VulnSocial

CVE-2025-20311(cisco / catalyst_9200)

LOWCVSS 7.4 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability in the handling of certain Ethernet frames in Cisco IOS XE Software for Catalyst 9000 Series Switches could allow an unauthenticated, adjacent attacker to cause an egress port to become blocked and drop all outbound traffic. This vulnerability is due to improper handling of crafted Ethernet frames. An attacker could exploit this vulnerability by sending crafted Ethernet frames through an affected switch. A successful exploit could allow the attacker to cause the egress port to which the crafted frame is forwarded to start dropping all frames, resulting in a denial of service (DoS) condition.

cisco CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-19

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • catalyst_9200
  • catalyst_9200cx
  • catalyst_9200l
  • catalyst_9300

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Affected systems

Vendors
cisco
Products
catalyst_9200catalyst_9200cxcatalyst_9200lcatalyst_9300catalyst_9300-24p-acatalyst_9300-24p-ecatalyst_9300-24s-acatalyst_9300-24s-ecatalyst_9300-24t-acatalyst_9300-24t-e

104 versions affected across 56 products

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-09-25: 209-25
Referenced assets1 URL
By indicator
Full discourse2 posts
  • くろん｜情シスAIラボ@josys_AI_labo

    Catalyst 9000、ちょっと待って。 CVE-2025-20311。 CVSS v3スコア 7.4（重要）。 細工したイーサネットフレームを 隣接から流すだけで、 イグレスポートが全フレームを ドロップし始める。 認証不要。 スイッチの隣にいれば成立する。 「ネットワーク止まった」の 報告が来たとき、 攻撃かどうかも判断できない状態に なりかねない。 Cisco IOS XE 16.x〜17.x系の 広い範囲が対象。 Catalyst 9000使ってる現場は ベンダーアドバイザリを確認を。

    2001031
    18 followersView on X
  • くろん｜情シスAIラボ@josys_AI_labo

    出典: JVN iPedia JVNDB-2025-026271 / CVE-2025-20311 https://jvndb.jvn.jp/ja/contents/2025/JVNDB-2025-026271.html

