¡¾·ì϶¹«¸æ¡¿Cisco IOS ºÍIOS XE SNMP Ô¶³Ì´úÂëÖ´Ðзì϶(CVE-2025-20352)

°ä²¼¹¦·ò 2025-09-26

Ò»¡¢·ì϶¸ÅÊö


·ìϼûû³Æ

Cisco IOS ºÍIOS XE SNMP Ô¶³Ì´úÂëÖ´Ðзì϶

CVE   ID

CVE-2025-20352

·ì϶ÀàÐÍ

»º³åÇøÒç³ö

·¢ÏÖ¹¦·ò

2025-09-26

·ì϶ÆÀ·Ö

7.7

·ì϶µÈ¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

µÍ

ÀûÓÃÄѶÈ

µÍ

Óû§½»»¥

²»±ØÒª

PoC/EXP

Òѹ«¿ª

ÔÚÒ°ÀûÓÃ

δ·¢ÏÖ


Cisco IOS£¨Internetwork Operating System£©ÊÇ˼¿Æ¹«Ë¾ÎªÆä·ÓÉÆ÷ºÍ»¥»»»úÉ豸¿ª·¢µÄ²Ù×÷ϵͳ £¬¿í·ºÀûÓÃÓÚÆóÒµºÍ·þÎñÌṩÉ̵ÄÍøÂçÉ豸ÖС£IOS XEÊÇIOSµÄÉý¼¶°æ±¾ £¬»ùÓÚLinuxÄÚºË £¬¾ß±¸¸ü¸ßµÄ¿ÉÀ©´óÐÔ¡¢½Ã½ÝÐԺ͸üÇ¿µÄÍøÂçÐé¹¹»¯ÄÜÁ¦¡£IOS XEÖ§³Ö¸ü¸´ÔÓµÄÀûÓúͷþÎñ £¬Ìṩ¸üÇ¿µÄ°²È«ÐԺͿÉÖÎÀíÐÔ £¬ºÏÓÃÓڸ߻úÄܵÄÍøÂçÉ豸 £¬ÈçCisco Catalyst 9000ϵÁл¥»»»ú¡£Á½Õß¶¼Ö§³Ö·á˶µÄÍøÂçºÍ̸¡¢ÖÎÀí¹¤¾ßºÍ°²È«Ö°ÄÜ £¬ÊÇÏÖ´úÍøÂçÉ豸µÄÖ÷Ìâ²Ù×÷ϵͳ¡£


2025Äê9ÔÂ26ÈÕ £¬±¦ÔËÀ³¹Ù·½ÍøÕ¾¼¯ÍÅVSRC¼à²âµ½Ò»¸öÓ°ÏìCisco IOSºÍIOS XEÈí¼þµÄSNMP£¨µ¥Ò»ÍøÂçÖÎÀíºÍ̸£©»º³åÇøÒç¶Âí½Å¡£¹¥»÷ÕßÄܹ»Í¨¹ý¾«ÐÄ»ú¹ØµÄSNMPÊý¾Ý°ü £¬ÀûÓø÷ì϶ÔÚÊÜÓ°ÏìÉ豸ÉÏÌáÒéÔ¶³Ì¹¥»÷ £¬µ¼Ö»ؾø·þÎñ£¨DoS£©»òÔ¶³Ì´úÂëÖ´ÐУ¨RCE£©¡£¶ÔÓÚµÍȨÏÞµÄÈÏÖ¤Ô¶³Ì¹¥»÷Õß £¬ÈôÕ¼ÓÐÓÐЧµÄSNMPv2cÖ»¶ÁÉçÇø×Ö·û´®»òSNMPv3Óû§Æ¾Ö¤ £¬¿ÉÄܵ¼ÖÂÉ豸³ÁÆô £¬´Ó¶ø´¥·¢DoS£»¶ÔÓÚ¸ßȨÏ޵Ĺ¥»÷Õß £¬ÈôÕ¼ÓÐSNMPv1/v2cÖ»¶ÁÉçÇø×Ö·û´®»òSNMPv3ƾ֤ £¬²¢ÇҾ߱¸ÖÎÀíÔ±»òÌØÈ¨15ƾ֤ £¬Ôò¿ÉÄÜÒÔrootÉí·ÝÖ´ÐÐËÁÒâ´úÂë £¬ÆëÈ«½ÚÔìÊÜÓ°ÏìÉ豸¡£·ì϶ÆÀ·Ö7.7 £¬·ì϶¼¶±ð¸ßΣ¡£


¶þ¡¢Ó°ÏìÁìÓò


¸Ã·ì϶ӰÏìËùÓÐÆôÓÃÁËSNMP²¢Î´ÏÔʽÅųýÊÜÓ°ÏìOIDµÄÉ豸 £¬Ô̺¬µ«²»ÏÞÓÚÔËÐÐCisco IOSºÍIOS XEÈí¼þµÄ·ÓÉÆ÷ºÍ»¥»»»ú £¬¾ßÌåÊÜÓ°ÏìµÄÉ豸»¹Ô̺¬ÔËÐÐMeraki CS 17¼°¸üÔç°æ±¾µÄMeraki MS390ϵÁл¥»»»úºÍCisco Catalyst 9300ϵÁл¥»»»ú¡£±ØÒª°ÑÎȵÄÊÇ £¬Cisco IOS XRºÍNX-OSÈí¼þ²»Êܸ÷ì϶ӰÏì¡£


Èý¡¢°²È«´ëÊ©


3.1 Éý¼¶°æ±¾


CiscoÒѰ䲼½¨¸´²¹¶¡ £¬½¨ÒéÓû§¾¡¿ìÉý¼¶ÖÁ½¨¸´°æ±¾ £¬ÒÔ³¹µ×½â¾ö¸Ã·ì϶¡£


ÏÂÔØÁ´½Ó£º

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte/


3.2 һʱ´ëÊ©


ÖÎÀíÔ±Ó¦Ö»ÔÊÐíÊÜÐÅÀµµÄÓû§½Ó¼ûSNMP £¬Ï÷¼õDZÔÚ¹¥»÷Ãæ¡£


3.3 ͨÓý¨Òé


? ¶¨ÆÚ¸üÐÂϵͳ²¹¶¡ £¬Ï÷¼õϵͳ·ì϶ £¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£
¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÔì £¬Åú¸Ä·À»ðǽսÊõ £¬¹Ø¹Ø·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ £¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Â¶³öµ½¹«Íø £¬Ï÷¼õ¹¥»÷Ãæ¡£
ʹÓÃÆóÒµ¼¶°²È«²úÆ· £¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£
¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí £¬ÆôÓöà³É·ÖÈÏÖ¤»úÔìºÍ×îÓ×ȨÏÞ×¼Ôò £¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏÞ¶È¡£
ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£


3.4 ²Î¿¼Á´½Ó


https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte/
https://nvd.nist.gov/vuln/detail/CVE-2025-20352