CVEvulnerability
CVE-2025-20312
7.7 HIGH
Official page ↗
- Status
- Undergoing Analysis
- Published
- 2025-09-24
- Last modified
- 2026-09-26
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
- Weaknesses
- CWE-835
Description
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
This vulnerability is due to improper error handling when parsing a specific SNMP request. An attacker could exploit this vulnerability by sending a specific SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.
This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMPv2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system.
Affected configurations
• cisco ios xe 17.2.1
• cisco ios xe 17.2.1a
• cisco ios xe 17.2.1r
• cisco ios xe 17.2.1v
• cisco ios xe 17.2.2
• cisco ios xe 17.2.3
• cisco ios xe 17.3.1
• cisco ios xe 17.3.1a
• cisco ios xe 17.3.1w
• cisco ios xe 17.3.1x
• cisco ios xe 17.3.1z
• cisco ios xe 17.3.2
• cisco ios xe 17.3.2a
• cisco ios xe 17.3.3
• cisco ios xe 17.3.4
• cisco ios xe 17.3.4a
• cisco ios xe 17.3.4b
• cisco ios xe 17.3.4c
• cisco ios xe 17.3.5
• cisco ios xe 17.3.5a
• cisco ios xe 17.3.5b
• cisco ios xe 17.3.6
• cisco ios xe 17.3.7
• cisco ios xe 17.3.8
• cisco ios xe 17.3.8a
• cisco ios xe 17.4.1
• cisco ios xe 17.4.1a
• cisco ios xe 17.4.1b
• cisco ios xe 17.4.2
• cisco ios xe 17.4.2a
• cisco ios xe 17.5.1
• cisco ios xe 17.5.1a
• cisco ios xe 17.6.1
• cisco ios xe 17.6.1a
• cisco ios xe 17.6.1w
• cisco ios xe 17.6.1x
• cisco ios xe 17.6.1y
• cisco ios xe 17.6.1z
• cisco ios xe 17.6.1z1
• cisco ios xe 17.6.2
• cisco ios xe 17.6.3
• cisco ios xe 17.6.3a
• cisco ios xe 17.6.4
• cisco ios xe 17.6.5
• cisco ios xe 17.6.5a
• cisco ios xe 17.6.6
• cisco ios xe 17.6.6a
• cisco ios xe 17.6.7
• cisco ios xe 17.6.8
• cisco ios xe 17.6.8a
• cisco ios xe 17.7.1
• cisco ios xe 17.7.1a
• cisco ios xe 17.7.1b
• cisco ios xe 17.7.2
• cisco ios xe 17.8.1
• cisco ios xe 17.8.1a
• cisco ios xe 17.9.1
• cisco ios xe 17.9.1a
• cisco ios xe 17.9.1w
• cisco ios xe 17.9.1x
… and 66 more
Related
Weakness · CWE (1)
- CWE-835 Loop with Unreachable Exit Condition weakness