Cisco XE: CVE-2025-20170: Cisco IOS, IOS XE, and IOS XR Software SNMP Denial of Service Vulnerabilities

Cisco XE: CVE-2025-20170: Cisco IOS, IOS XE, and IOS XR Software SNMP Denial of Service Vulnerabilities

Severity

7

CVSS

(AV:N/AC:L/Au:S/C:N/I:N/A:C)

Published

02/05/2025

Created

02/07/2025

Added

02/06/2025

Modified

02/07/2025

Description

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMP v2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMP v3, the attacker must have valid SNMP user credentials for the affected system.

Solution(s)

• cisco-xe-update-latest

References

• https://attackerkb.com/topics/cve-2025-20170
• CVE - 2025-20170
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW
• cisco-sa-snmp-dos-sdxnSUcW