Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Oct 20, 2025

High
CISA KEV

CVE-2025-20352

CiscoIOS and IOS XE

Cisco IOS and IOS XE contains a stack-based buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) subsystem that could allow for denial of service or remote code execution. A successful exploit could allow a low-privileged attacker to cause the affected system to reload, resulting in a DoS condition, or allow a high-privileged attacker to execute arbitrary code as the root user and obtain full control of the affected system.

Required Action

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte ; https://nvd.nist.gov/vuln/detail/CVE-2025-20352

Vulnerability Overview

Severity
High
CISA KEV
Yes
Ransomware
Unknown
Published
Sep 29, 2025
KEV Added
Sep 29, 2025
Due Date
Oct 20, 2025
Related Articles
0

Vendor

Cisco

IOS and IOS XE