CVE-2025-20169
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMP v2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMP v3, the attacker must have valid SNMP user credentials for the affected system.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.7
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
- EPSS probability
- 0.78%
- CWE
- CWE-805
- Published
- 2025-02-05
- Last modified
- 2026-03-12
Affected products
- Cisco IOS
- Cisco IOS
- Cisco IOS
- Cisco IOS
- Cisco IOS
- Cisco IOS
- Cisco IOS
- Cisco IOS
Weakness type
Related vulnerabilities
- CVE-2026-6695 — Gimp: gimp: remote code execution via crafted paa file
- CVE-2026-15028 — Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header
- CVE-2026-53877 — Heap buffer over-read in GDALRaster
- CVE-2026-12549 — Libsoup: incomplete fix for cve-2026-2443: range suffix overflow in libsoup soupserver
- CVE-2026-1767 — Localsearch: tracker-miners: gnome localsearch mp3 extractor: heap buffer overflow leading to denial of service or information disclosure via malformed mp3 id3 tags
- CVE-2026-1766 — Localsearch: tracker-miners: gnome localsearch mp3 extractor: denial of service and information disclosure via malformed mp3 files.
- CVE-2026-12087 — Socket versions before 2.041 for Perl have an out-of-bounds heap read
- CVE-2026-34002 — Xorg: xwayland: x.org x server: information disclosure or denial of service via out-of-bounds read in xkb modifier map handling