What is the CVSS score of CVE-2026-20125?

CVE-2026-20125 has a CVSS 3.1 base score of 7.7 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H. EPSS exploitation probability: 0.1%.

How to fix or mitigate CVE-2026-20125?

Within 24 hours: Inventory all Cisco IOS/IOS XE devices and identify which are running vulnerable versions listed in ENISA EUVD-2026-15449. Within 7 days: Implement network access controls to restrict HTTP server access to trusted administrative networks only; disable HTTP if HTTPS alternatives exist. Within 30 days: Evaluate and plan migration to patched software versions as they become available; conduct security review of administrative credential management and access logs for suspicious activity.

Apple CVE-2026-20125

EUVD-2026-15449 HIGH

Improper Handling of Syntactically Invalid Structure (CWE-228)

2026-03-25 cisco

Denial Of Service Apple Cisco

7.7

CVSS 3.1 · NVD

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Authenticate to Cisco IOS device
Delivery

Send malformed HTTP requests
Exploit

Trigger improper input validation
Execution

Watchdog timer expires
Persist

Device reloads unexpectedly
Impact

Denial of service achieved

Vulnerability Assessment

Weakness	CWE CWE-228 OWASP Top 10:2025 A06:2021 - Vulnerable and Outdated Components ASVS 5.0 V1 - Encoding and Sanitization Parameter handling
Exploitation Conditions	Requires HTTP Server feature enabled on Cisco IOS or IOS XE Release 3E. Attacker must be authenticated with network access to send malformed HTTP requests to the device. No user interaction needed.
Impact	Despite the CVSS score of 7.7, the real-world exploitability is constrained by the PR:L (low privileges required) condition, meaning attackers must first obtain valid user credentials to the device. The attack vector is network-based (AV:N) with low complexity (AC:L), making it straightforward to execute once authenticated. The impact is limited to availability (A:H) with no confidentiality or integrity impact, resulting in service disruption rather than data compromise. The vulnerability affects only IOS XE Release 3E specifically, narrowing the actual attack surface significantly from the extensive version list. Without EPSS or KEV data indicating active exploitation, and given the authentication requirement, this represents a moderate priority for organizations with proper access controls. However, for internet-facing management interfaces with weak authentication, the risk escalates substantially. The automatable nature once credentials are obtained makes this suitable for inclusion in credential-stuffing campaigns targeting network infrastructure.
Exploit ScenarioDerived	An attacker who has compromised low-privileged user credentials through phishing, credential stuffing, or insider access connects to a Cisco router's HTTP management interface over the network. The attacker crafts and sends specially malformed HTTP requests designed to trigger improper input validation in the HTTP Server component, causing the device's watchdog timer to expire. The router immediately reloads, disrupting network services for all connected users and potentially causing cascading failures in dependent infrastructure. The attacker can repeat this process to create sustained denial of service, particularly effective during critical business operations or as a distraction technique during multi-stage attacks.

This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).

No patch listed yet 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 25, 2026

HTTP Server input validation failures in Cisco IOS and IOS XE Release 3E enable authenticated remote attackers to trigger device reloads via malformed requests, causing denial of service. An attacker with valid credentials can exploit improper input handling to exhaust watchdog timers and force unexpected system restarts. No patch is currently available for this vulnerability affecting Cisco and Apple products.

Earlier versions of this analysis (1)

v1 Mar 25, 2026 - 16:16 CVSS 7.7

A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E allows an authenticated remote attacker to trigger a denial of service by causing the device to reload unexpectedly. The attacker must possess valid credentials and can exploit the flaw by sending malformed HTTP requests that cause a watchdog timer expiration. With a CVSS score of 7.7 (High), this vulnerability affects hundreds of specific IOS and IOS XE software versions as documented by ENISA EUVD-2026-15449.

RemediationAI

Apply security updates as recommended in the Cisco Security Advisory at https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-http-dos-sbv8XRpL, which provides specific fixed versions for each affected release train. Until patching is completed, disable the HTTP Server feature if not required for management operations using the 'no ip http server' and 'no ip http secure-server' commands in global configuration mode. If HTTP/HTTPS management access is necessary, implement strict access control lists (ACLs) to limit HTTP Server access to only trusted management networks and IP addresses, enforce strong authentication mechanisms, and monitor for suspicious HTTP request patterns that could indicate exploitation attempts. Deploy out-of-band management networks where possible to isolate device management traffic from production networks. Prioritize patching for devices with internet-facing management interfaces or those accessible from less-trusted network segments.

