CVE-2025-20352

highPriorität · handeln · 90OT-Risiko · kritischKEV · ausgenutztEPSS 0.415 · 99. PerzentilExploit · PoCDEEUNLRUUS
grimoire priorityP0 · Act now
Exploitable?
Yes · in the wild
CISA KEV · 2 exploits · PoC
Likely / severe?
41.5% (99th) EPSS
CVSS 7.7 · high
Is it mine?
4,538 products
Prüfe deine Angriffsfläche
Who says so?
7 sources
cnnvd · enisa_euvd · fstec_bdu · cert_bund

hinzugefügt 2025-09-29beheben bis 2025-10-20

erforderliche Maßnahme Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS · bewertet 2026-10-24

Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earlier read-only community string or valid SNMPv3 user credentials. An authenticated, remote attacker with high privileges could execute code as the root user on an affected device that is running Cisco IOS XE Software. To execute code as the root user, the attacker must have the SNMPv1 or v2c read-only community string or valid SNMPv3 user credentials and administrative or privilege 15 credentials on the affected device. An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device over IPv4 or IPv6 networks. This vulnerability is due to a stack overflow condition in the SNMP subsystem of the affected software. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system. Note: This vulnerability affects all versions of SNMP.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.1
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.7–9.1

v3.17.7highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:Hsecondary · CISA US
v3.19.1criticalAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.17.7highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:Hsecondary · ENISA EU
v3.17.7highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:Hsecondary · psirt@cisco.com USAusnutzbarkeit 3.1 · Auswirkung 4
v3.17.7highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:Hsecondary · CVSS-BT (t0sche)
v3.17.7highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:Hsecondary · NCSC-NL NL
v3.17.7highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:Hsecondary · Cisco PSIRT US
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: active · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-121USCWE-121USCWE-121USCWE-121US
05

Exploits (2)

Öffentlicher Proof-of-Concept- und Exploit-Code.

06

betroffene Produkte (4,538)

Betroffene Produkte und Versionsbereiche.

20 von 4,538 angezeigt
07

Advisories (5)

Hersteller- und Ökosystem-Meldungen dazu.

  • NCSC-2025-0297Kwetsbaarheden verholpen in Cisco IOS en Cisco IOS XE SoftwareNL2025-09-25csaf · ncsc_nlNL

    Cisco heeft kwetsbaarheden verholpen in Cisco IOS en Cisco IOS XE Software.

  • WID-SEC-W-2025-2124Cisco IOS und IOS XE: Mehrere SchwachstellenDeutsch2025-09-24csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in Cisco IOS und Cisco IOS XE ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, einen Denial-of-Service-Zustand zu verursachen und beliebigen Code auszuführen – sogar mit Root-Rechten.

  • cisco-sa-snmp-x4LPhteCisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability2025-09-24csaf · cisco_csafUS

    A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earlier read-only community string or valid SNMPv3 user credentials. An authenticated, remote attacker with high privileges could execute code as the root user on an affected device that is running Cisco IOS XE Software. To execute code as the root user, the attacker must have the SNMPv1 or v2c read-only community string or valid SNMPv3 user credentials and administrative or privilege 15 credentials on the affected device. An attacker could exploit this vulnerability by sending a crafted SNMP packet to an affected device over IPv4 or IPv6 networks. This vulnerability is due to a stack overflow condition in the SNMP subsystem of the affected software. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system. Note: This vulnerability affects all versions of SNMP. Cisco has released software updates that addresses this vulnerability. There are no workarounds that address this vulnerability. There is a mitigation that addresses this vulnerability. This advisory is part of the September 2025 release of the Cisco IOS and IOS XE Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: September 2025 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication ["https://sec.cloudapps.cisco.com/security/center/viewErp.x?alertId=ERP-75296"].

  • ICSA-25-282-02Rockwell Automation Lifecycle Services with Cisco2025-10-09icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could result in arbitrary code execution.

  • ICSA-25-282-03Rockwell Automation Stratix2025-10-09icsa · cisa_csaf_otUS

    Successful exploitation of this vulnerability could result in arbitrary code execution.

08

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

09

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bducert_bundcisa_csaf_otncsc_nlcisco_csafNVDCVE.orgMITRE
veröffentlicht 2025-09-24geändert 2026-06-17
10

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan