Multiple DoS vulnerabilities in Cisco IOS and IOS XE SNMP subsystem
| Risk | Medium |
| Patch available | NO |
| Number of vulnerabilities | 8 |
| CVE-ID | CVE-2025-20169 CVE-2025-20170 CVE-2025-20171 CVE-2025-20172 CVE-2025-20173 CVE-2025-20174 CVE-2025-20175 CVE-2025-20176 |
| CWE-ID | CWE-388 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software |
Cisco IOS Operating systems & Components / Operating system Cisco IOS XE Operating systems & Components / Operating system |
| Vendor | Cisco Systems, Inc |
Security Bulletin
This security bulletin contains information about 8 vulnerabilities.
1) Improper error handling
EUVDB-ID: #VU103675
Risk: Medium
CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2025-20169
CWE-ID:
CWE-388 - Error Handling
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper error handling in the SNMP subsystem. A remote authenticated user can send specially crafted SNMP versions 1, 2c, or 3 requests to the affected system and perform a denial of service (DoS) attack.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCisco IOS: 15.0(02)SE13a - 15.9.3.0p M2
Cisco IOS XE: 3.11 - 17.15.2
CPE2.3- cpe:2.3:o:cisco_systems:cisco_ios:15.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios:15.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios:15.2(8.0.28j)E:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios:15.3.3_JF14:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios:15.4.2_S:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios:15.5.3_S2.9:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios:15.6.3_M1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios:15.7.3_M8:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios:15.8.3.1s_M:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios:15.9.3.0p_M2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco_systems:cisco_ios_xe:3.11.11E:*:*:*:*:*:*:*
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Improper error handling
EUVDB-ID: #VU103676
Risk: Medium
CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2025-20170
CWE-ID:
CWE-388 - Error Handling
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper error handling in the SNMP subsystem. A remote authenticated user can send specially crafted SNMP versions 1, 2c, or 3 requests to the affected system and perform a denial of service (DoS) attack.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCisco IOS: 15.0(02)SE13a - 15.9.3.0p M2
Cisco IOS XE: 3.11 - 17.15.2
CPE2.3 External linkshttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Improper error handling
EUVDB-ID: #VU103677
Risk: Medium
CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2025-20171
CWE-ID:
CWE-388 - Error Handling
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper error handling in the SNMP subsystem. A remote authenticated user can send specially crafted SNMP versions 1, 2c, or 3 requests to the affected system and perform a denial of service (DoS) attack.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCisco IOS: 15.0(02)SE13a - 15.9.3.0p M2
Cisco IOS XE: 3.11 - 17.15.2
CPE2.3 External linkshttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Improper error handling
EUVDB-ID: #VU103678
Risk: Medium
CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2025-20172
CWE-ID:
CWE-388 - Error Handling
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper error handling in the SNMP subsystem. A remote authenticated user can send specially crafted SNMP versions 1, 2c, or 3 requests to the affected system and perform a denial of service (DoS) attack.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCisco IOS: 15.0(02)SE13a - 15.9.3.0p M2
Cisco IOS XE: 3.11 - 17.15.2
CPE2.3 External linkshttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Improper error handling
EUVDB-ID: #VU103679
Risk: Medium
CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2025-20173
CWE-ID:
CWE-388 - Error Handling
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper error handling in the SNMP subsystem. A remote authenticated user can send specially crafted SNMP versions 1, 2c, or 3 requests to the affected system and perform a denial of service (DoS) attack.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCisco IOS: 15.0(02)SE13a - 15.9.3.0p M2
Cisco IOS XE: 3.11 - 17.15.2
CPE2.3 External linkshttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Improper error handling
EUVDB-ID: #VU103680
Risk: Medium
CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2025-20174
CWE-ID:
CWE-388 - Error Handling
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper error handling in the SNMP subsystem. A remote authenticated user can send specially crafted SNMP versions 1, 2c, or 3 requests to the affected system and perform a denial of service (DoS) attack.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCisco IOS: 15.0(02)SE13a - 15.9.3.0p M2
Cisco IOS XE: 3.11 - 17.15.2
CPE2.3 External linkshttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
7) Improper error handling
EUVDB-ID: #VU103681
Risk: Medium
CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2025-20175
CWE-ID:
CWE-388 - Error Handling
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper error handling in the SNMP subsystem. A remote authenticated user can send specially crafted SNMP versions 1, 2c, or 3 requests to the affected system and perform a denial of service (DoS) attack.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCisco IOS: 15.0(02)SE13a - 15.9.3.0p M2
Cisco IOS XE: 3.11 - 17.15.2
CPE2.3 External linkshttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
8) Improper error handling
EUVDB-ID: #VU103682
Risk: Medium
CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2025-20176
CWE-ID:
CWE-388 - Error Handling
Exploit availability: No
DescriptionThe vulnerability allows a remote user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper error handling in the SNMP subsystem. A remote authenticated user can send specially crafted SNMP versions 1, 2c, or 3 requests to the affected system and perform a denial of service (DoS) attack.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
Vulnerable software versionsCisco IOS: 15.0(02)SE13a - 15.9.3.0p M2
Cisco IOS XE: 3.11 - 17.15.2
CPE2.3 External linkshttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-dos-sdxnSUcW
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