Affected VersionsENISA

IOS 12.2(33)SCI1a

Cisco IOS XE Software 3.17.3S

Cisco IOS XE Software 3.5.1E

IOS 15.3(3)JAX1

IOS 15.6(2)SP1

IOS 15.0(2)SG10

IOS 15.2(7)E1

IOS 12.2(50)SQ3

Cisco IOS XE Software 3.18.5SP

IOS 15.8(3)M9

IOS 15.3(3)JJ1

IOS 15.0(2)SQD3

IOS 15.3(3)JPM

IOS 15.2(2)S0a

IOS 15.2(7)E3

IOS 15.8(3)M3a

IOS 15.3(3)JPP

IOS 15.3(3)JPK4

IOS 15.0(1)SY2

IOS 12.2(33)SXJ3

IOS 15.6(3)M3

IOS 15.4(1)S

IOS 15.9(3)M6

IOS 15.8(3)M8

IOS 15.3(3)JK2a

IOS 15.3(3)JA1

IOS 15.7(3)M7

IOS 15.4(1)S2

IOS 12.4(3)JK3

Cisco IOS XE Software 3.10.3E

IOS 15.2(2)E6

IOS 15.6(3)M2

IOS 12.4(24)MDB15

IOS 12.2(60)EZ8

IOS 15.3(3)JPD

IOS 15.2(1)E

IOS 12.4(3)JK

IOS 15.1(3)S

IOS 12.4(25e)JAM3

IOS 15.1(3)S3

IOS 15.0(1)SE3

IOS 15.2(2)S1

IOS 12.4(24)MDB17

IOS 15.8(3)M3b

IOS 15.3(3)JPI1t

IOS 15.3(3)JF11

IOS 15.1(3)S0a

IOS 15.3(3)JDA7

IOS 15.3(3)JC5

IOS 15.2(4)EA

IOS 12.2(33)SCH6

IOS 15.9(3)M2a

Cisco IOS XE Software 3.6.2aE

IOS 15.3(3)JG1

IOS 15.2(7b)E0b

IOS 15.1(4)M7

IOS 15.3(3)JPN2

Cisco IOS XE Software 3.15.3S

IOS 15.3(3)JI5

IOS 15.2(4)E8

IOS 15.1(1)S

IOS 15.1(4)GC1

IOS 15.3(3)JC3

IOS 12.2(33)SRE5

IOS 15.3(3)JBB

IOS 12.2(33)SCG3

Cisco IOS XE Software 3.16.2bS

IOS 15.8(3)M

IOS 15.5(3)M0a

IOS 15.3(3)JK11

IOS 15.1(2)S

IOS 15.6(2)SP7

IOS 15.6(1)T3

IOS 15.1(3)S5a

IOS 15.2(4)M11

IOS 15.5(1)S2

IOS 15.3(3)JF5

Cisco IOS XE Software 3.18.0SP

IOS 12.2(33)SCI

IOS 15.2(1)SY0a

Cisco IOS XE Software 3.16.4dS

IOS 15.3(3)M3

IOS 15.1(1)S1

IOS 12.2(33)SXI5

IOS 12.2(50)SQ6

IOS 15.2(6)E3

Cisco IOS XE Software 3.5.3SQ

IOS 15.2(4)E10

IOS 15.1(2)SY2

Cisco IOS XE Software 3.13.5aS

IOS 15.2(4)S4a

IOS 12.2(33)SRE2

IOS 15.9(3)M4

IOS 15.3(3)JPN5

IOS 15.5(3)M3

IOS 15.3(3)JPK5

IOS 12.4(25d)JAX

IOS 15.5(3)S3

IOS 15.6(3)M9

IOS 15.2(4)M2

IOS 15.4(1)S1

IOS 15.3(3)JBB6a

IOS 15.0(1)SE2

IOS 15.3(3)JPJ9

Cisco IOS XE Software 3.14.0S

IOS 15.2(4)JB4

IOS 15.2(5)E

IOS 15.0(2)SE13

Cisco IOS XE Software 3.13.0S

IOS 15.2(4)M1

Cisco IOS XE Software 3.6.10E

IOS 15.9(3)M10

IOS 15.3(3)JPQ4

IOS 15.2(7)E1a

IOS 15.1(2)SG6

IOS 12.2(58)SE

IOS 15.3(3)JC6

IOS 12.2(33)SXI2

Cisco IOS XE Software 3.13.6aS

IOS 12.4(25e)JAX2

IOS 12.2(33)SRE8

IOS 12.4(25e)JAM5

IOS 15.1(2)SY7

IOS 15.1(1)SY5

IOS 15.5(1)S3

Cisco IOS XE Software 3.18.3S

IOS 15.4(3)S10

Cisco IOS XE Software 3.16.9S

IOS 15.0(2)EA

Cisco IOS XE Software 3.18.3SP

IOS 15.3(3)JAA

IOS 15.0(2)EY3

Cisco IOS XE Software 3.11.9E

IOS 15.1(2)SY3

IOS 12.2(60)EZ2

IOS 12.4(25e)JAP10

IOS 15.2(4)EA3

IOS 15.3(3)JNP1

IOS 15.1(2)SY11

IOS 15.8(3)M4

IOS 15.0(2)EK1

Cisco IOS XE Software 3.7.1E

IOS 15.2(6)E0a

IOS 15.2(4)GC2

Cisco IOS XE Software 3.6.7E

Cisco IOS XE Software 3.17.1S

Cisco IOS XE Software 3.18.6SP

IOS 15.3(3)JND

IOS 12.2(33)SXI3

IOS 15.5(2)S1

IOS 15.9(3)M12

Cisco IOS XE Software 3.16.2S

IOS 15.5(3)M6

IOS 12.2(60)EZ1

IOS 15.0(2)SE12

IOS 12.4(25e)JAM6

Cisco IOS XE Software 3.16.5S

IOS 15.1(4)GC

IOS 15.9(3)M8b

IOS 15.3(3)JPQ

IOS 12.4(25e)JAP12

IOS 15.5(1)T4

IOS 15.3(3)JPN

IOS 15.3(3)JK1

IOS 15.2(2)E10

Cisco IOS XE Software 3.16.0cS

IOS 15.3(3)JDA8

IOS 15.2(4)EC1

Cisco IOS XE Software 3.11.13E

IOS 15.1(2)SY12

IOS 15.9(3)M8

IOS 15.2(4)JB3

IOS 15.8(3)M6

IOS 15.3(3)JD13

IOS 15.2(4)E7

IOS 15.2(2)E

