Information Disclosure Vulnerability in Cisco Secure Email and Web Appliances

CVE-2025-20207

Summary

A vulnerability in the Simple Network Management Protocol (SNMP) polling mechanism for certain Cisco appliances allows authenticated remote attackers to retrieve sensitive information regarding the underlying operating system. This issue arises because the appliances fail to adequately secure sensitive data when responding to SNMP polls. By crafting specific SNMP requests, an attacker with the appropriate SNMP credentials may exploit this flaw to gain unauthorized access to confidential information that should remain protected. Prompt mitigation is recommended to prevent potential data breaches.

References