CVE-2025-20169

Summary

CVE-2025-20169 is a vulnerability affecting SNMP subsystems in Cisco IOS Software and Cisco IOS XE Software. An authenticated, remote attacker can exploit this issue by sending a maliciously crafted SNMP request, leading to a denial-of-service (DoS) condition on the affected device. This occurs due to improper error handling during SNMP request parsing. The vulnerability affects SNMP versions 1, 2c, and 3. For versions 2c and earlier, an attacker requires a valid read-write or read-only community string. In the case of SNMP v3, the attacker needs valid SNMP user credentials.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.