IOS 15.3(3)JPK2

IOS 15.3(3)JPK1

IOS 15.3(3)JC1

IOS 15.3(2)T2

IOS 15.6(3)M6a

IOS 15.3(3)S

IOS 12.2(33)SXJ1

IOS 12.2(33)SCI2

IOS 15.2(1)S

Cisco IOS XE Software 3.13.7aS

IOS 15.3(1)S

IOS 15.2(7)E6

Cisco IOS XE Software 3.8.4E

Cisco IOS XE Software 3.7.2E

IOS 15.0(2)SG1

IOS 12.2(33)SRE9

IOS 15.3(3)JND1

IOS 15.5(3)M

IOS 15.2(1)SY

IOS 15.2(4)EA7

IOS 15.3(3)JK2

IOS 15.3(3)JA6

IOS 15.5(3)S5

IOS 12.2(33)SRE7

IOS 15.3(3)JPJ4

IOS 12.2(55)SE12

IOS 15.9(3)M9

Cisco IOS XE Software 3.10.1E

IOS 15.1(4)M

IOS 15.2(4)M5

IOS 15.1(4)M1

IOS 15.3(3)JN3

IOS 15.4(1)CG

IOS 15.6(1)S

IOS 15.3(3)JD6

Cisco IOS XE Software 3.11.1aE

IOS 15.0(2)SQD4

IOS 15.9(3)M11

IOS 15.4(2)S2

IOS 15.3(3)JF6

IOS 15.3(3)JF9

IOS 15.2(4)E9

Cisco IOS XE Software 3.13.2S

IOS 15.3(3)JD

IOS 15.9(3)M3

IOS 15.2(7)E12

IOS 15.7(3)M2

IOS 15.0(2)SE4

IOS 15.2(1)SY5

IOS 12.2(33)SRE9a

IOS 12.4(24)MDB19

IOS 15.2(1)S2

IOS 15.2(2)EA2

IOS 15.0(2)EY2

IOS 15.5(1)SY6

IOS 15.4(3)S4

IOS 15.4(1)SY2

Cisco IOS XE Software 3.18.4SP

IOS 15.2(6)E1

IOS 15.2(4)M3

IOS 15.3(3)JBB1

IOS 15.3(3)JD14

IOS 15.6(2)T2

IOS 15.2(5)E1

IOS 15.3(3)JC4

IOS 12.2(33)SCH3

IOS 15.3(3)JNC4

IOS 12.2(55)SE

Cisco IOS XE Software 3.5.7SQ

IOS 15.3(3)JDA9

IOS 15.3(3)JAB

IOS 15.2(4)JB6

IOS 15.2(6)E2b

IOS 15.2(2)JB3

IOS 12.2(55)EZ

Cisco IOS XE Software 3.16.7aS

IOS 15.1(4)GC2

IOS 15.0(1)SY4

IOS 15.3(3)JPJ2t

IOS 15.1(2)SY9

IOS 15.0(2)SG4

Cisco IOS XE Software 3.6.3E

IOS 12.4(25e)JAO5

Cisco IOS XE Software 3.7.4E

IOS 15.7(3)M4a

IOS 12.2(55)SE1

IOS 15.3(3)JPB1

IOS 15.2(8)E8

IOS 15.6(3)M6

IOS 15.2(7)E9

IOS 15.3(2)S2

IOS 15.2(2)E5b

IOS 15.3(3)M9

Cisco IOS XE Software 3.11.5E

IOS 15.0(1)SY1

IOS 12.2(55)SE7

Cisco IOS XE Software 3.5.2SQ

IOS 15.3(3)JD9

IOS 15.3(1)SY1

IOS 15.6(3)M

IOS 15.6(1)T

IOS 15.4(1)SY1

IOS 15.3(3)M

IOS 12.2(60)EZ3

IOS 15.5(1)SY12

IOS 15.0(1)EY

IOS 15.3(3)M8

IOS 15.4(2)S4

IOS 15.3(3)JBB2

IOS 12.2(33)SXI4

IOS 15.3(3)JI6

IOS 15.2(4)EC2

IOS 15.7(3)M1

IOS 15.9(3)M7

IOS 12.2(33)SCG6

IOS 12.2(33)SXI8

IOS 15.1(2)SY4

Cisco IOS XE Software 3.8.5E

IOS 15.5(1)SY

Cisco IOS XE Software 3.10.0cE

IOS 15.2(2)SY1

IOS 15.4(1)SY4

IOS 15.2(4)EA4

IOS 15.9(3)M3b

IOS 15.5(3)M6a

Cisco IOS XE Software 3.11.4S

IOS 15.3(3)JD2

IOS 15.1(1)SY4

IOS 15.3(3)JPK7

IOS 15.5(1)SY15

IOS 12.2(33)SCH1

Cisco IOS XE Software 3.17.0S

IOS 15.2(7)E7

IOS 15.1(2)SY14

IOS 15.1(1)SY2

IOS 15.2(4)EA9

IOS 15.3(2)T3

Cisco IOS XE Software 3.6.4E

IOS 15.2(4)M10

IOS 15.2(4)EA9a

IOS 15.2(3a)E

IOS 15.0(2)SQD7

IOS 12.2(55)SE3

IOS 15.2(3)E4

IOS 15.8(3)M2a

IOS 15.2(4)M

IOS 12.2(33)SCI3

IOS 15.1(3)S1

IOS 15.3(3)JNB4

IOS 12.2(33)SCJ2a

IOS 15.5(3)S6b

IOS 15.0(2)SE

IOS 12.4(25e)JAX

Cisco IOS XE Software 3.12.2S

IOS 15.4(3)S9

IOS 15.5(1)SY3

IOS 15.3(3)JA5

IOS 15.0(2)SE8

IOS 12.2(33)SCI1

IOS 15.2(8)E5

IOS 12.2(33)SCG1

IOS 15.5(1)T

IOS 15.3(3)JD4

IOS 15.7(3)M4

IOS 15.3(3)JF15

Cisco IOS XE Software 3.8.1E

IOS 15.2(1)GC2

IOS 15.5(2)T1

IOS 15.2(4)JN

IOS 15.2(4)EA8

IOS 15.3(3)JD17

IOS 15.3(3)JB

IOS 15.0(1)SE

IOS 15.2(8)E4

Cisco IOS XE Software 3.18.1SP

IOS 15.3(3)JK8

IOS 12.2(33)SXJ2

IOS 12.2(33)SRE7a

IOS 15.3(3)M6

IOS 15.6(2)SP4

IOS 15.3(3)JPN4

IOS 15.3(3)JD11

IOS 12.2(55)SE6

Cisco IOS XE Software 3.11.0E