    000006
    18 followersView on X
CPE platform detail158 entries

158 of 158 entries

PartVendorProductVersionTarget SWTarget HW
HWciscocatalyst_9200---
HWciscocatalyst_9200cx---
HWciscocatalyst_9200l---
HWciscocatalyst_9300---
HWciscocatalyst_9300-24p-a---
HWciscocatalyst_9300-24p-e---
HWciscocatalyst_9300-24s-a---
HWciscocatalyst_9300-24s-e---
HWciscocatalyst_9300-24t-a---
HWciscocatalyst_9300-24t-e---
HWciscocatalyst_9300-24u-a---
HWciscocatalyst_9300-24u-e---
HWciscocatalyst_9300-24ux-a---
HWciscocatalyst_9300-24ux-e---
HWciscocatalyst_9300-48p-a---
HWciscocatalyst_9300-48p-e---
HWciscocatalyst_9300-48s-a---
HWciscocatalyst_9300-48s-e---
HWciscocatalyst_9300-48t-a---
HWciscocatalyst_9300-48t-e---
HWciscocatalyst_9300-48u-a---
HWciscocatalyst_9300-48u-e---
HWciscocatalyst_9300-48un-a---
HWciscocatalyst_9300-48un-e---
HWciscocatalyst_9300-48uxm-a---
HWciscocatalyst_9300-48uxm-e---
HWciscocatalyst_9300l---
HWciscocatalyst_9300l-24p-4g-a---
HWciscocatalyst_9300l-24p-4g-e---
HWciscocatalyst_9300l-24p-4x-a---
HWciscocatalyst_9300l-24p-4x-e---
HWciscocatalyst_9300l-24t-4g-a---
HWciscocatalyst_9300l-24t-4g-e---
HWciscocatalyst_9300l-24t-4x-a---
HWciscocatalyst_9300l-24t-4x-e---
HWciscocatalyst_9300l-48p-4g-a---
HWciscocatalyst_9300l-48p-4g-e---
HWciscocatalyst_9300l-48p-4x-a---
HWciscocatalyst_9300l-48p-4x-e---
HWciscocatalyst_9300l-48t-4g-a---
HWciscocatalyst_9300l-48t-4g-e---
HWciscocatalyst_9300l-48t-4x-a---
HWciscocatalyst_9300l-48t-4x-e---
HWciscocatalyst_9300l_stack---
HWciscocatalyst_9300lm---
HWciscocatalyst_9300x---
HWciscocatalyst_9400---
HWciscocatalyst_9400_supervisor_engine-1---
HWciscocatalyst_9407r---
HWciscocatalyst_9410r---
HWciscocatalyst_9500---
HWciscocatalyst_9500h---
HWciscocatalyst_9600---
HWciscocatalyst_9600_supervisor_engine-1---
HWciscocatalyst_9600x---
OSciscoios_xe16.10.1--
OSciscoios_xe16.10.1e--
OSciscoios_xe16.10.1s--
OSciscoios_xe16.11.1--
OSciscoios_xe16.11.1b--
OSciscoios_xe16.11.1s--
OSciscoios_xe16.12.1--
OSciscoios_xe16.12.14--
OSciscoios_xe16.12.1c--
OSciscoios_xe16.12.1s--
OSciscoios_xe16.12.2--
OSciscoios_xe16.12.2s--
OSciscoios_xe16.12.3--
OSciscoios_xe16.12.3a--
OSciscoios_xe16.12.3s--
OSciscoios_xe16.12.4--
OSciscoios_xe16.12.4a--
OSciscoios_xe16.12.5--
OSciscoios_xe16.12.5b--
OSciscoios_xe16.12.6--
OSciscoios_xe16.12.6a--
OSciscoios_xe16.12.7--
OSciscoios_xe16.12.8--
OSciscoios_xe16.6.1--
OSciscoios_xe16.6.10--
OSciscoios_xe16.6.2--
OSciscoios_xe16.6.3--
OSciscoios_xe16.6.4--
OSciscoios_xe16.6.4a--
OSciscoios_xe16.6.5--
OSciscoios_xe16.6.6--
OSciscoios_xe16.6.7--
OSciscoios_xe16.6.8--
OSciscoios_xe16.6.9--
OSciscoios_xe16.7.1--
OSciscoios_xe16.8.1--
OSciscoios_xe16.8.1a--
OSciscoios_xe16.8.1s--
OSciscoios_xe16.9.1--
OSciscoios_xe16.9.1s--
OSciscoios_xe16.9.2--
OSciscoios_xe16.9.3--
OSciscoios_xe16.9.4--
OSciscoios_xe16.9.5--
OSciscoios_xe16.9.6--
OSciscoios_xe16.9.7--
OSciscoios_xe16.9.8--
OSciscoios_xe17.1.1--
OSciscoios_xe17.1.1s--
OSciscoios_xe17.1.1t--
OSciscoios_xe17.1.3--
OSciscoios_xe17.10.1--
OSciscoios_xe17.10.1b--
OSciscoios_xe17.11.1--
OSciscoios_xe17.11.99sw--
OSciscoios_xe17.12.1--
OSciscoios_xe17.12.1z3--
OSciscoios_xe17.12.2--
OSciscoios_xe17.12.3--
OSciscoios_xe17.12.4--
OSciscoios_xe17.13.1--
OSciscoios_xe17.14.1--
OSciscoios_xe17.15.1--
OSciscoios_xe17.15.2--
OSciscoios_xe17.15.2a--
OSciscoios_xe17.15.2b--
OSciscoios_xe17.16.1--
OSciscoios_xe17.2.1--
OSciscoios_xe17.2.1a--
OSciscoios_xe17.3.1--
OSciscoios_xe17.3.2--
OSciscoios_xe17.3.2a--
OSciscoios_xe17.3.3--
OSciscoios_xe17.3.4--
OSciscoios_xe17.3.4b--
OSciscoios_xe17.3.5--
OSciscoios_xe17.3.6--
OSciscoios_xe17.3.7--
OSciscoios_xe17.3.8--
OSciscoios_xe17.3.8a--
OSciscoios_xe17.4.1--
OSciscoios_xe17.5.1--
OSciscoios_xe17.6.1--
OSciscoios_xe17.6.1y--
OSciscoios_xe17.6.2--
OSciscoios_xe17.6.3--
OSciscoios_xe17.6.4--
OSciscoios_xe17.6.5--
OSciscoios_xe17.6.5a--
OSciscoios_xe17.6.6--
OSciscoios_xe17.6.6a--
OSciscoios_xe17.6.7--
OSciscoios_xe17.6.8--
OSciscoios_xe17.7.1--
OSciscoios_xe17.8.1--
OSciscoios_xe17.9.1--
OSciscoios_xe17.9.2--
OSciscoios_xe17.9.3--
OSciscoios_xe17.9.4--
OSciscoios_xe17.9.4a--
OSciscoios_xe17.9.5--
OSciscoios_xe17.9.6--
OSciscoios_xe17.9.6a--

Explore more

Back to dashboardcisco CVEscatalyst_9200 vulnerabilities