---
id: CVE-2025-20170
title: Cisco IOS and IOS XE  SNMP Denial of Service Vulnerabilities
summary: >-
  Multiple vulnerabilities in the Simple Network Management Protocol (SNMP)
  subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR
  Software could allow an authenticated, remote attacker to cause a denial of
  service (DoS) co…
severity: high
cvss: 7.7
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H'
cvssSource: vendor
vendor: Cisco
product: IOS
affected:
  - ios 15.1(2)T
  - ios 12.2(46)EY
  - ios 12.2(25)SW9
  - ios 12.2(31)XN2
  - ios 12.2(31)SB1a
  - ios 12.2(50)SG3
  - ios 12.3(14)YQ5
  - ios 12.2(25)EWA5
  - ios 12.2(18)SXD7b
  - ios 12.3(4)XD4
  - ios 12.3(11)YF2
  - ios 12.2(2)XT2
  - ios 12.2(2)XH1
  - ios 12.2(28)SB10
  - ios 12.4(21a)M1
  - ios 12.4(4)T8
  - ios 12.2(15)CZ1
  - ios 12.2(20)S10
  - ios 12.2(15)MC1c
  - ios 12.4(20)T1
  - ios 12.2(33)IRC
  - ios 12.2(4)MB7
  - ios 12.3(8)YG7
  - ios 12.4(22)XR5
  - ios 12.2(55)EY
  - ios 12.4(15)XY4
  - ios 12.2(25)EWA1
  - ios 12.2(31)SB10c
  - ios 12.2(31)SB9b
  - ios 12.3(8)T9
  - ios 12.3(8)XY3
  - ios 12.2(4)XV1
  - ios 12.2(15)MC2g
  - ios 12.2(33)SCB9
  - ios 12.4(24)MDA
  - ios 12.2(33)ZI
  - ios 12.2(4)B7a
  - ios 12.2(8)MC2
  - ios 12.2(19b)
  - ios 12.4(22)T1
published: '2025-02-05'
updated: '2025-03-12'
sourceUpdated: '2025-03-12T15:22:33+00:00'
source: CSAF
sourceUrl: >-
  https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW
references:
  - url: >-
      https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW
  - url: 'https://software.cisco.com'
tags:
  - csaf
  - vendor-advisory
  - cisco
epss: 0.00783
epssPercentile: 0.55832
ingestedAt: '2026-10-16T11:53:41.636Z'
---

## Overview

Multiple vulnerabilities in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

For more information about these vulnerabilities, see the Details ["#details"] section of this advisory.

Cisco plans to release software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. There are mitigations that address these vulnerabilities.

## Vendor advisories

- **cisco-sa-snmp-dos-sdxnSUcW** · Cisco · affected: IOS (3113 versions), Cisco IOS XE Software (497 versions) · updated 2025-03-12 · [advisory](https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW)

**Cisco IOS, IOS XE, and IOS XR Software SNMP Denial of Service Vulnerabilities**. Released 2025-02-05, updated 2025-03-12.

Affected:

- IOS 15.1(2)T
- IOS 12.2(46)EY
- IOS 12.2(25)SW9
- IOS 12.2(31)XN2
- IOS 12.2(31)SB1a
- IOS 12.2(50)SG3
- IOS 12.3(14)YQ5
- IOS 12.2(25)EWA5
- IOS 12.2(18)SXD7b
- IOS 12.3(4)XD4
- IOS 12.3(11)YF2
- IOS 12.2(2)XT2
- IOS 12.2(2)XH1
- IOS 12.2(28)SB10
- IOS 12.4(21a)M1
- IOS 12.4(4)T8
- IOS 12.2(15)CZ1
- IOS 12.2(20)S10
- IOS 12.2(15)MC1c
- IOS 12.4(20)T1
- IOS 12.2(33)IRC
- IOS 12.2(4)MB7
- IOS 12.3(8)YG7
- IOS 12.4(22)XR5
- IOS 12.2(55)EY
- IOS 12.4(15)XY4
- IOS 12.2(25)EWA1
- IOS 12.2(31)SB10c
- IOS 12.2(31)SB9b
- IOS 12.3(8)T9
- IOS 12.3(8)XY3
- IOS 12.2(4)XV1
- IOS 12.2(15)MC2g
- IOS 12.2(33)SCB9
- IOS 12.4(24)MDA
- IOS 12.2(33)ZI
- IOS 12.2(4)B7a
- IOS 12.2(8)MC2
- IOS 12.2(19b)
- IOS 12.4(22)T1

## Remediation

Cisco has released software updates that address this vulnerability. https://software.cisco.com