IOS 12.2(33)SCH2

Cisco IOS XE Software 3.18.1S

IOS 12.4(25e)JAP

Cisco IOS XE Software 3.12.0aS

IOS 15.2(4)GC1

IOS 15.3(3)JPJ8a

IOS 12.4(25e)JAM

IOS 15.3(3)S7

IOS 15.8(3)M5

IOS 15.2(7)E8

Cisco IOS XE Software 3.15.4S

IOS 15.3(1)T3

IOS 15.3(3)JD16

IOS 12.2(33)SRE15

IOS 12.2(33)SCJ2c

IOS 15.8(3)M3

IOS 15.3(3)JC14

IOS 12.2(33)SXI10

IOS 15.2(3)GC

IOS 15.2(2)JB2

IOS 15.0(2)EK

IOS 15.1(2)SY10

IOS 15.3(3)JA8

IOS 12.2(50)SQ7

IOS 15.1(4)M2

IOS 15.2(7)E4

IOS 12.2(33)SCJ4

IOS 15.2(4)M8

IOS 15.2(3)E

IOS 15.5(2)T3

IOS 15.3(3)JPR

IOS 15.1(1)S2

IOS 15.6(2)S4

IOS 15.3(3)JDA14

IOS 15.3(3)JK5

IOS 15.9(3)M4a

IOS 15.2(4)S3a

IOS 15.2(7)E13

IOS 15.3(3)JC8

IOS 15.8(3)M2

IOS 15.3(3)JPK6

Cisco IOS XE Software 3.18.3bSP

IOS 12.2(33)SRE11

Cisco IOS XE Software 3.11.10E

Cisco IOS XE Software 3.11.0S

IOS 15.3(3)JNB

Cisco IOS XE Software 3.17.4S

IOS 15.2(4)S5

IOS 15.6(1)T1

IOS 15.6(2)S1

Cisco IOS XE Software 3.18.1cSP

IOS 15.4(3)S6

IOS 15.2(4)M6a

IOS 15.2(4)E10d

Cisco IOS XE Software 3.18.1bSP

IOS 12.4(25e)JAO1

IOS 12.4(25e)JAO6

IOS 15.5(3)M4a

IOS 15.2(1)E1

IOS 12.4(3)JK1

IOS 15.6(1)S4

IOS 12.4(24)MDB1

IOS 12.2(33)SXI7

IOS 15.1(1)SG

Cisco IOS XE Software 3.6.8E

IOS 12.4(25e)JAP11

IOS 15.8(3)M0b

IOS 15.9(3)M1

IOS 12.2(33)SCG7

IOS 15.3(3)JPJ2

IOS 12.2(60)EZ

IOS 12.2(33)SXI8a

IOS 15.3(3)JBB5

IOS 15.3(1)T4

IOS 15.0(2)SG9

IOS 15.3(3)JPJ3a

IOS 12.4(24)MDB4

Cisco IOS XE Software 3.16.7bS

IOS 15.4(2)S

IOS 15.1(2)SG8

Cisco IOS XE Software 3.16.8S

IOS 15.2(4)JB

IOS 15.3(2)T1

IOS 15.3(1)S2

IOS 15.3(3)JF8

IOS 12.2(33)SXI14

IOS 15.2(1)SY1

IOS 15.3(3)JF12i

IOS 15.0(1)SY5

IOS 12.2(55)SE4

IOS 15.1(2)GC

IOS 15.5(2)S

IOS 15.1(2)SY13

IOS 15.3(3)JF14

IOS 15.2(1)GC

IOS 15.7(3)M6

Cisco IOS XE Software 3.18.0S

IOS 12.2(33)SCH2a

IOS 12.4(25e)JAP4

IOS 15.2(7)E5

IOS 15.4(1)T4

Cisco IOS XE Software 3.13.5S

IOS 15.3(1)SY

Cisco IOS XE Software 3.18.9SP

IOS 15.2(2)E2

IOS 15.7(3)M5

IOS 15.4(2)S3

Cisco IOS XE Software 3.16.4bS

IOS 15.5(1)SY16

IOS 12.2(33)SCH5

IOS 15.1(4)M8

IOS 12.2(33)SRE1

IOS 15.3(3)JPK3

IOS 15.5(3)M5

IOS 15.6(1)S1

IOS 15.2(2)JB5

IOS 15.1(2)SY1

IOS 15.0(2)SG7

IOS 15.8(3)M0a

IOS 15.3(3)M7

Cisco IOS XE Software 3.9.0E

Cisco IOS XE Software 3.5.1SQ

IOS 15.1(2)SG7

IOS 15.0(1)SY3

IOS 15.2(4)JB3s

IOS 15.2(4)S1

IOS 15.5(1)S1

IOS 15.2(4)EA6

IOS 15.2(7)E2

IOS 15.5(2)T

IOS 15.3(3)JPJ11

IOS 15.9(3)M

IOS 12.4(25e)JAM4

IOS 15.4(1)T

IOS 15.2(4)E3

IOS 15.3(3)JPK

IOS 12.2(33)SXJ7

IOS 12.2(33)SRE6

IOS 15.5(3)S10

IOS 15.3(3)JPQ2

Cisco IOS XE Software 3.8.7E

IOS 15.0(1)SY8

IOS 15.3(3)JN9

IOS 15.9(3)M7a

IOS 15.2(2)E3

IOS 15.3(1)T

IOS 15.3(3)JPB

IOS 12.4(25e)JAP5

IOS 15.6(3)M8

IOS 12.2(33)SXJ5

IOS 15.5(1)SY1

Cisco IOS XE Software 3.18.7SP

IOS 12.2(25)EZ1

Cisco IOS XE Software 3.14.4S

IOS 15.0(1)SE1

Cisco IOS XE Software 3.6.5E

IOS 12.4(25e)JAO2

IOS 15.3(3)JPC

IOS 15.2(4)M4

IOS 12.2(33)SXJ9

IOS 12.2(33)SXI13

IOS 12.2(55)SE10

Cisco IOS XE Software 3.14.2S

Cisco IOS XE Software 3.5.6SQ

IOS 15.1(2)GC1

IOS 15.0(1)SY

Cisco IOS XE Software 3.5.0SQ

IOS 15.3(3)JPT3

Cisco IOS XE Software 3.8.5aE

IOS 15.3(3)JF2

IOS 15.2(4)S

IOS 12.4(24)MDB8

IOS 15.1(1)SY6

Cisco IOS XE Software 3.11.8E

IOS 15.3(3)JPC1

IOS 15.7(3)M3

