Denial of Service and Code Execution Vulnerability in Cisco IOS Software and Cisco IOS XE Software

CVE-2025-20352

What is CVE-2025-20352?

A security vulnerability exists in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software, which may allow an authenticated, remote attacker to exploit the system. By sending a specially crafted SNMP packet, a low-privileged attacker can induce a denial of service (DoS) condition, leading to system reloads and extended downtime. However, if the attacker holds higher privileges and relevant SNMP credentials, they can potentially execute arbitrary code as the root user, gaining full control over the device. This vulnerability affects all versions of the SNMP protocol, raising serious concerns for network security and device management.

References