csirt@kutim:~/threat-intel/cve/CVE-2025-20173

Katalog CVE

CVSS 7.7 · High EPSS 0,76%

Kerentanan Uncaught Exception pada cisco ios. Skor CVSS 3.1 7.7 (High) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.  This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMP v2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMP v3, the attacker must have valid SNMP user credentials for the affected system.

Rincian

Terbit di NVD
5 Februari 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.7 (High), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-248: Uncaught Exception
EPSS (30 hari)
0,76% peluang dieksploitasi; lebih tinggi dari 54,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco ios Versi 12.2(33)sre
cisco ios Versi 12.2(33)sre0a
cisco ios Versi 12.2(33)sre1
cisco ios Versi 12.2(33)sre2
cisco ios Versi 12.2(33)sre3
cisco ios Versi 12.2(33)sre4
cisco ios Versi 12.2(33)sre5
cisco ios Versi 12.2(33)sre6
cisco ios Versi 12.2(33)sre7
cisco ios Versi 12.2(33)sre7a
cisco ios Versi 12.2(33)sre8
cisco ios Versi 12.2(33)sre9
cisco ios Versi 12.2(33)sre9a
cisco ios Versi 12.2(33)sre10
cisco ios Versi 12.2(33)sre11
cisco ios Versi 12.2(33)sre12
cisco ios Versi 12.2(33)sre13
cisco ios Versi 12.2(33)sre14
cisco ios Versi 12.2(33)sre15
cisco ios Versi 12.2(33)sre15a
cisco ios Versi 12.2(46)sg
cisco ios Versi 12.2(46)sg1
cisco ios Versi 12.2(50)se
cisco ios Versi 12.2(50)se1
cisco ios Versi 12.2(50)se2
cisco ios Versi 12.2(50)se3
cisco ios Versi 12.2(50)se4
cisco ios Versi 12.2(50)se5
cisco ios Versi 12.2(50)sg
cisco ios Versi 12.2(50)sg1
cisco ios Versi 12.2(50)sg2
cisco ios Versi 12.2(50)sg3
cisco ios Versi 12.2(50)sg4
cisco ios Versi 12.2(50)sg5
cisco ios Versi 12.2(50)sg6
cisco ios Versi 12.2(50)sg7
cisco ios Versi 12.2(50)sg8
cisco ios Versi 12.2(50)sq
cisco ios Versi 12.2(50)sq1
cisco ios Versi 12.2(50)sq2
cisco ios Versi 12.2(50)sq3
cisco ios Versi 12.2(50)sq4
cisco ios Versi 12.2(50)sq5
cisco ios Versi 12.2(50)sq6
cisco ios Versi 12.2(50)sq7
cisco ios Versi 12.2(52)ex
cisco ios Versi 12.2(52)ex1
cisco ios Versi 12.2(52)ey
cisco ios Versi 12.2(52)ey1
cisco ios Versi 12.2(52)ey1b
cisco ios Versi 12.2(52)ey1c
cisco ios Versi 12.2(52)ey2
cisco ios Versi 12.2(52)ey2a
cisco ios Versi 12.2(52)ey3
cisco ios Versi 12.2(52)ey3a
cisco ios Versi 12.2(52)ey4
cisco ios Versi 12.2(52)se
cisco ios Versi 12.2(52)se1
cisco ios Versi 12.2(52)sg
cisco ios Versi 12.2(52)xo

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 1411 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.