{"id":"CVE-2025-20174","title":"Cisco IOS and IOS XE SNMP Denial of Service Vulnerabilities","summary":"Multiple vulnerabilities in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service (DoS) co…","severity":"high","cvss":7.7,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","cvssSource":"vendor","vendor":"Cisco","product":"IOS","affected":["ios_xe_software 3.11.1S","ios_xe_software 3.12.0S","ios_xe_software 3.11.2S","ios_xe_software 3.13.0S","ios_xe_software 3.11.0S","ios_xe_software 3.11.3S","ios_xe_software 3.12.1S","ios_xe_software 3.12.2S","ios_xe_software 3.13.1S","ios_xe_software 3.13.2S","ios_xe_software 3.12.3S","ios_xe_software 3.14.0S","ios_xe_software 3.15.0S","ios_xe_software 3.14.1S","ios_xe_software 3.11.4S","ios_xe_software 3.14.2S","ios_xe_software 3.14.3S","ios_xe_software 3.14.4S","ios_xe_software 3.13.3S","ios_xe_software 3.15.1S","ios_xe_software 3.16.0S","ios_xe_software 3.15.2S","ios_xe_software 3.16.1S","ios_xe_software 3.17.0S","ios_xe_software 3.17.1S","ios_xe_software 16.1.1","ios_xe_software 16.1.2","ios_xe_software 3.12.0aS","ios_xe_software 3.12.4S","ios_xe_software 3.13.4S","ios_xe_software 3.16.0aS","ios_xe_software 3.16.1aS","ios_xe_software 3.16.2S","ios_xe_software 3.13.5S","ios_xe_software 3.16.2aS","ios_xe_software 3.13.2aS","ios_xe_software 3.15.1cS","ios_xe_software 3.15.3S","ios_xe_software 3.16.0bS","ios_xe_software 3.16.0cS"],"published":"2025-02-05","updated":"2025-03-12","sourceUpdated":"2025-03-12T15:22:33+00:00","source":"CSAF","sourceUrl":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW","references":[{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW"},{"url":"https://software.cisco.com"}],"tags":["csaf","vendor-advisory","cisco"],"epss":0.00764,"epssPercentile":0.55211,"ingestedAt":"2026-10-16T11:53:41.636Z","slug":"CVE-2025-20174","body":"## Overview\n\nMultiple vulnerabilities in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.\r\n\r\nFor more information about these vulnerabilities, see the Details [\"#details\"] section of this advisory.\r\n\r\nCisco plans to release software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. There are mitigations that address these vulnerabilities.\n\n## Vendor advisories\n\n- **cisco-sa-snmp-dos-sdxnSUcW** · Cisco · affected: Cisco IOS XE Software (290 versions), IOS (293 versions) · updated 2025-03-12 · [advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW)\n\n**Cisco IOS, IOS XE, and IOS XR Software SNMP Denial of Service Vulnerabilities**. Released 2025-02-05, updated 2025-03-12.\n\nAffected:\n\n- Cisco IOS XE Software 3.11.1S\n- Cisco IOS XE Software 3.12.0S\n- Cisco IOS XE Software 3.11.2S\n- Cisco IOS XE Software 3.13.0S\n- Cisco IOS XE Software 3.11.0S\n- Cisco IOS XE Software 3.11.3S\n- Cisco IOS XE Software 3.12.1S\n- Cisco IOS XE Software 3.12.2S\n- Cisco IOS XE Software 3.13.1S\n- Cisco IOS XE Software 3.13.2S\n- Cisco IOS XE Software 3.12.3S\n- Cisco IOS XE Software 3.14.0S\n- Cisco IOS XE Software 3.15.0S\n- Cisco IOS XE Software 3.14.1S\n- Cisco IOS XE Software 3.11.4S\n- Cisco IOS XE Software 3.14.2S\n- Cisco IOS XE Software 3.14.3S\n- Cisco IOS XE Software 3.14.4S\n- Cisco IOS XE Software 3.13.3S\n- Cisco IOS XE Software 3.15.1S\n- Cisco IOS XE Software 3.16.0S\n- Cisco IOS XE Software 3.15.2S\n- Cisco IOS XE Software 3.16.1S\n- Cisco IOS XE Software 3.17.0S\n- Cisco IOS XE Software 3.17.1S\n- Cisco IOS XE Software 16.1.1\n- Cisco IOS XE Software 16.1.2\n- Cisco IOS XE Software 3.12.0aS\n- Cisco IOS XE Software 3.12.4S\n- Cisco IOS XE Software 3.13.4S\n- Cisco IOS XE Software 3.16.0aS\n- Cisco IOS XE Software 3.16.1aS\n- Cisco IOS XE Software 3.16.2S\n- Cisco IOS XE Software 3.13.5S\n- Cisco IOS XE Software 3.16.2aS\n- Cisco IOS XE Software 3.13.2aS\n- Cisco IOS XE Software 3.15.1cS\n- Cisco IOS XE Software 3.15.3S\n- Cisco IOS XE Software 3.16.0bS\n- Cisco IOS XE Software 3.16.0cS\n\n## Remediation\n\nCisco has released software updates that address this vulnerability. https://software.cisco.com","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.4,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}