（CVE-2025-20149）Cisco IOS和Cisco IOS XE软件CLI缓冲区溢出漏洞导致拒绝服务

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-cli-EB7cZ6yO
• https://nvd.nist.gov/vuln/detail/CVE-2025-20149
• https://cvefeed.io/vuln/detail/CVE-2025-20149
• https://github.com/advisories/GHSA-833m-h6fc-hmvx
• https://vigilance.fr/vulnerability/Cisco-IOS-IOS-XE-denial-of-service-via-CLI-48288
• https://www.bleepingcomputer.com/news/security/cisco-warns-of-ios-zero-day-vulnerability-exploited-in-attacks/
• https://mondoo.com/vulnerability-intelligence/vulnerability/CISCO-CVE-2025-20149
• https://dbugs.ptsecurity.com/vulnerability/PT-2025-39295

Related Vulnerabilities

• Cisco ISE /admin/files-upload/ 文件上传漏洞（CVE-2025-20282）
• PoCCVE-2025-20282: Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload
• 思科系统（中国）网络技术有限公司Cisco AP WebUI存在弱口令
• PoCCVE-2026-20079: Cisco Secure Firewall Management Center - Authentication Bypass
• Cisco Catalyst SD-WAN身份验证绕过漏洞
• Cisco Catalyst SD-WAN 权限绕过漏洞（CVE-2026-20127）
• Cisco Asyncos 整数溢出漏洞 可导致远程代码执行
• PoCcisco-ucm-cluster-enum: Cisco Unified Communications Manager - Cluster Enumeration
• Cisco Any Router and Switch 默认口令漏洞
• Cisco IOS 缓冲区溢出漏洞
• PoCCVE-2024-20404: Cisco Finesse - Server-Side Request Forgery (SSRF)
• Cisco IOS XE Software 命令注入漏洞