Medium severity · published Feb 5, 2025
CVE-2025-20207
Cisco Secure Email Gateway, Cisco Secure Email and Web Appliance and Cisco Secure Web Appliance SNMP Polling Information Disclosure Vulnerability
4.3
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability in Simple Network Management Protocol (SNMP) polling for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authenticated, remote attacker to obtain confidential information about the underlying operating system.
This vulnerability exists because the appliances do not protect confidential information at rest in response to SNMP poll requests. An attacker could exploit this vulnerability by sending a crafted SNMP poll request to the affected appliance. A successful exploit could allow the attacker to discover confidential information that should be restricted. To exploit this vulnerability, an attacker must have the configured SNMP credentials.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 28% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cisco Secure Email · Cisco
14.0.0-698; 13.5.1-277; 13.0.0-392; 14.2.0-620; 13.0.5-007; 13.5.4-038; +6 more · source: vendor
CS
Cisco Secure Email and Web Manager · Cisco
13.6.2-023; 13.6.2-078; 13.0.0-249; 13.0.0-277; 13.8.1-052; 13.8.1-068; +14 more · source: vendor
CS
Cisco Secure Web Appliance · Cisco
11.8.0-453; 12.5.3-002; 12.0.3-007; 12.0.3-005; 14.1.0-032; 14.1.0-047; +34 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-20207
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-20207
sec.cloudapps.cisco.com
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-snmp-inf-FqPvL8sX
More from Cisco Secure Email
10.0
CVE-2025-20393
Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability
9.8
CVE-2026-76519
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
9.8
CVE-2026-76461
Cisco Secure Email Gateway SQL Injection Vulnerability
9.8
CVE-2026-76443
Cisco Secure Email Gateway Security Hardening Release
9.8
CVE-2026-76440
Cisco Secure Email Gateway Security Hardening Release
