CVE-2025-20352 is a critical stack overflow vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software. This flaw allows authenticated attackers to cause a denial of service (DoS) with low privileges or achieve arbitrary code execution as root with higher privileges, impacting network devices. The vulnerability has a CVSS score of 7.7 (HIGH) due to its network attack vector and potential for complete system compromise. Notably, this CVE is actively exploited in the wild, as confirmed by its presence in the KEV catalog and significant community discussion, with reports of rootkit deployment via this flaw.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
16.9.1CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe_sd-wan:16.9.1:*:*:*:*:*:*:* | ||
16.9.2CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe_sd-wan:16.9.2:*:*:*:*:*:*:* | ||
16.9.3CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe_sd-wan:16.9.3:*:*:*:*:*:*:* | ||
16.9.4CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe_sd-wan:16.9.4:*:*:*:*:*:*:* | ||
16.10.1CPE matchmatch criteria | cpe:2.3:o:cisco:ios_xe_sd-wan:16.10.1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.