All vulnerabilities
CVE-2025-20352

Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

Cisco IOS and IOS XEOperating systems
Open in ThreatlineRecord JSON
CVSS
7.7High
ExploitationExploited in the wildAdded to KEV 29 Sep 2025CISA KEV
Exploit odds (EPSS)41.5%Chance of exploitation activity in the next 30 days, higher than 98% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Federal deadline20 Oct 2025Remediation due date for US federal agenciesCISA KEV
CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 24 Sep 2025, 17:10 UTCPublishedCVE List
  2. 29 Sep 2025Added to CISA KEVCISA KEV

Description

Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.

Text from CVE List

Affected versions 81

  • IOSaffected: 12.2(55)SECVE List
  • IOSaffected: 12.2(55)SE3CVE List
  • IOSaffected: 12.2(55)SE2CVE List
  • IOSaffected: 12.2(58)SECVE List
  • IOSaffected: 12.2(55)SE1CVE List
  • IOSaffected: 12.2(58)SE1CVE List
  • IOSaffected: 12.2(55)SE4CVE List
  • IOSaffected: 12.2(58)SE2CVE List
  • IOSaffected: 12.2(55)SE5CVE List
  • IOSaffected: 12.2(55)SE6CVE List
  • IOSaffected: 12.2(55)SE7CVE List
  • IOSaffected: 12.2(55)SE8CVE List
  • IOSaffected: 12.2(55)SE9CVE List
  • IOSaffected: 12.2(55)SE10CVE List
  • IOSaffected: 12.2(55)SE11CVE List
  • IOSaffected: 12.2(55)SE12CVE List
  • IOSaffected: 12.2(55)SE13CVE List
  • IOSaffected: 12.2(58)EZCVE List
  • IOSaffected: 12.2(53)EZCVE List
  • IOSaffected: 12.2(55)EZCVE List
  • IOSaffected: 12.2(60)EZCVE List
  • IOSaffected: 12.2(60)EZ1CVE List
  • IOSaffected: 12.2(60)EZ2CVE List
  • IOSaffected: 12.2(60)EZ3CVE List
  • IOSaffected: 12.2(60)EZ4CVE List
  • IOSaffected: 12.2(60)EZ5CVE List
  • IOSaffected: 12.2(60)EZ6CVE List
  • IOSaffected: 12.2(60)EZ7CVE List
  • IOSaffected: 12.2(60)EZ8CVE List
  • IOSaffected: 12.2(60)EZ9CVE List
  • Cisco IOS XE Softwareaffected: 3.5.0ECVE List
  • Cisco IOS XE Softwareaffected: 3.5.1ECVE List
  • Cisco IOS XE Softwareaffected: 3.5.2ECVE List
  • Cisco IOS XE Softwareaffected: 3.5.3ECVE List
  • Cisco IOS XE Softwareaffected: 3.6.0ECVE List
  • Cisco IOS XE Softwareaffected: 3.6.1ECVE List
  • Cisco IOS XE Softwareaffected: 3.6.2aECVE List
  • Cisco IOS XE Softwareaffected: 3.6.2ECVE List
  • Cisco IOS XE Softwareaffected: 3.6.3ECVE List
  • Cisco IOS XE Softwareaffected: 3.6.4ECVE List
  • Cisco IOS XE Softwareaffected: 3.6.5ECVE List
  • Cisco IOS XE Softwareaffected: 3.6.6ECVE List
  • Cisco IOS XE Softwareaffected: 3.6.5aECVE List
  • Cisco IOS XE Softwareaffected: 3.6.7ECVE List
  • Cisco IOS XE Softwareaffected: 3.6.8ECVE List
  • Cisco IOS XE Softwareaffected: 3.6.7bECVE List
  • Cisco IOS XE Softwareaffected: 3.6.9ECVE List
  • Cisco IOS XE Softwareaffected: 3.6.10ECVE List
  • Cisco IOS XE Softwareaffected: 3.14.0SCVE List
  • Cisco IOS XE Softwareaffected: 3.14.1SCVE List
  • Cisco IOS XE Softwareaffected: 3.14.2SCVE List
  • Cisco IOS XE Softwareaffected: 3.14.3SCVE List
  • Cisco IOS XE Softwareaffected: 3.14.4SCVE List
  • Cisco IOS XE Softwareaffected: 3.15.0SCVE List
  • Cisco IOS XE Softwareaffected: 3.15.1SCVE List
  • Cisco IOS XE Softwareaffected: 3.15.2SCVE List
  • Cisco IOS XE Softwareaffected: 3.15.1cSCVE List
  • Cisco IOS XE Softwareaffected: 3.15.3SCVE List
  • Cisco IOS XE Softwareaffected: 3.15.4SCVE List
  • Cisco IOS XE Softwareaffected: 3.7.0ECVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.9.1CVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.9.2CVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.9.3CVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.9.4CVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.10.1CVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.10.2CVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.10.3CVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.10.3aCVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.10.3bCVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.10.4CVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.10.5CVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.10.6CVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.11.1aCVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.12.1bCVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.12.1dCVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.12.1eCVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.12.2rCVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.12.3CVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.12.4CVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.12.4aCVE List
  • Cisco IOS XE Catalyst SD-WANaffected: 16.12.5CVE List

References 3