOS Software and Cisco IOS XE Software.

4

How can CVE-2025-20196 be exploited?

An attacker can exploit CVE-2025-20196 through unauthenticated remote access to disrupt the Cisco IOx application hosting environment.

5

What is the impact of CVE-2025-20196?

CVE-2025-20196 can lead to the Cisco IOx application hosting environment becoming unresponsive, resulting in a denial of service.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203