CVE-2025-20191

A vulnerability in the Switch Integrated Security Features (SISF) of Cisco IOS Software, Cisco IOS XE Software, Cisco NX-OS Software, and Cisco Wireless LAN Controller (WLC) AireOS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to the incorrect handling of DHCPv6 packets. An attacker could exploit this vulnerability by sending a crafted DHCPv6 packet to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

• CWE-805

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sisf-dos-ZGwt4DdY

Published

May 7, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20186A vulnerability in the web-based management interface of the…8.8
• CVE-2025-20187A vulnerability in the application data endpoints of Cisco C…6.5
• CVE-2025-20188A vulnerability in the Out-of-Band Access Point (AP) Image D…10
• CVE-2025-20189A vulnerability in the Cisco Express Forwarding functionalit…7.4
• CVE-2025-2019Ashlar-Vellum Cobalt VC6 File Parsing Heap-based Buffer Over…7.8
• CVE-2025-20190A vulnerability in the lobby ambassador web interface of Cis…6.5
• CVE-2025-20192A vulnerability in the Internet Key Exchange version 1 (IKEv…7.7
• CVE-2025-20193A vulnerability in the web-based management interface of Cis…6.5
• CVE-2025-20194A vulnerability in the web-based management interface of Cis…5.4
• CVE-2025-20195A vulnerability in the web-based management interface of Cis…4.3
• CVE-2025-20196A vulnerability in the Cisco IOx application hosting environ…5.3
• CVE-2025-20197A vulnerability in the CLI of Cisco IOS XE Software could al…8.2