Cisco IOS XE Software 3.14.1S

IOS 15.4(1)CG1

IOS 15.3(3)JC

IOS 15.0(2)SE1

IOS 15.0(2)SE10

IOS 12.2(60)EZ11

IOS 12.2(33)SRE0a

IOS 15.1(2)SY6

IOS 15.3(3)JAX

IOS 15.3(3)JCA9

IOS 15.2(3)E3

IOS 15.0(2)SQD2

IOS 15.3(3)JC9

IOS 15.5(2)T2

IOS 15.2(4)EA1

Cisco IOS XE Software 3.5.4SQ

IOS 15.3(3)JF14i

IOS 15.6(2)SP9

IOS 15.3(3)JF1

IOS 15.0(1)SY6

IOS 15.3(3)JPN3

Cisco IOS XE Software 3.5.8SQ

IOS 15.3(3)JN4

IOS 15.4(3)S

IOS 12.2(33)SXI11

IOS 15.3(3)JK8b

IOS 15.3(1)T1

Cisco IOS XE Software 3.13.0aS

IOS 12.2(55)SE8

IOS 15.2(4)E4

Cisco IOS XE Software 3.6.1E

IOS 12.2(60)EZ15

IOS 15.3(3)JPN1

Cisco IOS XE Software 3.15.1S

IOS 12.4(24)MDB16

Cisco IOS XE Software 3.15.2S

IOS 15.3(3)JA11

IOS 15.2(2)E9

IOS 15.3(3)JPK9

IOS 15.2(2a)E1

IOS 12.2(33)SCG5

IOS 12.4(24)MDB12

IOS 15.3(3)JH

IOS 15.3(3)JPJ5

IOS 15.3(3)JN7

Cisco IOS XE Software 3.16.1S

IOS 15.8(3)M1

IOS 15.0(2)SQD6

IOS 15.3(3)JAX2

IOS 12.4(25e)JAX1

IOS 15.0(2)SG3

IOS 15.3(3)JK6

IOS 12.2(33)SCJ3

IOS 12.2(58)EZ

IOS 15.3(3)JF4

Cisco IOS XE Software 3.18.2SP

IOS 15.6(1)T0a

IOS 15.0(2)SE7

IOS 12.2(33)SRE3

IOS 12.4(24)MDB10

Cisco IOS XE Software 3.11.3aE

IOS 15.2(2)SY2

IOS 15.3(3)JPI5

IOS 12.2(33)SRE13

IOS 15.2(4)M6

IOS 12.2(33)SCG2

IOS 15.2(2)E7

IOS 15.4(2)T4

IOS 15.2(7)E0s

Cisco IOS XE Software 3.8.2E

IOS 15.6(2)T

Cisco IOS XE Software 3.16.6bS

IOS 15.5(3)M8

IOS 15.0(2)SQD

IOS 15.2(2)JB4

IOS 15.2(7)E0b

IOS 15.4(2)T1

IOS 15.1(4)M9

IOS 15.3(3)JPJ7c

IOS 15.3(3)S1a

IOS 15.2(7)E11

IOS 15.6(3)M0a

Cisco IOS XE Software 3.11.3S

IOS 15.0(2)EA1

IOS 15.2(4)JB5m

IOS 15.1(2)S2

IOS 15.0(2)SE2

IOS 12.4(24)MDB5

IOS 15.3(3)JBB8

IOS 12.2(33)SRE4

Cisco IOS XE Software 3.18.2S

IOS 12.2(33)SRE15a

Cisco IOS XE Software 3.11.2E

IOS 15.0(2)SE9

IOS 12.2(60)EZ5

IOS 15.3(3)JPI1

IOS 15.3(3)JPN6

Cisco IOS XE Software 3.7.0E

IOS 15.2(8)E7

IOS 15.2(1)E2

Cisco IOS XE Software 3.12.4S

IOS 12.2(33)SXJ10

IOS 12.4(24)MDB14

IOS 15.1(2)GC2

IOS 12.2(33)SRE14

IOS 15.4(3)S5

IOS 15.2(4)GC3

IOS 15.3(3)JPC2

IOS 15.5(1)SY13

IOS 15.3(3)JDA13

IOS 15.3(3)JPQ5

IOS 15.2(5a)E1

IOS 15.3(3)JF12

IOS 12.2(33)SXI

IOS 15.7(3)M

Cisco IOS XE Software 3.13.6S

Cisco IOS XE Software 3.6.0E

Cisco IOS XE Software 3.9.1E

IOS 15.5(1)SY5

IOS 15.6(2)SP8

IOS 15.3(3)JND3

Cisco IOS XE Software 3.11.11E

Cisco IOS XE Software 3.13.2aS

IOS 12.2(50)SQ

IOS 12.2(33)SCH0a

IOS 15.3(3)JPI7

IOS 15.4(1)T2

Cisco IOS XE Software 3.15.0S

IOS 15.3(3)JG

Cisco IOS XE Software 3.10.0E

IOS 15.6(3)M1b

IOS 15.2(6)E0c

IOS 15.2(1)SY1a

IOS 15.0(2)SG2

IOS 15.2(4)JB3b

IOS 15.4(1)SY

Cisco IOS XE Software 3.8.3E

IOS 12.2(55)SE13

IOS 12.2(33)SCJ2b

IOS 15.5(1)T2

IOS 15.3(3)JNB1

Cisco IOS XE Software 3.11.1E

IOS 12.4(25d)JAX1

IOS 15.6(3)M7

IOS 15.6(1)S2

IOS 12.2(55)SE5

IOS 15.3(3)JI3

Cisco IOS XE Software 3.11.1S

IOS 15.1(1)SY1

IOS 15.3(3)JNB6

IOS 15.2(3)E1

IOS 15.5(2)S2

IOS 12.2(58)SE1

IOS 15.2(1)SY7

IOS 15.5(3)S6a

IOS 15.2(6)E2a

IOS 15.2(2)E8

IOS 15.2(5b)E

IOS 15.2(2)JB6

IOS 15.3(3)JNP3

IOS 12.4(24)MDB

IOS 15.2(4)E1

Cisco IOS XE Software 3.7.5E

IOS 15.0(1)SY9

IOS 12.2(44)SQ2

IOS 15.3(3)JJ

Cisco IOS XE Software 3.13.8S

IOS 15.3(3)JPK8

Cisco IOS XE Software 3.11.2S

IOS 15.2(4)EA5

IOS 15.5(3)M2

IOS 15.3(3)JPN7

IOS 15.3(2)S

