CVE-2025-20141

CWE-770 — Allocation without Limits4 documents4 sources
Severity
7.4HIGH
EPSS
0.1%
top 79.42%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Cisco IOS XR SoftwareCisco IOS XR
Timeline
PublishedMar 12

Description

A vulnerability in the handling of specific packets that are punted from a line card to a route processor in Cisco IOS XR Software Release 7.9.2 could allow an unauthenticated, adjacent attacker to cause control plane traffic to stop working on multiple Cisco IOS XR platforms. This vulnerability is due to incorrect handling of packets that are punted to the route processor. An attacker could exploit this vulnerability by sending traffic, which must be handled by the Linux stack on the route pro…

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:HExploitability: 2.8 | Impact: 4.0

Affected Packages2 packages

▶NVDcisco/ios_xr7.9.2

🔴Vulnerability Details

2
CVEList
Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerabillity↗2025-03-12
▶
GHSA
GHSA-2wx7-j39g-4p6g: A vulnerability in the handling of specific packets that are punted from a line card to a route processor in Cisco IOS XR Software Release 7↗2025-03-12
▶

📋Vendor Advisories

1
Cisco
Cisco IOS XR Software Release 7.9.2 Denial of Service Vulnerability↗2025-03-12
▶