Search/CVE-2025-20352
● CVE — High

CVE-2025-20352

VendorciscoProductios, ios xe, ios xe sd-wanDiscoveredSep 24, 2025UpdatedSep 26, 2026

A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software. To cause the DoS, the attacker must have the SNMPv2c or earlier read-only community string or valid SNMPv3 user credentials. An authenticated, remote attacker with high privileges could execute code as the root user on an affected device that is running Cisco IOS XE Software. To execute code as the root user, the attacker must have the SNMPv1 or v2c read-only community string or valid SNMPv3 user credentials and administrative or privilege 15 credentials on…

CVSS v3.1
7.7 HIGH
EPSS
41.5%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
8
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 2.75pp
38.8% → 41.5% over 3 tracked changes
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Connections
12 relationships
Timeline
disclosure → media coverage
Sep 24, 2025
Disclosure — published as a CVE record. · last revised by NVD Sep 26, 2026
Sep 25, 2025
redhotcyber.com reports: Rilevate vulnerabilità Zero-Day in Cisco IOS e IOS XE: Aggiornamenti Urgenti
Sep 25, 2025
thehackernews.com reports: Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software
Sep 25, 2025
acn.gov.it reports: Risolte vulnerabilità in prodotti Cisco
Sep 25, 2025
helpnetsecurity.com reports: Cisco fixes IOS/IOS XE zero-day exploited by attackers (CVE-2025-20352)
Sep 25, 2025
advisories.ncsc.nl reports: NCSC-2025-0297 [1.01] [M/H] Kwetsbaarheden verholpen in Cisco IOS en Cisco IOS XE Software
Oct 16, 2025
securityweek.com reports: Cisco Routers Hacked for Rootkit Deployment
Oct 16, 2025
bleepingcomputer.com reports: Hackers exploit Cisco SNMP flaw to deploy rootkit on switches
Oct 17, 2025
helpnetsecurity.com reports: Hackers used Cisco zero-day to plant rootkits on network switches (CVE-2025-20352)
Public PoC (2)
Unverified third-party code — review before executing.