CVEvulnerability
CVE-2025-20169
7.7 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-02-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
- Weaknesses
- CWE-805
Description
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.
This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.
This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMP v2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMP v3, the attacker must have valid SNMP user credentials for the affected system.
Affected configurations
• cisco ios 12.2\(1\)
• cisco ios 12.2\(1\)dx
• cisco ios 12.2\(1\)dx1
• cisco ios 12.2\(1\)m0
• cisco ios 12.2\(1\)mb1
• cisco ios 12.2\(1\)xd
• cisco ios 12.2\(1\)xd1
• cisco ios 12.2\(1\)xd2
• cisco ios 12.2\(1\)xd3
• cisco ios 12.2\(1\)xd4
• cisco ios 12.2\(1\)xe
• cisco ios 12.2\(1\)xe1
• cisco ios 12.2\(1\)xe2
• cisco ios 12.2\(1\)xf
• cisco ios 12.2\(1\)xf1
• cisco ios 12.2\(1\)xs
• cisco ios 12.2\(1\)xs1a
• cisco ios 12.2\(1\)xs2
• cisco ios 12.2\(1a\)
• cisco ios 12.2\(1a\)xc
• cisco ios 12.2\(1a\)xc1
• cisco ios 12.2\(1a\)xc2
• cisco ios 12.2\(1a\)xc3
• cisco ios 12.2\(1b\)
• cisco ios 12.2\(1b\)da
• cisco ios 12.2\(1b\)da1
• cisco ios 12.2\(1c\)
• cisco ios 12.2\(1d\)
• cisco ios 12.2\(2\)b
• cisco ios 12.2\(2\)b1
• cisco ios 12.2\(2\)b2
• cisco ios 12.2\(2\)b3
• cisco ios 12.2\(2\)b4
• cisco ios 12.2\(2\)b5
• cisco ios 12.2\(2\)b6
• cisco ios 12.2\(2\)b7
• cisco ios 12.2\(2\)bx
• cisco ios 12.2\(2\)bx1
• cisco ios 12.2\(2\)by
• cisco ios 12.2\(2\)by1
• cisco ios 12.2\(2\)by2
• cisco ios 12.2\(2\)by3
• cisco ios 12.2\(2\)dd
• cisco ios 12.2\(2\)dd1
• cisco ios 12.2\(2\)dd2
• cisco ios 12.2\(2\)dd3
• cisco ios 12.2\(2\)dd4
• cisco ios 12.2\(2\)dx3
• cisco ios 12.2\(2\)xa
• cisco ios 12.2\(2\)xa1
• cisco ios 12.2\(2\)xa2
• cisco ios 12.2\(2\)xa3
• cisco ios 12.2\(2\)xa4
• cisco ios 12.2\(2\)xa5
• cisco ios 12.2\(2\)xb1
• cisco ios 12.2\(2\)xb2
• cisco ios 12.2\(2\)xb3
• cisco ios 12.2\(2\)xb5
• cisco ios 12.2\(2\)xb6
• cisco ios 12.2\(2\)xb7
… and 3336 more
Related
Weakness · CWE (1)
- CWE-805 Buffer Access with Incorrect Length Value weakness