CVE-2025-20352

Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
40.6%
EPSS
99%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.

Vendor
Cisco
Product
IOS and IOS XE
Added to KEV
Sep 29, 2025
Remediation due
Oct 20, 2025 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-121
EPSS
40.6% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded