CVE-2025-20340

A vulnerability in the Address Resolution Protocol (ARP) implementation of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to trigger a broadcast storm, leading to a denial of service (DoS) condition on an affected device.  This vulnerability is due to how Cisco IOS XR Software processes a high, sustained rate of ARP traffic hitting the management interface. Under certain conditions, an attacker could exploit this vulnerability by sending an excessive amount of traffic to the management interface of an affected device, overwhelming its ARP processing capabilities. A successful exploit could result in degraded device performance, loss of management connectivity, and complete unresponsiveness of the system, leading to a DoS condition.

• CWE-400

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-arp-storm-EjUU55yM

Published

Sep 10, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20335A vulnerability in the directory permissions of Cisco Desk P…5.3
• CVE-2025-20336A vulnerability in the directory permissions of Cisco Desk P…7.5
• CVE-2025-20337A vulnerability in a specific API of Cisco ISE and Cisco ISE…10
• CVE-2025-20338A vulnerability in the CLI of Cisco IOS XE Software could al…6.7
• CVE-2025-20339A vulnerability in the access control list (ACL) processing …5.8
• CVE-2025-2034A vulnerability has been found in PHPGurukul Pre-School Enro…9.8
• CVE-2025-20341A vulnerability in Cisco Catalyst Center Virtual Appliance c…8.8
• CVE-2025-20342A vulnerability in the Virtual Keyboard Video Monitor (vKVM)…5.4
• CVE-2025-20343A vulnerability in the RADIUS setting Reject RADIUS requests…7.5
• CVE-2025-20344A vulnerability in the backup restore functionality of Cisco…7.2
• CVE-2025-20345A vulnerability in the debug logging function of Cisco Duo A…4.9
• CVE-2025-20346A vulnerability in Cisco Catalyst Center could allow an auth…4.3