CISCO-CVE-2025-20151

MEDIUM4.3

Cisco IOS and IOS XE Software SNMPv3 Configuration Restriction Vulnerability

Published May 7, 2025

Modified 10 months ago

Affected Packages

Cisco IOS

CiscoIOS

Affected versions:

12.2(1)12.2(1)DX12.2(1)DX112.2(1)M012.2(1)MB112.2(1)XD12.2(1)XD112.2(1)XD212.2(1)XD312.2(1)XD4+3481 more

Cisco IOS XE

CiscoIOSXE

Affected versions:

16.1.116.1.216.1.316.10.116.10.1a16.10.1b16.10.1c16.10.1d16.10.1e16.10.1f+520 more

CVSS Analysis

CVSS v3.1

4.3

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

LowI:L

Availability

NoneA:N

4.3/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Upstream

Ecosystems

Timeline

PublishedMay 7, 2025

ModifiedMay 7, 2025