IOS 15.3(3)JA10

IOS 12.2(33)SXI12

IOS 12.2(50)SQ1

IOS 12.2(33)SXJ6

Cisco IOS XE Software 3.16.4S

IOS 15.3(3)S4

IOS 15.5(3)M4

Cisco IOS XE Software 3.18.3aSP

IOS 15.3(3)S1

Cisco IOS XE Software 3.12.0S

IOS 15.3(3)JPI10

IOS 12.2(58)SE2

Cisco IOS XE Software 3.5.5SQ

Cisco IOS XE Software 3.11.7E

IOS 15.2(5)E2c

IOS 15.3(3)JNP

IOS 15.0(2)SQD5

IOS 15.2(2)EA

IOS 15.3(3)JA1m

IOS 15.3(3)JPJ10

IOS 15.4(3)S3

IOS 15.5(3)S

IOS 15.3(3)JK1t

IOS 15.0(1)SY7a

Cisco IOS XE Software 3.6.6E

IOS 12.4(25e)JAP1

IOS 15.4(3)S7

IOS 15.3(3)JD3

IOS 15.1(4)M3

Cisco IOS XE Software 3.16.0S

IOS 15.3(3)JPT1

IOS 15.5(3)M1

IOS 15.6(3)M1

IOS 15.2(2)S2

IOS 15.2(1)EY

IOS 12.2(60)EZ14

IOS 15.2(1)E3

IOS 12.2(60)EZ6

IOS 15.6(2)SP2

IOS 15.3(3)JDA11

Cisco IOS XE Software 3.13.4S

IOS 15.2(6)E2

IOS 15.2(2)SY3

IOS 15.2(4)JB5

IOS 15.5(1)SY9

IOS 15.0(2)SG11

IOS 15.3(3)JNC1

Cisco IOS XE Software 3.5.0E

IOS 15.6(3)M5

IOS 15.1(2)SG3

IOS 15.2(2)EA3

IOS 15.1(1)SG2

IOS 12.2(33)SCH

IOS 12.4(25e)JAZ

IOS 12.2(33)SXI9

IOS 15.0(1)EY1

IOS 15.2(1)GC1

IOS 15.3(3)JNB3

IOS 15.2(4)S2

IOS 15.0(2)EY1

IOS 15.1(4)M6

IOS 15.3(3)JD8

IOS 15.1(1)SG1

IOS 15.2(5)E2

IOS 15.7(3)M0a

IOS 15.2(8)E

IOS 15.3(3)JBB6

IOS 15.2(7)E3k

Cisco IOS XE Software 3.18.1aSP

IOS 15.1(3)S6

IOS 12.2(33)SCG4

IOS 15.3(3)M10

IOS 15.6(2)S2

IOS 12.2(33)SXJ

Cisco IOS XE Software 3.6.9E

IOS 15.5(1)S

Cisco IOS XE Software 3.8.0E

Cisco IOS XE Software 3.18.2aSP

IOS 15.9(3)M6a

IOS 15.5(3)S4

IOS 15.6(2)SP

IOS 12.2(33)SXI6

IOS 15.3(3)JDA17

IOS 15.5(2)S4

IOS 15.3(3)JD5

IOS 15.2(2)E5

IOS 15.2(4)M9

IOS 15.5(3)M7

IOS 15.3(3)JPT2

IOS 15.9(3)M3a

IOS 15.3(3)JPL

IOS 15.5(3)M10

IOS 15.3(3)JPQ1

IOS 15.3(3)S6

IOS 12.2(33)SRE12

IOS 15.3(3)JF7

Cisco IOS XE Software 3.11.6E

IOS 15.6(2)SN

IOS 15.4(2)T

IOS 15.3(3)JK7

Cisco IOS XE Software 3.13.10S

IOS 15.0(2)EY

IOS 15.2(2)EA1

IOS 12.2(33)SRE10

IOS 15.2(2)E4

IOS 15.5(1)T3

IOS 15.1(4)M5

IOS 15.3(3)JK4

Cisco IOS XE Software 3.8.6E

IOS 12.4(25e)JAP8

IOS 15.3(3)JI4

IOS 15.3(3)S2

IOS 15.2(7)E

IOS 15.5(3)S9a

IOS 15.2(1)S1

IOS 15.6(3)M3a

Cisco IOS XE Software 3.16.7S

IOS 15.1(2)SG2

IOS 15.6(2)SP3

IOS 15.3(3)JPC5

IOS 15.4(3)S8

IOS 15.3(3)JH1

IOS 15.3(3)M8a

IOS 15.3(1)SY2

IOS 12.2(60)EZ12

IOS 15.3(3)M4

IOS 12.4(25e)JAO3

IOS 15.1(2)SY8

IOS 15.2(8)E3

IOS 15.3(3)JPT

IOS 12.2(50)SQ2

Cisco IOS XE Software 3.11.3E

IOS 12.4(25e)JAO4

IOS 15.3(3)JDA16

IOS 15.2(3)GC1

IOS 15.2(4)E10a

IOS 15.3(2)S1

IOS 15.3(3)JND2

IOS 15.3(3)JC2

IOS 15.2(2)JAX

IOS 15.3(3)JPI8a

IOS 15.0(1)SY10

IOS 15.6(2)S3

IOS 15.1(4)M3a

IOS 15.3(3)JPI9

IOS 12.2(33)SXI4a

IOS 15.8(3)M1a

IOS 15.5(1)T1

Cisco IOS XE Software 3.16.10S

Cisco IOS XE Software 3.7.3E

IOS 12.2(60)EZ4

IOS 12.4(3)JK4

IOS 15.3(3)JPJ6

IOS 15.4(1)SY3

IOS 15.1(2)S1

IOS 15.3(3)JPI6a

IOS 15.4(2)T2

Cisco IOS XE Software 3.8.9E

IOS 15.6(1)S3

IOS 12.2(33)SCG

IOS 15.2(4)S3

IOS 15.3(3)S3

IOS 15.3(3)JAA11

IOS 15.5(3)SN

IOS 15.3(3)JA

IOS 15.3(3)JK8a

IOS 15.0(2)SQD8

IOS 12.4(25e)JAP1n

IOS 15.0(1)SY7

IOS 15.3(3)S8

IOS 15.6(2)S

Cisco IOS XE Software 3.8.10E

Cisco IOS XE Software 3.17.1aS

IOS 15.0(2)SG

IOS 15.6(2)T3

IOS 15.5(3)S1

IOS 12.2(33)SRE

IOS 15.3(3)JF10

IOS 15.2(2a)E2

IOS 15.4(3)S1

Cisco IOS XE Software 3.16.4aS

