SNMPv3 Vulnerability in Cisco IOS and IOS XE Software

CVE-2025-20151

Summary

A vulnerability exists in Cisco IOS and IOS XE software that allows an authenticated remote attacker to poll devices using the Simple Network Management Protocol Version 3 (SNMPv3), despite configurations that should restrict such access. This issue arises from how SNMPv3 configurations are stored within the software's startup configuration. An attacker, who possesses valid SNMPv3 user credentials, could exploit this flaw to perform unauthorized SNMP operations by utilizing a source address that should have been denied. This vulnerability highlights significant risks if appropriate security measures are not fully implemented.

References