Description
A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device.
This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this vulnerability by sending a crafted SNMP request to an affected device. A successful exploit could allow the attacker to cause the device to reload unexpectedly, resulting in a DoS condition.
This vulnerability affects SNMP versions 1, 2c, and 3. To exploit this vulnerability through SNMP v2c or earlier, the attacker must know a valid read-write or read-only SNMP community string for the affected system. To exploit this vulnerability through SNMP v3, the attacker must have valid SNMP user credentials for the affected system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cisco | IOS | 15.0(2)EY, 15.0(2)EY1, 15.0(2)EY2, 15.0(2)EY3, 15.0(2)SE, 15.0(2)SE1, 15.0(2)SE2, 15.0(2)SE3, 15.0(2)SE4, 15.0(2)SE5, 15.0(2)SE6, 15.0(2)SE7, 15.0(2)SE8, 15.0(2)SE9, 15.0(2)SE10, 15.0(2)SE11, 15.0(2)SE10a, 15.0(2)SE12, 15.0(2)SE13, 15.0(1)SY, 15.0(1)SY1, 15.0(1)SY2, 15.0(1)SY3, 15.0(1)SY4, 15.0(1)S… | — |
| Cisco | Cisco IOS XE Software | 3.3.0SE, 3.3.1SE, 3.3.2SE, 3.3.3SE, 3.3.4SE, 3.3.5SE, 3.5.0E, 3.5.1E, 3.5.2E, 3.5.3E, 3.11.1S, 3.11.2S, 3.11.0S, 3.11.3S, 3.11.4S, 3.12.0S, 3.12.1S, 3.12.2S, 3.12.3S, 3.12.0aS, 3.12.4S, 3.13.0S, 3.13.1S, 3.13.2S, 3.13.3S, 3.13.4S, 3.13.5S, 3.13.2aS, 3.13.0aS, 3.13.5aS, 3.13.6S, 3.13.7S, 3.13.6aS, 3… | — |
Advisories 2
- NCSC-2025-0043 Kwetsbaarheden verholpen in Cisco IOS, IOS XE en IOS XR Software NCSC-NL (Netherlands) · Feb 11, 2025
- WID-SEC-2025-0286 Cisco IOS, IOS XE and IOS XR: Mehrere Schwachstellen ermöglichen Denial of Service BSI CERT-Bund (WID) · Feb 5, 2025