Vulnslist

Cisco vulnerabilities by product, model, software, and advisory.

CVE-2025-20315

A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, causing a denial of service (DoS) condition. This vulnerability is due to improper handling of malformed Control and Provisioning of Wireless Access Points (CAPWAP) packets. An attacker could exploit this vulnerability by sending malformed CAPWAP packets through an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

SeverityHIGH
CVSS8.6
CWECWE-805
KEV No
Published
Modified

Related Products

Product Advisory Evidence
Cisco IOS cisco-sa-nbar-dos-LAvwTmeT Cisco OpenVuln
Cisco IOS XE Software cisco-sa-nbar-dos-LAvwTmeT Cisco OpenVuln
Cisco Catalyst 9600 Series Switches cisco-sa-nbar-dos-LAvwTmeT Cisco OpenVuln · software-dependent
Cisco Catalyst 9500 Series Switches cisco-sa-nbar-dos-LAvwTmeT Cisco OpenVuln · software-dependent
Cisco Catalyst 9400 Series Switches cisco-sa-nbar-dos-LAvwTmeT Cisco OpenVuln · software-dependent
Cisco Catalyst 9200 Series Switches cisco-sa-nbar-dos-LAvwTmeT Cisco OpenVuln · software-dependent
Cisco Catalyst 9300 Series Switches cisco-sa-nbar-dos-LAvwTmeT Cisco OpenVuln · software-dependent