CVE-2025-20196

MEDIUM

5.3

CVSS Score

Published: May 7, 2025 at 05:38 PM UTC

Updated: June 17, 2026 at 08:41 AM UTC

53 products affected across 1 vendorIOS XeCGR1000 FirmwareIC3000 Industrial Compute Gateway Firmware

Using IOS by Cisco?

Get instant alerts when new vulnerabilities affect IOS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.3

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

A vulnerability in the Cisco IOx application hosting environment of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the Cisco IOx application hosting environment to stop responding, resulting in a denial of service (DoS) condition. This vulnerability is due to the improper handling of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to cause the Cisco IOx application hosting environment to stop responding. The IOx process will need to be manually restarted to recover services.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

807 Industrial Integrated Services Router Firmware · Cisco

95%

v < 15.9(3)m11

Affected range stops below 15.9(3)m11, so it looks safe — our inference, not a vendor statement

cisco-807-industrial-integrated-services-router (same device)

809 Industrial Integrated Services Router Firmware · Cisco

95%

v < 15.9(3)m11

Affected range stops below 15.9(3)m11, so it looks safe — our inference, not a vendor statement

cisco-809-industrial-integrated-services-router (same device)

829 Industrial Integrated Services Router Firmware · Cisco

95%

v < 15.9(3)m11

Affected range stops below 15.9(3)m11, so it looks safe — our inference, not a vendor statement

cisco-829-industrial-integrated-services-router (same device)

CGR1000 Firmware · Cisco

95%

v < 15.9(3)m12

Affected range stops below 15.9(3)m12, so it looks safe — our inference, not a vendor statement

cisco-cgr1000 (same device)

IC3000 Industrial Compute Gateway Firmware · Cisco

95%

v < 1.5.2

Affected range stops below 1.5.2, so it looks safe — our inference, not a vendor statement

cisco-ic3000-industrial-compute-gateway (same device)

IOS Xe · Cisco

95%

v < 17.15.216.1.1 16.1.2 16.1.3 16.2.1 16.2.2 16.3.1 16.3.10 16.3.11 16.3.1a 16.3.2 16.3.3 16.3.4 16.3.5 16.3.5b 16.3.6 16.3.7 16.3.8 16.3.9 16.4.1 16.4.2 16.4.3 16.5.1 16.5.1a 16.5.1b 16.5.2 16.5.3 17.1.1 17.1.1a 17.1.1s 17.1.1t 17.1.3 17.10.1 17.10.1a 17.10.1b 17.11.1 17.11.1a 17.11.99SW17.11.99sw17.12.1 17.12.1a 17.12.1w 17.12.1x 17.12.1y 17.12.1z 17.12.1z1 17.12.1z2 17.12.1z4 17.12.2 17.12.2a 17.12.3 17.12.3a 17.12.4 17.12.4a 17.12.4b 17.13.1 17.13.1a 17.14.1 17.14.1a 17.15.2 17.15.2a 17.15.2b 17.15.2c 17.2.1 17.2.1a 17.2.1r 17.2.1v 17.2.2 17.2.3 17.3.1 17.3.1a 17.3.1w 17.3.1x 17.3.1z 17.3.2 17.3.2a 17.3.3 17.3.4 17.3.4a 17.3.4b 17.3.4c 17.3.5 17.3.5a 17.3.5b 17.3.6 17.3.7 17.3.8 17.3.8a 17.4.1 17.4.1a 17.4.1b 17.4.2 17.4.2a 17.5.1 17.5.1a 17.6.1 17.6.1a 17.6.1w 17.6.1x 17.6.1y 17.6.1z 17.6.1z1 17.6.2 17.6.3 17.6.3a 17.6.4 17.6.5 17.6.5a 17.6.6 17.6.6a 17.6.7 17.6.8 17.6.8a 17.7.1 17.7.1a 17.7.1b 17.7.2 17.8.1 17.8.1a 17.9.1 17.9.1a 17.9.1w 17.9.1x 17.9.1x1 17.9.1y 17.9.1y1 17.9.2 17.9.2a 17.9.3 17.9.3a 17.9.4 17.9.4a 17.9.5 17.9.5a 17.9.5b 17.9.5e 17.9.5f 17.9.6 17.9.6a

Affected range stops below 17.15.2, so it looks safe — our inference, not a vendor statement

cisco-catalyst-9100 (environment) · cisco-catalyst-9105 (environment) · cisco-catalyst-9105ax (environment) · cisco-catalyst-9105axi (environment) · cisco-catalyst-9105axw (environment) · cisco-catalyst-9105i (environment) · cisco-catalyst-9105w (environment) · cisco-catalyst-9115 (environment) · cisco-catalyst-9115-ap (environment) · cisco-catalyst-9115ax (environment) · cisco-catalyst-9115axe (environment) · cisco-catalyst-9115axi (environment) · cisco-catalyst-9117 (environment) · cisco-catalyst-9117-ap (environment) · cisco-catalyst-9117ax (environment) · cisco-catalyst-9117axi (environment) · cisco-catalyst-9120 (environment) · cisco-catalyst-9120-ap (environment) · cisco-catalyst-9120ax (environment) · cisco-catalyst-9120axe (environment) · cisco-catalyst-9120axi (environment) · cisco-catalyst-9120axp (environment) · cisco-catalyst-9124 (environment) · cisco-catalyst-9124ax (environment) · cisco-catalyst-9124axd (environment) · cisco-catalyst-9124axi (environment) · cisco-catalyst-9124d (environment) · cisco-catalyst-9124e (environment) · cisco-catalyst-9124i (environment) · cisco-catalyst-9130 (environment) · cisco-catalyst-9130-ap (environment) · cisco-catalyst-9130ax (environment) · cisco-catalyst-9130axe (environment) · cisco-catalyst-9130axi (environment) · cisco-catalyst-9136 (environment) · cisco-catalyst-9162 (environment) · cisco-catalyst-9164 (environment) · cisco-catalyst-9166 (environment) · cisco-catalyst-9166d1 (environment)

IR510 Wpan Firmware · Cisco

95%

All versions

cisco-ir510-wpan (same device)

IOS · Cisconpm

60%

All versions

807 Industrial Integrated Services Router · Ciscodevice

80%

All versions

809 Industrial Integrated Services Router · Ciscodevice

80%