Cisco IOS XE Software 3.9.2E

IOS 15.2(3)EA

IOS 15.6(2)SP5

IOS 15.3(3)JPO

IOS 15.1(1)SY

IOS 15.0(2)SQD1

IOS 15.3(3)JD7

IOS 12.4(24)MDB13

IOS 15.2(4)JB3h

Cisco IOS XE Software 3.14.3S

IOS 15.2(5)EX

IOS 12.2(60)EZ9

IOS 12.2(33)SXJ4

IOS 12.4(25e)JAM2

IOS 15.2(2)GC

IOS 15.2(1)SY3

IOS 15.2(8)E2

IOS 15.5(3)S2

IOS 15.3(3)S5

Cisco IOS XE Software 3.17.2S

IOS 15.2(1)SY6

IOS 15.3(3)JK10

Cisco IOS XE Software 3.16.3S

IOS 12.2(33)CY1

IOS 15.2(2)S0c

IOS 15.3(2)T

Cisco IOS XE Software 3.13.7S

Cisco IOS XE Software 3.16.6S

IOS 15.4(1)S3

IOS 15.2(8)E6

IOS 15.2(2)E1

IOS 15.3(3)JPJ3

IOS 15.3(3)JNB2

IOS 12.4(24)MDB6

IOS 12.4(25e)JAP7

IOS 12.2(33)SXI1

IOS 15.5(2)T4

IOS 15.3(1)S1

IOS 15.7(3)M8

Cisco IOS XE Software 3.16.3aS

IOS 15.2(7)E0a

IOS 15.3(3)JI1

IOS 15.3(3)JCA7

IOS 15.2(4)JB3a

IOS 15.0(2)EJ

IOS 15.0(2)SE10a

IOS 15.3(3)JNC

IOS 12.2(33)SXI2a

IOS 15.5(1)SY4

IOS 15.2(4)M7

IOS 15.2(6)E

IOS 15.3(3)S9

IOS 12.2(60)EZ10

Cisco IOS XE Software 3.12.3S

IOS 15.5(3)S6

IOS 15.5(2)S3

IOS 15.7(3)M9

IOS 15.2(4)GC

IOS 15.5(3)S8

Cisco IOS XE Software 3.11.12E

IOS 12.2(33)SCJ

IOS 15.1(4)M10

IOS 15.2(2)SY

IOS 12.4(24)MDB3

Cisco IOS XE Software 3.5.3E

IOS 15.3(3)JK

IOS 15.5(1)SY7

IOS 15.0(1)EY2

IOS 15.9(3)M2

IOS 15.3(3)M1

IOS 15.2(4)E6

IOS 15.3(3)JK9

IOS 15.3(1)T2

IOS 15.9(3)M6b

Cisco IOS XE Software 3.16.2aS

IOS 15.2(2)E5a

IOS 15.9(3)M5

IOS 15.1(2)SG5

IOS 15.4(2)CG

IOS 15.4(3)S6a

IOS 12.2(50)SQ4

IOS 15.0(2)EJ1

IOS 15.3(3)JPC3

IOS 15.2(1)SY2

IOS 15.2(4)JB2

IOS 15.5(3)S0a

IOS 15.1(3)S4

IOS 15.1(2)SG

IOS 15.3(3)JN8

Cisco IOS XE Software 3.6.2E

Cisco IOS XE Software 3.18.4S

IOS 12.2(33)CY

IOS 15.2(5c)E

IOS 15.2(3)E2

IOS 12.4(25e)JAP6

IOS 15.5(1)SY14

IOS 12.4(24)MDB18

IOS 15.3(3)JAA12

IOS 15.1(2)SY4a

IOS 15.1(2)SY

IOS 15.1(2)SY5

IOS 12.4(24)MDB11

IOS 12.2(33)SCJ1a

IOS 15.3(2)T4

IOS 15.3(3)JBB4

Cisco IOS XE Software 3.16.1aS

IOS 15.3(3)M2

IOS 12.2(53)EZ

IOS 15.2(7)E10

IOS 15.5(1)SY2

Cisco IOS XE Software 3.13.3S

IOS 15.5(3)S1a

IOS 15.2(4)E

IOS 15.4(2)S1

IOS 15.1(2)SY16

IOS 15.6(2)SP6

IOS 12.2(33)CY2

IOS 15.3(3)JPS

IOS 15.2(2)S

IOS 15.1(2)SG1

IOS 15.3(3)M5

IOS 15.2(4)E2

IOS 15.2(4)S7

Cisco IOS XE Software 3.18.0aS

Cisco IOS XE Software 3.11.4E

IOS 15.2(8)E1

IOS 15.0(2)SE5

IOS 15.3(3)S8a

IOS 15.2(5a)E

IOS 12.4(24)MDB9

IOS 15.6(3)M2a

IOS 15.3(3)JA4

IOS 12.4(3)JK2

IOS 15.0(2)SE3

IOS 12.2(50)SQ5

IOS 15.5(3)M9

IOS 15.2(4)S6

IOS 15.4(2)T3

Cisco IOS XE Software 3.5.2E

IOS 15.2(7)E2a

IOS 15.0(2)SG6

IOS 15.2(7a)E0b

IOS 15.5(3)S7

IOS 15.2(5)EA

Cisco IOS XE Software 3.15.1cS

Cisco IOS XE Software 3.18.8aSP

IOS 15.6(1)T2

IOS 15.1(3)S5

IOS 15.3(3)JE

IOS 15.1(4)M4

IOS 12.2(55)SE2

IOS 15.4(1)S4

IOS 12.2(33)SXJ8

IOS 15.0(2)SG8

IOS 15.3(3)JPQ3

IOS 15.5(1)SY11

Cisco IOS XE Software 3.13.1S

IOS 15.5(1)SY8

IOS 15.2(1)SY4

IOS 15.5(1)S4

IOS 12.2(25)EZ

IOS 15.3(3)JA7

IOS 15.2(1)SY8

IOS 15.2(4)S4

IOS 15.5(1)SY10

IOS 12.2(44)SQ

IOS 15.1(1)SY3

IOS 15.9(3)M0a

IOS 15.3(3)JK3

IOS 15.3(3)JF

IOS 15.6(3)M4

IOS 15.0(2)SE6

IOS 15.0(2)SE11

Cisco IOS XE Software 3.6.7bE

IOS 15.1(2)SY15

IOS 12.2(55)SE9

IOS 15.3(3)JA12

IOS 15.4(1)T1

IOS 12.4(24)MDB5a

IOS 15.3(3)JNB5

IOS 15.4(3)S2

IOS 15.2(2)JB

IOS 15.1(3)S2

IOS 12.4(24)MDB7

