---
id: CVE-2025-20312
title: "A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability i…"
summary: "A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r This vulnerability i…"
severity: high
cvss: 7.7
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H'
cwe:
  - CWE-835
vendor: cisco
product: ios_xe
affected:
  - ios_xe = 17.2.1
  - ios_xe = 17.2.1a
  - ios_xe = 17.2.1r
  - ios_xe = 17.2.1v
  - ios_xe = 17.2.2
  - ios_xe = 17.2.3
  - ios_xe = 17.3.1
  - ios_xe = 17.3.1a
  - ios_xe = 17.3.1w
  - ios_xe = 17.3.1x
  - ios_xe = 17.3.1z
  - ios_xe = 17.3.2
  - ios_xe = 17.3.2a
  - ios_xe = 17.3.3
  - ios_xe = 17.3.4
  - ios_xe = 17.3.4a
  - ios_xe = 17.3.4b
  - ios_xe = 17.3.4c
  - ios_xe = 17.3.5
  - ios_xe = 17.3.5a
  - ios_xe = 17.3.5b
  - ios_xe = 17.3.6
  - ios_xe = 17.3.7
  - ios_xe = 17.3.8
  - ios_xe = 17.3.8a
  - ios_xe = 17.4.1
  - ios_xe = 17.4.1a
  - ios_xe = 17.4.1b
  - ios_xe = 17.4.2
  - ios_xe = 17.4.2a
  - ios_xe = 17.5.1
  - ios_xe = 17.5.1a
  - ios_xe = 17.6.1
  - ios_xe = 17.6.1a
  - ios_xe = 17.6.1w
  - ios_xe = 17.6.1x
  - ios_xe = 17.6.1y
  - ios_xe = 17.6.1z
  - ios_xe = 17.6.1z1
  - ios_xe = 17.6.2
  - ios_xe = 17.6.3
  - ios_xe = 17.6.3a
  - ios_xe = 17.6.4
  - ios_xe = 17.6.5
  - ios_xe = 17.6.5a
  - ios_xe = 17.6.6
  - ios_xe = 17.6.6a
  - ios_xe = 17.6.7
  - ios_xe = 17.6.8
  - ios_xe = 17.6.8a
  - ios_xe = 17.7.1
  - ios_xe = 17.7.1a
  - ios_xe = 17.7.1b
  - ios_xe = 17.7.2
  - ios_xe = 17.8.1
  - ios_xe = 17.8.1a
  - ios_xe = 17.9.1
  - ios_xe = 17.9.1a
  - ios_xe = 17.9.1w
  - ios_xe = 17.9.1x
  - ios_xe = 17.9.1x1
  - ios_xe = 17.9.1y
  - ios_xe = 17.9.1y1
  - ios_xe = 17.9.2
  - ios_xe = 17.9.2a
  - ios_xe = 17.9.3
  - ios_xe = 17.9.3a
  - ios_xe = 17.9.4
  - ios_xe = 17.9.4a
  - ios_xe = 17.9.5
  - ios_xe = 17.9.5a
  - ios_xe = 17.9.5b
  - ios_xe = 17.9.5e
  - ios_xe = 17.9.5f
  - ios_xe = 17.9.6
  - ios_xe = 17.9.6a
  - ios_xe = 17.9.7
  - ios_xe = 17.9.7a
  - ios_xe = 17.9.7b
  - ios_xe = 17.10.1
  - ios_xe = 17.10.1a
  - ios_xe = 17.10.1b
  - ios_xe = 17.11.1
  - ios_xe = 17.11.1a
  - ios_xe = 17.12.1
  - ios_xe = 17.12.1a
  - ios_xe = 17.12.1w
  - ios_xe = 17.12.1x
  - ios_xe = 17.12.1y
  - ios_xe = 17.12.1z
  - ios_xe = 17.12.1z1
  - ios_xe = 17.12.1z2
  - ios_xe = 17.12.1z3
  - ios_xe = 17.12.1z4
  - ios_xe = 17.12.2
  - ios_xe = 17.12.2a
  - ios_xe = 17.12.3
  - ios_xe = 17.12.3a
  - ios_xe = 17.12.4
  - ios_xe = 17.12.4a
published: '2025-09-24'
updated: '2026-09-26'
sourceUpdated: '2026-09-26T00:10:00.127'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-20312'
references:
  - url: >-
      https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmpwred-x3MJyf5M
    label: psirt@cisco.com
tags:
  - nvd
epss: 0.00388
epssPercentile: 0.30133
ingestedAt: '2026-09-17T20:28:02.737Z'
---

## Overview

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

 This vulnerability is due to improper error handling when parsing a specific SNMP request. An attacker could exploit this vulnerability by sending a specific SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

 This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMPv2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system.

