Denial of Service Vulnerability in Cisco IOS XE Software's SNMP Subsystem

CVE-2025-20312

What is CVE-2025-20312?

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability arises from improper error handling while parsing specific SNMP requests. An attacker could exploit this by sending a specially crafted SNMP request, potentially leading to an unexpected device reload and subsequent denial of service. It is critical to note that exploiting this vulnerability requires knowledge of valid SNMP community strings for versions 1 and 2c, or valid user credentials for SNMP version 3.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References