CVE-2025-20352

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 8/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.

CISA Known Exploited Vulnerability

Vendor / Product Cisco — IOS and IOS XE

Date Added 2025-09-29

Remediation Due 2025-10-20

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte ; https://nvd.nist.gov/vuln/detail/CVE-2025-20352

Weakness Classification (1)

CWE-121

Affected Software (1096)

Vendor	Product	Version
cisco	ios	12.2\(33\)sxi
cisco	ios	12.2\(33\)sxi1
cisco	ios	12.2\(33\)sxi2
cisco	ios	12.2\(33\)sxi2a
cisco	ios	12.2\(33\)sxi3
cisco	ios	12.2\(33\)sxi4
cisco	ios	12.2\(33\)sxi4a
cisco	ios	12.2\(33\)sxi5
cisco	ios	12.2\(33\)sxi6
cisco	ios	12.2\(33\)sxi7
cisco	ios	12.2\(33\)sxi8
cisco	ios	12.2\(33\)sxi8a
cisco	ios	12.2\(33\)sxi9
cisco	ios	12.2\(33\)sxi10
cisco	ios	12.2\(33\)sxi11
cisco	ios	12.2\(33\)sxi12
cisco	ios	12.2\(33\)sxi13
cisco	ios	12.2\(33\)sxi14
cisco	ios	12.2\(33\)sxj
cisco	ios	12.2\(33\)sxj1
cisco	ios	12.2\(33\)sxj2
cisco	ios	12.2\(33\)sxj3
cisco	ios	12.2\(33\)sxj4
cisco	ios	12.2\(33\)sxj5
cisco	ios	12.2\(33\)sxj6
cisco	ios	12.2\(33\)sxj7
cisco	ios	12.2\(33\)sxj8
cisco	ios	12.2\(33\)sxj9
cisco	ios	12.2\(33\)sxj10
cisco	ios	12.2\(50\)sq