## Affected

- `ios_xe = 17.2.1`
- `ios_xe = 17.2.1a`
- `ios_xe = 17.2.1r`
- `ios_xe = 17.2.1v`
- `ios_xe = 17.2.2`
- `ios_xe = 17.2.3`
- `ios_xe = 17.3.1`
- `ios_xe = 17.3.1a`
- `ios_xe = 17.3.1w`
- `ios_xe = 17.3.1x`
- `ios_xe = 17.3.1z`
- `ios_xe = 17.3.2`
- `ios_xe = 17.3.2a`
- `ios_xe = 17.3.3`
- `ios_xe = 17.3.4`
- `ios_xe = 17.3.4a`
- `ios_xe = 17.3.4b`
- `ios_xe = 17.3.4c`
- `ios_xe = 17.3.5`
- `ios_xe = 17.3.5a`
- `ios_xe = 17.3.5b`
- `ios_xe = 17.3.6`
- `ios_xe = 17.3.7`
- `ios_xe = 17.3.8`
- `ios_xe = 17.3.8a`
- `ios_xe = 17.4.1`
- `ios_xe = 17.4.1a`
- `ios_xe = 17.4.1b`
- `ios_xe = 17.4.2`
- `ios_xe = 17.4.2a`
- `ios_xe = 17.5.1`
- `ios_xe = 17.5.1a`
- `ios_xe = 17.6.1`
- `ios_xe = 17.6.1a`
- `ios_xe = 17.6.1w`
- `ios_xe = 17.6.1x`
- `ios_xe = 17.6.1y`
- `ios_xe = 17.6.1z`
- `ios_xe = 17.6.1z1`
- `ios_xe = 17.6.2`
- `ios_xe = 17.6.3`
- `ios_xe = 17.6.3a`
- `ios_xe = 17.6.4`
- `ios_xe = 17.6.5`
- `ios_xe = 17.6.5a`
- `ios_xe = 17.6.6`
- `ios_xe = 17.6.6a`
- `ios_xe = 17.6.7`
- `ios_xe = 17.6.8`
- `ios_xe = 17.6.8a`
- `ios_xe = 17.7.1`
- `ios_xe = 17.7.1a`
- `ios_xe = 17.7.1b`
- `ios_xe = 17.7.2`
- `ios_xe = 17.8.1`
- `ios_xe = 17.8.1a`
- `ios_xe = 17.9.1`
- `ios_xe = 17.9.1a`
- `ios_xe = 17.9.1w`
- `ios_xe = 17.9.1x`
- `ios_xe = 17.9.1x1`
- `ios_xe = 17.9.1y`
- `ios_xe = 17.9.1y1`
- `ios_xe = 17.9.2`
- `ios_xe = 17.9.2a`
- `ios_xe = 17.9.3`
- `ios_xe = 17.9.3a`
- `ios_xe = 17.9.4`
- `ios_xe = 17.9.4a`
- `ios_xe = 17.9.5`
- `ios_xe = 17.9.5a`
- `ios_xe = 17.9.5b`
- `ios_xe = 17.9.5e`
- `ios_xe = 17.9.5f`
- `ios_xe = 17.9.6`
- `ios_xe = 17.9.6a`
- `ios_xe = 17.9.7`
- `ios_xe = 17.9.7a`
- `ios_xe = 17.9.7b`
- `ios_xe = 17.10.1`
- `ios_xe = 17.10.1a`
- `ios_xe = 17.10.1b`
- `ios_xe = 17.11.1`
- `ios_xe = 17.11.1a`
- `ios_xe = 17.12.1`
- `ios_xe = 17.12.1a`
- `ios_xe = 17.12.1w`
- `ios_xe = 17.12.1x`
- `ios_xe = 17.12.1y`
- `ios_xe = 17.12.1z`
- `ios_xe = 17.12.1z1`
- `ios_xe = 17.12.1z2`
- `ios_xe = 17.12.1z3`
- `ios_xe = 17.12.1z4`
- `ios_xe = 17.12.2`
- `ios_xe = 17.12.2a`
- `ios_xe = 17.12.3`
- `ios_xe = 17.12.3a`
- `ios_xe = 17.12.4`
- `ios_xe = 17.12.4a`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.