csirt@kutim:~/threat-intel/cve/CVE-2025-20169

Katalog CVE

CVSS 7.7 · High EPSS 0,78%

Kerentanan Buffer Access with Incorrect Length Value pada cisco ios. Skor CVSS 3.1 7.7 (High) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.  This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMP v2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMP v3, the attacker must have valid SNMP user credentials for the affected system.

Rincian

Terbit di NVD
5 Februari 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.7 (High), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-805: Buffer Access with Incorrect Length Value
EPSS (30 hari)
0,78% peluang dieksploitasi; lebih tinggi dari 54,8% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ios Versi 12.2(1)
cisco ios Versi 12.2(1)dx
cisco ios Versi 12.2(1)dx1
cisco ios Versi 12.2(1)m0
cisco ios Versi 12.2(1)mb1
cisco ios Versi 12.2(1)xd
cisco ios Versi 12.2(1)xd1
cisco ios Versi 12.2(1)xd2
cisco ios Versi 12.2(1)xd3
cisco ios Versi 12.2(1)xd4
cisco ios Versi 12.2(1)xe
cisco ios Versi 12.2(1)xe1
cisco ios Versi 12.2(1)xe2
cisco ios Versi 12.2(1)xf
cisco ios Versi 12.2(1)xf1
cisco ios Versi 12.2(1)xs
cisco ios Versi 12.2(1)xs1a
cisco ios Versi 12.2(1)xs2
cisco ios Versi 12.2(1a)
cisco ios Versi 12.2(1a)xc
cisco ios Versi 12.2(1a)xc1
cisco ios Versi 12.2(1a)xc2
cisco ios Versi 12.2(1a)xc3
cisco ios Versi 12.2(1b)
cisco ios Versi 12.2(1b)da
cisco ios Versi 12.2(1b)da1
cisco ios Versi 12.2(1c)
cisco ios Versi 12.2(1d)
cisco ios Versi 12.2(2)b
cisco ios Versi 12.2(2)b1
cisco ios Versi 12.2(2)b2
cisco ios Versi 12.2(2)b3
cisco ios Versi 12.2(2)b4
cisco ios Versi 12.2(2)b5
cisco ios Versi 12.2(2)b6
cisco ios Versi 12.2(2)b7
cisco ios Versi 12.2(2)bx
cisco ios Versi 12.2(2)bx1
cisco ios Versi 12.2(2)by
cisco ios Versi 12.2(2)by1
cisco ios Versi 12.2(2)by2
cisco ios Versi 12.2(2)by3
cisco ios Versi 12.2(2)dd
cisco ios Versi 12.2(2)dd1
cisco ios Versi 12.2(2)dd2
cisco ios Versi 12.2(2)dd3
cisco ios Versi 12.2(2)dd4
cisco ios Versi 12.2(2)dx3
cisco ios Versi 12.2(2)xa
cisco ios Versi 12.2(2)xa1
cisco ios Versi 12.2(2)xa2
cisco ios Versi 12.2(2)xa3
cisco ios Versi 12.2(2)xa4
cisco ios Versi 12.2(2)xa5
cisco ios Versi 12.2(2)xb1
cisco ios Versi 12.2(2)xb2
cisco ios Versi 12.2(2)xb3
cisco ios Versi 12.2(2)xb5
cisco ios Versi 12.2(2)xb6
cisco ios Versi 12.2(2)xb7

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 3396 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.