What’s Vulnerable › Vulnerabilities
CVE-2025-20174
- Severity: high (CVSS 7.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.8% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-02-05 · updated 2026-06-17
- Weakness: CWE-805
Description
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMP v2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMP v3, the attacker must have valid SNMP user credentials for the affected system.
Affected products
- Cisco IOS: 15.2(1)sy, 15.2(1)sy0a, 15.2(1)sy1, 15.2(1)sy1a, 15.2(1)sy2, 15.2(1)sy3 (+213)
- Cisco IOS XE: 3.11.0s, 3.11.1s, 3.11.2s, 3.11.3s, 3.11.4s, 3.12.0as (+253)
References
Get alerted when CVE-2025-20174 or the next vulnerability affects your stack