PT-2025-20250 · Cisco · Cisco Ios Xe+1

Published 2025-05-07 · Updated 2025-08-05 · CVE-2025-20151

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software (affected versions not specified)

Description A vulnerability in the implementation of the Simple Network Management Protocol Version 3 (SNMPv3) feature could allow an authenticated, remote attacker to poll an affected device using SNMP, even if the device is configured to deny SNMP traffic from an unauthorized source or the SNMPv3 username is removed from the configuration. This issue exists due to the way that the SNMPv3 configuration is stored in the startup configuration. An attacker could exploit this vulnerability by polling an affected device from a source address that should have been denied, allowing them to perform SNMP operations from a source that should be denied. The attacker must have valid SNMPv3 user credentials to exploit this vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-16

CWE-1284

Related Identifiers

BDU:2025-10318

CVE-2025-20151

Affected Products

Cisco Ios

Cisco Ios Xe

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-20151 · Security Note
• https://osv.dev/vulnerability/CVE-2025-20151 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmpv3-qKEYvzsy · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10318 · Security Note
• https://t.me/cveNotify/130919 · Telegram Post
• https://twitter.com/CVEnew/status/1920246422554722696 · Twitter Post