ICSA-25-282-02

icsaUScisa_csaf_ot

Rockwell Automation Lifecycle Services with Cisco

view advisory published 2025-10-09

Successful exploitation of this vulnerability could result in arbitrary code execution.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-20352US—OT criticalKEV
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationFirewall-Managed Support contract with Cisco firewall

    Additionally, users of the affected software who are unable to upgrade to one of the corrected versions are encouraged to apply security best practices, where possible.

  • MitigationIDC-Managed Support contract with Cisco Switching

    Additionally, users of the affected software who are unable to upgrade to one of the corrected versions are encouraged to apply security best practices, where possible.

  • MitigationIndustrial Data Center (IDC) with Cisco Switching

    Additionally, users of the affected software who are unable to upgrade to one of the corrected versions are encouraged to apply security best practices, where possible.

  • MitigationNetwork-Managed Support contract with Cisco network switch

    Additionally, users of the affected software who are unable to upgrade to one of the corrected versions are encouraged to apply security best practices, where possible.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan