Search/CVE-2025-20311
● CVE — High

CVE-2025-20311

VendorciscoProductios xeDiscoveredSep 24, 2025UpdatedSep 26, 2026

A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an egress port to become blocked and drop all outbound traffic. This vulnerability is due to improper handling of crafted Ethernet frames. An attacker could exploit this vulnerability by sending crafted Ethernet frames through an affected switch. A successful exploit could allow the attacker to cause the egress port to which the crafted frame is forwarded to start dropping all frames, resulting in a denial of service (DoS) condition.

CVSS v3.1
7.4 HIGH
EPSS
0.20%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Aug 26, 2026
▲ 0.01pp
0.19% → 0.20% over 2 tracked changes
CVSS v3.1 Detail
Attack VectorADJACENT
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Connections
2 relationships
Timeline
disclosure → media coverage
Sep 24, 2025
Disclosure — published as a CVE record. · last revised by NVD Sep 26, 2026