CVE-2025-20207: Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability
First published: Wed Feb 05 2025(Updated: )
A vulnerability in Simple Network Management Protocol (SNMP) polling for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authenticated, remote attacker to obtain confidential information about the underlying operating system. This vulnerability exists because the appliances do not protect confidential information at rest in response to SNMP poll requests. An attacker could exploit this vulnerability by sending a crafted SNMP poll request to the affected appliance. A successful exploit could allow the attacker to discover confidential information that should be restricted. To exploit this vulnerability, an attacker must have the configured SNMP credentials.
Credit: psirt@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure Email and Web Manager Firmware | ||
| Cisco AsyncOS for Secure Email Gateway | ||
| Cisco Secure Web Appliance |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-20207?
CVE-2025-20207 has been classified with a critical severity level due to its potential to allow unauthorized information disclosure.
How do I fix CVE-2025-20207?
To remediate CVE-2025-20207, update affected Cisco products to the latest firmware versions provided by Cisco.
What systems are affected by CVE-2025-20207?
CVE-2025-20207 affects Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance.
Can CVE-2025-20207 be exploited remotely?
Yes, CVE-2025-20207 can be exploited by an authenticated remote attacker.
What type of information can be compromised by CVE-2025-20207?
CVE-2025-20207 allows attackers to obtain confidential information about the underlying operating system.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/first-publish-date
- agent/references
- agent/description
- agent/type
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/author
- agent/source
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco secure email and web manager firmware
- canonical/cisco asyncos for secure email gateway
- canonical/cisco secure web appliance