CVE-2025-20174
HIGHDescription
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition. This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMP v2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMP v3, the attacker must have valid SNMP user credentials for the affected system.
Is your site exposed to CVE-2025-20174?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
7.7
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Weakness Type (CWE)
CWE-805
CWE-805
Affected Products
| Vendor | Product |
|---|---|
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
| cisco | ios_xe |
References
Frequently Asked Questions
What is CVE-2025-20174? +
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.
This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.
This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMP v2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMP v3, the attacker must have valid SNMP user credentials for the affected system. It has a CVSS v3.1 base score of 7.7 (HIGH).
How severe is CVE-2025-20174? +
CVE-2025-20174 has a CVSS v3.1 score of 7.7 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2025-20174? +
CVE-2025-20174 affects products from cisco, specifically: ios, ios_xe. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2025-20174? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.
Related Vulnerabilities
CVE-2026-12087
9.1
Socket versions before 2.041 for Perl have an out-of-bounds heap read. In Socket.xs, pack_ip_mreq_source() checks the length of its source …
CVE-2025-20315
8.6
A vulnerability in the Network-Based Application Recognition (NBAR) feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker …
CVE-2024-37305
8.2
oqs-provider is a provider for the OpenSSL 3 cryptography library that adds support for post-quantum cryptography in TLS, X.509, and …
CVE-2025-23318
8.1
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause …
CVE-2025-23319
8.1
NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause …
CVE-2025-38743
7.8
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low …