CVE-2025-20312

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper error handling when parsing a specific SNMP request. An attacker could exploit this vulnerability by sending a specific SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMPv2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMPv3, the attacker must have valid SNMP user credentials for the affected system.

• CWE-835

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmpwred-x3MJyf5MVendor Advisory

Published

Sep 24, 2025

Last Modified

Sep 26, 2026

Status

Undergoing Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20307A vulnerability in the web-based management interface of Cis…4.8
• CVE-2025-20308A vulnerability in Cisco Spaces Connector could allow an aut…6.7
• CVE-2025-20309A vulnerability in Cisco Unified Communications Manager (Uni…10
• CVE-2025-2031A vulnerability classified as critical has been found in Che…7.6
• CVE-2025-20310A vulnerability in the web UI of Cisco Enterprise Chat and E…6.1
• CVE-2025-20311A vulnerability in the handling of certain Ethernet frames i…7.4
• CVE-2025-20313Multiple vulnerabilities in Cisco IOS XE Software of could a…6.7
• CVE-2025-20314A vulnerability in Cisco IOS XE Software could allow an auth…6.7
• CVE-2025-20315A vulnerability in the Network-Based Application Recognition…8.6
• CVE-2025-20316A vulnerability in the access control list (ACL) programming…5.3
• CVE-2025-20317A vulnerability in the Virtual Keyboard Video Monitor (vKVM)…7.1
• CVE-2025-20319In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7, and…6.8