PatchTheCVECVE-2025-20352: Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
CVE-2025-20352 is a high-severity flaw (CVSS 7.7) affecting ios xe sd-wan, ios xe, ios, reported as exploited in the wild. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earlier read-only community string or valid SNMPv3 use
Why this priority
- High severity
- EPSS top 1%: very likely to be exploited
- Exploited in the wild (CISA KEV)
- Public exploit reference
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.7 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 41.5% (top 1%) |
| CISA exploited list | Yes, fix due 2025-10-20 |
| Weakness | CWE-121 |
| Published | 2025-09-24 |
| Last modified | 2026-09-26 |
Last updated 2026-09-26 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Exploited Added to the CISA Known Exploited Vulnerabilities list
- Deadline CISA due date for US federal agencies to patch
- Updated Record last modified
Exact fixes by distribution
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- GitHub PoC: scadastrangelove/CVE-2025-20352 (7 stars)
- GitHub PoC: sentinel-aidefense/CVE-2025-20352 (0 stars)
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-20352?
ios xe sd-wan: mitigate or apply the listed mitigation; ios xe: mitigate or apply the listed mitigation; ios: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2025-20352 being exploited?
Yes. CVE-2025-20352 is on the CISA Known Exploited Vulnerabilities list, so treat it as patch-now.
What does CVE-2025-20352 affect?
CVE-2025-20352 affects ios xe sd-wan, ios xe, ios. Severity is high (CVSS 7.7). A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service
How urgent is CVE-2025-20352?
Priority 82/100. High severity; EPSS top 1%: very likely to be exploited; Exploited in the wild (CISA KEV); Public exploit reference
Software pages
iOS vulnerabilities · Cisco IOS XE vulnerabilities · Cisco vulnerabilities
Related CVEs
- CVE-2021-1432 HIGH 7.3 MITIGATE MITIGATE A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to exe
- CVE-2025-20151 MEDIUM 4.3 MITIGATE A vulnerability in the implementation of the Simple Network Management Protocol Version 3 (SNMPv3) feature of
- CVE-2024-20455 HIGH 8.6 MITIGATE MITIGATE A vulnerability in the process that classifies traffic that is going to the Unified Threat Defense (UTD) compo
- CVE-2024-20373 MEDIUM 5.3 MITIGATE A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) IPv4 access control lis
- CVE-2023-20035 HIGH 7.8 MITIGATE A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to exe