Cisco IOS XR Software Border Gateway Protocol Denial of Service Vulnerability

8.6 CVSS

Vulnerability Description

A vulnerability in confederation implementation for the Border Gateway Protocol (BGP) in Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. This vulnerability is due to a memory corruption that occurs when a BGP update is created with an AS_CONFED_SEQUENCE attribute that has 255 autonomous system numbers (AS numbers). An attacker could exploit this vulnerability by sending a crafted BGP update message, or the network could be designed in such a manner that the AS_CONFED_SEQUENCE attribute grows to 255 AS numbers or more. A successful exploit could allow the attacker to cause memory corruption, which may cause the BGP process to restart, resulting in a DoS condition. To exploit this vulnerability, an attacker must control a BGP confederation speaker within the same autonomous system as the victim, or the network must be designed in such a manner that the AS_CONFED_SEQUENCE attribute grows to 255 AS numbers or more.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-20115

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Cisco

View All →

CVE-2025-20393

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

Critical 10

CVE-2025-20377

Cisco Unified Intelligence Center API Information Disclosure Vulnerability

Medium 4.3

CVE-2025-20376

Cisco Unified Contact Center Express Remote Code Execution Vulnerability

Medium 6.5

CVE-2025-20375

Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability

Medium 6.5

CVE-2025-20374

Cisco Unified Contact Center Express Arbitrary File Download Vulnerability

Medium 4.9

Affected Vendor

Cisco

View all reports →

Affected Software

Cisco IOS XR Software

Vulnerable Versions:

6.5.3, 6.5.29, 6.5.1, 6.6.1, 6.5.2, 6.5.92, 6.5.15, 6.6.2, 7.0.1, 6.6.25, 6.5.26, 6.6.11, 6.5.25, 6.5.28, 6.5.93, 6.6.12, 6.5.90, 7.0.0, 7.1.1, 7.0.90, 6.6.3, 6.7.1, 7.0.2, 7.1.15, 7.2.0, 7.2.1, 7.1.2, 6.7.2, 7.0.11, 7.0.12, 7.0.14, 7.1.25, 6.6.4, 7.2.12, 7.3.1, 7.1.3, 6.7.3, 7.4.1, 7.2.2, 6.7.4, 6.5.31, 7.3.15, 7.3.16, 6.8.1, 7.4.15, 6.5.32, 7.3.2, 7.5.1, 7.4.16, 7.3.27, 7.6.1, 7.5.2, 7.8.1, 7.6.15, 7.5.12, 7.8.12, 7.3.3, 7.7.1, 6.8.2, 7.3.4, 7.4.2, 6.7.35, 6.9.1, 7.6.2, 7.5.3, 7.7.2, 6.9.2, 7.9.1, 7.10.1, 7.8.2, 7.5.4, 6.5.33, 7.8.22, 7.7.21, 7.9.2, 7.3.5, 7.5.5, 7.11.1, 7.9.21, 7.10.2, 24.1.1, 7.6.3, 7.3.6, 7.5.52, 7.11.2, 24.2.1, 24.1.2, 24.2.11, 24.2.2, 7.8.23, 7.11.21, 24.2.20, 6.5.35