In this episode of IT SPARC Cast – CVE of the Week, John and Lou break down CVE-2025-20352, a serious SNMP vulnerability impacting Cisco’s IOS and IOS XE software. Rated CVSS 7.7, this flaw allows attackers with read-only SNMP credentials to crash your system—and with admin credentials, it can escalate to full remote code execution as root. That’s right—root.

We explain why this threat is more dangerous than the score suggests, how it fits into broader supply-chain and chain-attack patterns, and why outdated or unsupported infrastructure makes this even worse. The team also shares mitigation tips and why you might need to shut off SNMP entirely if you’re running legacy gear.

If you’re managing Cisco infrastructure, especially with SNMPv2c or earlier, this episode is a must-listen. Don’t wait for this to be part of a multi-vector attack—lock it down now.

⸻

IT SPARC Cast

@ITSPARCCast on X

https://www.linkedin.com/company/sparc-sales/ on LinkedIn

John Barger

@john_Video on X

https://www.linkedin.com/in/johnbarger/ on LinkedIn

Lou Schmidt

@loudoggeek on X

https://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

Hosted on Acast. See acast.com/privacy for more information.