Cisco patches 14 IOS/IOS XE flaws including an exploited zero-day

Cisco on Wednesday released patches for 14 vulnerabilities in its IOS and IOS XE networking software, including a high severity zero day that the company said has been exploited in the wild and can allow attackers to crash devices or execute code with root privileges. The flaw, tracked as CVE-2025-20352 and assigned a CVSS score of 7.7, affects devices with SNMP enabled across a wide range of Cisco routers, switches and controllers, the company said.

According to Cisco’s advisory, the defect is a stack overflow in the Simple Network Management Protocol subsystem that can be triggered by sending a crafted SNMP packet over IPv4 or IPv6. An authenticated remote attacker with low privileges and possession of an SNMPv2c or earlier read-only community string or valid SNMPv3 user credentials could cause a denial of service that reloads the device. If an attacker also has administrative or privilege 15 credentials, and the SNMPv1 or v2c read-only community string or valid SNMPv3 credentials, they could execute arbitrary code as the root user and obtain full control of the device, Cisco said.

Cisco’s Product Security Incident Response Team said it became aware of successful exploitation...