Is CVE-2025-20154 being actively exploited?

CVE-2025-20154 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2025-20154?

CVE-2025-20154 has a CVSS 3.1 base score of 8.6 (HIGH).

CVE-2025-20154

HIGH · CVSS 8.6EPSS 0.5%EU EUVD

A vulnerability in the Two-Way Active Measurement Protocol (TWAMP) server feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause the affected device to reload, resulting in a denial of service (DoS) condition. For Cisco IOS XR Software, this vulnerability could cause the ipsla_ippm_server process to reload unexpectedly if debugs are enabled. This vulnerability is due to out-of-bounds array access when processing specially crafted TWAMP control packets. An attacker could exploit this vulnerability by sending crafted TWAMP control packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: For Cisco IOS XR Software, only the ipsla_ippm_server process reloads unexpectedly and only when debugs are enabled. The vulnerability details for Cisco IOS XR Software are as follows:    Security Impact Rating (SIR): Low    CVSS Base Score: 3.7    CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Key facts

CVSS score: 8.6 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
Weakness (CWE): CWE-20
EPSS score: 0.5% (44th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2025-13922)
Published: May 7, 2025
NVD last modified: June 17, 2026
Status: Analyzed

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2025-13922 in the EU Vulnerability Database. Last updated in EUVD on May 7, 2025.

View on the EU Vulnerability Database

Affected products

cisco / ios
cisco / ios xe
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr
cisco / ios xr

and 44 more…

Certified products that may be affected

8 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.

Cisco Network Convergence System 540, 5500 and 5700 (NCS540, NCS5500, NCS5700) Series running IOS-XR, version 7.4.1 - Cisco Systems, Inc. - Common Criteria NSCIB-CC-23-0597525-CR - active
Cisco Catalyst 9800 (40/80/L) Wireless Controllers running IOS-XE 16.12 - Cisco Systems, Inc. - FIPS 140 4606 - historical
Cisco Catalyst 9800 (40/80/L) Wireless Controllers running IOS-XE 16.12 - Cisco Systems, Inc. - FIPS 140 3883 - historical
Cisco Catalyst 9800 Wireless Controllers running IOS-XE 16.10 - Cisco Systems, Inc. - FIPS 140 3656 - historical
Cisco ASR 900 Series and NCS4200 Series running IOS-XE 16.9 - Cisco Systems, Inc. - Common Criteria IC3S/MUM01/CISCO/cPP/0119/0016 - archived

See all 8 in the Security Certifications Explorer.

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-twamp-kV4FHugn(Vendor Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain