{"id":"CVE-2025-20312","title":"A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability i…","summary":"A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability i…","severity":"high","cvss":7.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cwe":["CWE-835"],"vendor":"cisco","product":"ios_xe","affected":["ios_xe = 17.2.1","ios_xe = 17.2.1a","ios_xe = 17.2.1r","ios_xe = 17.2.1v","ios_xe = 17.2.2","ios_xe = 17.2.3","ios_xe = 17.3.1","ios_xe = 17.3.1a","ios_xe = 17.3.1w","ios_xe = 17.3.1x","ios_xe = 17.3.1z","ios_xe = 17.3.2","ios_xe = 17.3.2a","ios_xe = 17.3.3","ios_xe = 17.3.4","ios_xe = 17.3.4a","ios_xe = 17.3.4b","ios_xe = 17.3.4c","ios_xe = 17.3.5","ios_xe = 17.3.5a","ios_xe = 17.3.5b","ios_xe = 17.3.6","ios_xe = 17.3.7","ios_xe = 17.3.8","ios_xe = 17.3.8a","ios_xe = 17.4.1","ios_xe = 17.4.1a","ios_xe = 17.4.1b","ios_xe = 17.4.2","ios_xe = 17.4.2a","ios_xe = 17.5.1","ios_xe = 17.5.1a","ios_xe = 17.6.1","ios_xe = 17.6.1a","ios_xe = 17.6.1w","ios_xe = 17.6.1x","ios_xe = 17.6.1y","ios_xe = 17.6.1z","ios_xe = 17.6.1z1","ios_xe = 17.6.2","ios_xe = 17.6.3","ios_xe = 17.6.3a","ios_xe = 17.6.4","ios_xe = 17.6.5","ios_xe = 17.6.5a","ios_xe = 17.6.6","ios_xe = 17.6.6a","ios_xe = 17.6.7","ios_xe = 17.6.8","ios_xe = 17.6.8a","ios_xe = 17.7.1","ios_xe = 17.7.1a","ios_xe = 17.7.1b","ios_xe = 17.7.2","ios_xe = 17.8.1","ios_xe = 17.8.1a","ios_xe = 17.9.1","ios_xe = 17.9.1a","ios_xe = 17.9.1w","ios_xe = 17.9.1x","ios_xe = 17.9.1x1","ios_xe = 17.9.1y","ios_xe = 17.9.1y1","ios_xe = 17.9.2","ios_xe = 17.9.2a","ios_xe = 17.9.3","ios_xe = 17.9.3a","ios_xe = 17.9.4","ios_xe = 17.9.4a","ios_xe = 17.9.5","ios_xe = 17.9.5a","ios_xe = 17.9.5b","ios_xe = 17.9.5e","ios_xe = 17.9.5f","ios_xe = 17.9.6","ios_xe = 17.9.6a","ios_xe = 17.9.7","ios_xe = 17.9.7a","ios_xe = 17.9.7b","ios_xe = 17.10.1","ios_xe = 17.10.1a","ios_xe = 17.10.1b","ios_xe = 17.11.1","ios_xe = 17.11.1a","ios_xe = 17.12.1","ios_xe = 17.12.1a","ios_xe = 17.12.1w","ios_xe = 17.12.1x","ios_xe = 17.12.1y","ios_xe = 17.12.1z","ios_xe = 17.12.1z1","ios_xe = 17.12.1z2","ios_xe = 17.12.1z3","ios_xe = 17.12.1z4","ios_xe = 17.12.2","ios_xe = 17.12.2a","ios_xe = 17.12.3","ios_xe = 17.12.3a","ios_xe = 17.12.4","ios_xe = 17.12.4a"],"published":"2025-09-24","updated":"2026-09-17","sourceUpdated":"2026-09-17T19:42:09.900","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-20312","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmpwred-x3MJyf5M","label":"psirt@cisco.com"}],"tags":["nvd"],"epss":0.00388,"epssPercentile":0.32764,"ingestedAt":"2026-09-17T20:28:02.737Z","slug":"CVE-2025-20312","body":"## Overview\n\nA vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability is due to improper error handling when parsing a specific SNMP request. An attacker could exploit this vulnerability by sending a specific SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.