A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

This vulnerability is due to improper error handling when parsing a specific SNMP request. An attacker could exploit this vulnerability by sending a specific SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.

This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMPv2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Changed

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00101.

Exploitation none

Automatable no

Technical Impact partial

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Cisco Cisco IOS XE Software affected
Version Status Constraints
17.2.1 affected
—
17.2.1r affected
—
17.2.1a affected
—
17.2.1v affected
—
17.2.2 affected
—
17.2.3 affected
—
17.3.1 affected
—
17.3.2 affected
—
17.3.3 affected
—
17.3.1a affected
—
17.3.1w affected
—
17.3.2a affected
—
17.3.1x affected
—
17.3.1z affected
—
17.3.4 affected
—
17.3.5 affected
—
17.3.4a affected
—
17.3.6 affected
—
17.3.4b affected
—
17.3.4c affected
—
17.3.5a affected
—
17.3.5b affected
—
17.3.7 affected
—
17.3.8 affected
—
17.3.8a affected
—
17.4.1 affected
—
17.4.2 affected
—
17.4.1a affected
—
17.4.1b affected
—
17.4.2a affected
—
17.5.1 affected
—
17.5.1a affected
—
17.6.1 affected
—
17.6.2 affected
—
17.6.1w affected
—
17.6.1a affected
—
17.6.1x affected
—
17.6.3 affected
—
17.6.1y affected
—
17.6.1z affected
—
17.6.3a affected
—
17.6.4 affected
—
17.6.1z1 affected
—
17.6.5 affected
—
17.6.6 affected
—
17.6.6a affected
—
17.6.5a affected
—
17.6.7 affected
—
17.6.8 affected
—
17.6.8a affected
—
17.7.1 affected
—
17.7.1a affected
—
17.7.1b affected
—
17.7.2 affected
—
17.10.1 affected
—
17.10.1a affected
—
17.10.1b affected
—
17.8.1 affected
—
17.8.1a affected
—
17.9.1 affected
—
17.9.1w affected
—
17.9.2 affected
—
17.9.1a affected
—
17.9.1x affected
—
17.9.1y affected
—
17.9.3 affected
—
17.9.2a affected
—
17.9.1x1 affected
—
17.9.3a affected
—
17.9.4 affected
—
17.9.1y1 affected
—
17.9.5 affected
—
17.9.4a affected
—
17.9.5a affected
—
17.9.5b affected
—
17.9.6 affected
—
17.9.6a affected
—
17.9.7 affected
—
17.9.5e affected
—
17.9.5f affected
—
17.9.7a affected
—
17.9.7b affected
—
17.11.1 affected
—
17.11.1a affected
—
17.12.1 affected
—
17.12.1w affected
—
17.12.1a affected
—
17.12.1x affected
—
17.12.2 affected
—
17.12.3 affected
—
17.12.2a affected
—
17.12.1y affected
—
17.12.1z affected
—
17.12.4 affected
—
17.12.3a affected
—
17.12.1z1 affected
—
17.12.1z2 affected
—
17.12.4a affected
—
17.12.5 affected
—
17.12.4b affected
—
17.12.1z3 affected
—
17.12.5a affected
—
17.12.1z4 affected
—
17.12.5b affected
—
17.12.5c affected
—
17.13.1 affected
—
17.13.1a affected
—
17.14.1 affected
—
17.14.1a affected
—
17.15.1 affected
—
17.15.1w affected
—
17.15.1a affected
—
17.15.2 affected
—
17.15.1b affected
—
17.15.1x affected
—
17.15.1z affected
—
17.15.3 affected
—
17.15.2c affected
—
17.15.2a affected
—
17.15.1y affected
—
17.15.2b affected
—
17.15.3a affected
—
17.15.3b affected
—
17.16.1 affected
—
17.16.1a affected
—
17.17.1 affected
—

No data.

No data.

Vendor Product Confidence Versions
Cisco Ios Xe Software — —

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Subscriptions

Vendors Products
Cisco Subscribe
Ios Xe Software Subscribe

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-31034 A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when parsing a specific SNMP request. An attacker could exploit this vulnerability by sending a specific SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMPv2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmpwred-x3MJyf5M cve-icon cve-icon
History

Thu, 25 Sep 2025 08:30:00 +0000

Type Values Removed Values Added
First Time appeared Cisco
Cisco ios Xe Software
Vendors & Products Cisco
Cisco ios Xe Software

Wed, 24 Sep 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 24 Sep 2025 17:30:00 +0000

Type Values Removed Values Added
Description A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when parsing a specific SNMP request. An attacker could exploit this vulnerability by sending a specific SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMPv2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system.
Weaknesses CWE-835
References
Metrics cvssV3_1

{'score': 7.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2025-09-24T18:14:37.538Z

Reserved: 2024-10-10T19:15:13.253Z

Link: CVE-2025-20312

cve-icon Vulnrichment

Updated: 2025-09-24T18:14:33.429Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-24T18:15:34.947

Modified: 2025-09-26T14:32:53.583

Link: CVE-2025-20312

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2025-09-25T08:21:10Z

Weaknesses