CVEvulnerability

CVE-2025-20171

7.7 HIGH Published 2025-02-05 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-02-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weaknesses
CWE-248

Description

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.  This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMP v2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMP v3, the attacker must have valid SNMP user credentials for the affected system.

Affected configurations

• cisco ios 12.2\(33\)cx • cisco ios 12.2\(33\)cy • cisco ios 12.2\(33\)cy1 • cisco ios 12.2\(33\)cy2 • cisco ios 12.2\(33\)ira • cisco ios 12.2\(33\)irb • cisco ios 12.2\(33\)irc • cisco ios 12.2\(33\)ird • cisco ios 12.2\(33\)ire • cisco ios 12.2\(33\)ire1 • cisco ios 12.2\(33\)ire2 • cisco ios 12.2\(33\)irf • cisco ios 12.2\(33\)irg • cisco ios 12.2\(33\)irg1 • cisco ios 12.2\(33\)irh • cisco ios 12.2\(33\)irh1 • cisco ios 12.2\(33\)mra • cisco ios 12.2\(33\)mrb • cisco ios 12.2\(33\)mrb1 • cisco ios 12.2\(33\)mrb2 • cisco ios 12.2\(33\)mrb3 • cisco ios 12.2\(33\)mrb4 • cisco ios 12.2\(33\)mrb5 • cisco ios 12.2\(33\)mrb6 • cisco ios 12.2\(33\)sb • cisco ios 12.2\(33\)sb1 • cisco ios 12.2\(33\)sb2 • cisco ios 12.2\(33\)sb3 • cisco ios 12.2\(33\)sb4 • cisco ios 12.2\(33\)sb5 • cisco ios 12.2\(33\)sb6 • cisco ios 12.2\(33\)sb7 • cisco ios 12.2\(33\)sb8 • cisco ios 12.2\(33\)sb8a • cisco ios 12.2\(33\)sb9 • cisco ios 12.2\(33\)sb10 • cisco ios 12.2\(33\)sb11 • cisco ios 12.2\(33\)sb12 • cisco ios 12.2\(33\)sb13 • cisco ios 12.2\(33\)sb14 • cisco ios 12.2\(33\)sb15 • cisco ios 12.2\(33\)sb16 • cisco ios 12.2\(33\)sb17 • cisco ios 12.2\(33\)sca • cisco ios 12.2\(33\)sca1 • cisco ios 12.2\(33\)sca2 • cisco ios 12.2\(33\)scb • cisco ios 12.2\(33\)scb1 • cisco ios 12.2\(33\)scb2 • cisco ios 12.2\(33\)scb3 • cisco ios 12.2\(33\)scb4 • cisco ios 12.2\(33\)scb5 • cisco ios 12.2\(33\)scb6 • cisco ios 12.2\(33\)scb7 • cisco ios 12.2\(33\)scb8 • cisco ios 12.2\(33\)scb9 • cisco ios 12.2\(33\)scb10 • cisco ios 12.2\(33\)scb11 • cisco ios 12.2\(33\)scc • cisco ios 12.2\(33\)scc1 … and 1519 more

Related

Weakness · CWE (1)

  • CWE-248 Uncaught Exception weakness

References