CVE-2025-20175

State: Published
Severity: 7.7 High
Published: Feb 5, 2025
Updated: Feb 5, 2025
Reserved: Oct 10, 2024

Description

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.

This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.  This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMP v2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMP v3, the attacker must have valid SNMP user credentials for the affected system.

Scores

CVSS	Score	Vector	Source
3.1	7.7 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H	cisco

Weaknesses

CWE-805 Buffer Access with Incorrect Length Value

Affected Products

Product	Versions
IOSCisco	12.2(53)SE1Affected 12.2(55)SEAffected 12.2(50)SE2Affected 12.2(50)SE1Affected 12.2(50)SE5Affected 12.2(53)SEAffected 12.2(55)SE3Affected 12.2(55)SE2Affected 12.2(52)SEAffected 12.2(58)SEAffected 12.2(50)SE3Affected 12.2(55)SE1Affected 12.2(53)SE2Affected 12.2(52)SE1Affected 12.2(54)SEAffected 12.2(50)SE4Affected 12.2(50)SEAffected 12.2(58)SE1Affected 12.2(55)SE4Affected 12.2(58)SE2Affected 12.2(55)SE5Affected 12.2(55)SE6Affected 12.2(55)SE7Affected 12.2(55)SE8Affected 12.2(55)SE9Affected and 869 more versions
Cisco IOS XE SoftwareCisco	3.2.0SGAffected 3.2.1SGAffected 3.2.2SGAffected 3.2.3SGAffected 3.2.4SGAffected 3.2.5SGAffected 3.2.6SGAffected 3.2.7SGAffected 3.2.8SGAffected 3.2.9SGAffected 3.2.10SGAffected 3.2.11SGAffected 3.7.0SAffected 3.7.1SAffected 3.7.2SAffected 3.7.3SAffected 3.7.4SAffected 3.7.5SAffected 3.7.6SAffected 3.7.7SAffected 3.7.4aSAffected 3.7.2tSAffected 3.7.0bSAffected 3.7.1aSAffected 3.3.0SGAffected and 429 more versions

Product

Versions

IOSCisco

12.2(53)SE1Affected
12.2(55)SEAffected
12.2(50)SE2Affected
12.2(50)SE1Affected
12.2(50)SE5Affected
12.2(53)SEAffected
12.2(55)SE3Affected
12.2(55)SE2Affected
12.2(52)SEAffected
12.2(58)SEAffected
12.2(50)SE3Affected
12.2(55)SE1Affected
12.2(53)SE2Affected
12.2(52)SE1Affected
12.2(54)SEAffected
12.2(50)SE4Affected
12.2(50)SEAffected
12.2(58)SE1Affected
12.2(55)SE4Affected
12.2(58)SE2Affected
12.2(55)SE5Affected
12.2(55)SE6Affected
12.2(55)SE7Affected
12.2(55)SE8Affected
12.2(55)SE9Affected
and 869 more versions

Cisco IOS XE SoftwareCisco

3.2.0SGAffected
3.2.1SGAffected
3.2.2SGAffected
3.2.3SGAffected
3.2.4SGAffected
3.2.5SGAffected
3.2.6SGAffected
3.2.7SGAffected
3.2.8SGAffected
3.2.9SGAffected
3.2.10SGAffected
3.2.11SGAffected
3.7.0SAffected
3.7.1SAffected
3.7.2SAffected
3.7.3SAffected
3.7.4SAffected
3.7.5SAffected
3.7.6SAffected
3.7.7SAffected
3.7.4aSAffected
3.7.2tSAffected
3.7.0bSAffected
3.7.1aSAffected
3.3.0SGAffected
and 429 more versions

References

cisco-sa-snmp-dos-sdxnSUcW

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.