Cisco IOS XE Software 3.6.5aE

Cisco IOS XE Software 3.12.1S

IOS 15.0(2)SG5

IOS 15.3(3)S10

IOS 15.6(3)M6b

Cisco IOS XE Software 3.10.2E

IOS 15.2(4)JB1

Cisco IOS XE Software 3.8.8E

IOS 15.7(3)M4b

IOS 12.2(60)EZ13

IOS 12.4(25e)JAO

IOS 15.5(3)S9

IOS 15.8(3)M7

IOS 12.2(33)SCJ2

IOS 12.2(33)SCH4

IOS 12.2(55)SE11

IOS 15.3(3)JPJ7

IOS 12.2(60)EZ7

IOS 15.3(3)JPI4

IOS 15.2(4)E5

IOS 15.3(3)JCA8

Cisco IOS XE Software 3.13.9S

IOS 15.1(2)SG4

IOS 15.4(1)T3

IOS 15.6(2)T1

IOS 12.2(33)SCI2a

Affected Packages

euvd cisco_ios_xe_software no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

This vulnerability stems from CWE-228 (Improper Handling of Syntactically Invalid Structure), where the HTTP Server component in Cisco IOS and IOS XE software fails to properly validate user-supplied input in HTTP requests. The affected products span a wide range of Cisco network devices running IOS versions from 12.2 through 15.9 and IOS XE versions from 3.5 through 3.18, as indicated by CPE entries cpe:2.3:a:cisco:ios and cpe:2.3:a:cisco:cisco_ios_xe_software. The HTTP Server feature, when enabled on these devices, processes incoming HTTP requests without adequate input sanitization, allowing malformed requests to trigger watchdog timer failures that force a device reload. The vulnerability's scope change (S:C) in the CVSS vector indicates that the impact extends beyond the vulnerable component itself.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 7.7 HIGH

AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

None

Integrity

None

Availability

High

DescriptionCVE.org

A vulnerability in the HTTP Server feature of Cisco IOS Software and Cisco IOS XE Software Release 3E could allow an authenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending malformed HTTP requests to an affected device. A successful exploit could allow the attacker to cause a watchdog timer to expire and the device to reload, resulting in a DoS condition. To exploit this vulnerability, the attacker must have a valid user account.

Executive ViewAI

Why It Matters

Cisco IOS and IOS XE devices are vulnerable to denial of service attacks from authenticated users, potentially causing unexpected network outages. Organizations running affected software versions face service disruption risks, particularly if administrative credentials are compromised or if trusted users turn malicious.

Business Impact: High

Compensating Controls

Disable the HTTP Server feature if not required for operations (use HTTPS alternative instead); restrict HTTP access via network ACLs to trusted management subnets only; implement strict authentication controls and monitor administrative session logs for malformed requests; consider network segmentation to isolate affected devices from untrusted user access; enable syslog alerting for watchdog timer resets and device reload events.

Threat Intelligence Overview

EPSS Score

0.1%

Top 67% exploitable

Data Quality

6 sources

Confidence: High

EUVD

NVD

CVE.org

EPSS

Vulnrichment

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity HIGH

CISA KEV No

Public POC No

EPSS 0.1%

Patch available No

Active threat No

Deciding rule

HIGH severity (CVSS 7.0-8.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.