CVE-2025-20315: High severity Cisco IOS XE Software vulnerability
A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, causing a denial of service (DoS) condition. This vulnerability is due to improper handling of malformed Control and Provisioning of Wireless Access Points (CAPWAP) packets. An attacker could exploit this vulnerability by sending malformed CAPWAP packets through an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20315?
CVE-2025-20315 has a high severity rating due to its potential to cause a denial of service (DoS) condition.
How do I fix CVE-2025-20315?
To address CVE-2025-20315, update your Cisco IOS XE Software to the latest version available from Cisco.
What is the impact of CVE-2025-20315 on affected devices?
CVE-2025-20315 can cause affected devices to reload unexpectedly, leading to a denial of service.
Who is affected by CVE-2025-20315?
CVE-2025-20315 affects any devices running a vulnerable version of Cisco IOS XE Software with the NBAR feature enabled.
Can CVE-2025-20315 be exploited remotely?
Yes, CVE-2025-20315 can be exploited by an unauthenticated, remote attacker.