Denial of Service Vulnerability in Cisco IOS Software and Cisco IOS XE Software

CVE-2025-20171

Summary

A vulnerability exists in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software, which allows an authenticated, remote attacker to induce a Denial of Service (DoS) condition on the affected device. This issue arises from improper error handling during SNMP request parsing. An attacker could exploit this behavior by sending a specially crafted SNMP request to the affected device. If successfully exploited, this could trigger an unexpected device reload, leading to service disruption. The vulnerability affects SNMP versions 1, 2c, and 3. To exploit SNMP v2c or earlier, the attacker must possess valid read-write or read-only SNMP community strings for the system. For SNMP v3 exploitation, valid user credentials are required.

References