Denial of Service Vulnerability in Cisco IOS XE Software's SNMP Subsystem

CVE-2025-20312

What is CVE-2025-20312?

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability arises from improper error handling while parsing specific SNMP requests. An attacker could exploit this by sending a specially crafted SNMP request, potentially leading to an unexpected device reload and subsequent denial of service. It is critical to note that exploiting this vulnerability requires knowledge of valid SNMP community strings for versions 1 and 2c, or valid user credentials for SNMP version 3.

References