\r\n\r This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMPv2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system.\n\n## Affected\n\n- `ios_xe = 17.2.1`\n- `ios_xe = 17.2.1a`\n- `ios_xe = 17.2.1r`\n- `ios_xe = 17.2.1v`\n- `ios_xe = 17.2.2`\n- `ios_xe = 17.2.3`\n- `ios_xe = 17.3.1`\n- `ios_xe = 17.3.1a`\n- `ios_xe = 17.3.1w`\n- `ios_xe = 17.3.1x`\n- `ios_xe = 17.3.1z`\n- `ios_xe = 17.3.2`\n- `ios_xe = 17.3.2a`\n- `ios_xe = 17.3.3`\n- `ios_xe = 17.3.4`\n- `ios_xe = 17.3.4a`\n- `ios_xe = 17.3.4b`\n- `ios_xe = 17.3.4c`\n- `ios_xe = 17.3.5`\n- `ios_xe = 17.3.5a`\n- `ios_xe = 17.3.5b`\n- `ios_xe = 17.3.6`\n- `ios_xe = 17.3.7`\n- `ios_xe = 17.3.8`\n- `ios_xe = 17.3.8a`\n- `ios_xe = 17.4.1`\n- `ios_xe = 17.4.1a`\n- `ios_xe = 17.4.1b`\n- `ios_xe = 17.4.2`\n- `ios_xe = 17.4.2a`\n- `ios_xe = 17.5.1`\n- `ios_xe = 17.5.1a`\n- `ios_xe = 17.6.1`\n- `ios_xe = 17.6.1a`\n- `ios_xe = 17.6.1w`\n- `ios_xe = 17.6.1x`\n- `ios_xe = 17.6.1y`\n- `ios_xe = 17.6.1z`\n- `ios_xe = 17.6.1z1`\n- `ios_xe = 17.6.2`\n- `ios_xe = 17.6.3`\n- `ios_xe = 17.6.3a`\n- `ios_xe = 17.6.4`\n- `ios_xe = 17.6.5`\n- `ios_xe = 17.6.5a`\n- `ios_xe = 17.6.6`\n- `ios_xe = 17.6.6a`\n- `ios_xe = 17.6.7`\n- `ios_xe = 17.6.8`\n- `ios_xe = 17.6.8a`\n- `ios_xe = 17.7.1`\n- `ios_xe = 17.7.1a`\n- `ios_xe = 17.7.1b`\n- `ios_xe = 17.7.2`\n- `ios_xe = 17.8.1`\n- `ios_xe = 17.8.1a`\n- `ios_xe = 17.9.1`\n- `ios_xe = 17.9.1a`\n- `ios_xe = 17.9.1w`\n- `ios_xe = 17.9.1x`\n- `ios_xe = 17.9.1x1`\n- `ios_xe = 17.9.1y`\n- `ios_xe = 17.9.1y1`\n- `ios_xe = 17.9.2`\n- `ios_xe = 17.9.2a`\n- `ios_xe = 17.9.3`\n- `ios_xe = 17.9.3a`\n- `ios_xe = 17.9.4`\n- `ios_xe = 17.9.4a`\n- `ios_xe = 17.9.5`\n- `ios_xe = 17.9.5a`\n- `ios_xe = 17.9.5b`\n- `ios_xe = 17.9.5e`\n- `ios_xe = 17.9.5f`\n- `ios_xe = 17.9.6`\n- `ios_xe = 17.9.6a`\n- `ios_xe = 17.9.7`\n- `ios_xe = 17.9.7a`\n- `ios_xe = 17.9.7b`\n- `ios_xe = 17.10.1`\n- `ios_xe = 17.10.1a`\n- `ios_xe = 17.10.1b`\n- `ios_xe = 17.11.1`\n- `ios_xe = 17.11.1a`\n- `ios_xe = 17.12.1`\n- `ios_xe = 17.12.1a`\n- `ios_xe = 17.12.1w`\n- `ios_xe = 17.12.1x`\n- `ios_xe = 17.12.1y`\n- `ios_xe = 17.12.1z`\n- `ios_xe = 17.12.1z1`\n- `ios_xe = 17.12.1z2`\n- `ios_xe = 17.12.1z3`\n- `ios_xe = 17.12.1z4`\n- `ios_xe = 17.12.2`\n- `ios_xe = 17.12.2a`\n- `ios_xe = 17.12.3`\n- `ios_xe = 17.12.3a`\n- `ios_xe = 17.12.4`\n- `ios_xe = 17.12.4a`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":42,"depthScoreParts":{"impact":42.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}