CVE-2025-20151: Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability
First published: Wed May 07 2025(Updated: )
A vulnerability in the implementation of the Simple Network Management Protocol Version 3 (SNMPv3) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to poll an affected device using SNMP, even if the device is configured to deny SNMP traffic from an unauthorized source or the SNMPv3 username is removed from the configuration. This vulnerability exists because of the way that the SNMPv3 configuration is stored in the Cisco IOS Software and Cisco IOS XE Software startup configuration. An attacker could exploit this vulnerability by polling an affected device from a source address that should have been denied. A successful exploit could allow the attacker to perform SNMP operations from a source that should be denied. Note: The attacker has no control of the SNMPv3 configuration. To exploit this vulnerability, the attacker must have valid SNMPv3 user credentials. For more information, see the section of this advisory.
Credit: psirt@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS | ||
| Cisco IOS XE |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-20151?
CVE-2025-20151 is classified as a high severity vulnerability due to its potential to allow remote attackers unauthorized access to device information.
How do I fix CVE-2025-20151?
To remediate CVE-2025-20151, update your affected Cisco IOS or Cisco IOS XE software to the latest version provided by Cisco.
Who is affected by CVE-2025-20151?
CVE-2025-20151 affects devices running Cisco IOS Software and Cisco IOS XE Software that have SNMPv3 enabled.
What can an attacker do with CVE-2025-20151?
An attacker can exploit CVE-2025-20151 to poll an affected device using SNMP, potentially gaining access to sensitive information.
Is authentication required to exploit CVE-2025-20151?
Yes, the attacker must be authenticated to exploit CVE-2025-20151; however, this vulnerability could still lead to significant unauthorized information retrieval.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/severity
- agent/author
- agent/source
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco ios
- canonical/cisco ios xe