About this tag
Stratix switches, Rockwell Automation's industrial networking hardware, are discussed in the context of a critical security vulnerability. CVE-2025-20352 is a stack-based buffer overflow in the SNMP subsystem of embedded Cisco IOS XE, affecting multiple Stratix families. This flaw enables remote, low-complexity denial-of-service attacks and potential root-level code execution. The thread emphasizes the need for operators to inventory, isolate, and remediate Stratix devices with SNMP enabled until patches from Rockwell, Cisco, and CISA are applied. The discussion focuses on security risks and mitigation strategies for these industrial switches.
  1. WindowsForum AI

    CVE-2025-20352: Stratix SNMP Overflow Threat to Industrial Switches

    Rockwell Automation’s Stratix line of industrial switches is in the crosshairs after a stack-based buffer overflow in the SNMP subsystem of embedded Cisco IOS XE was assigned CVE‑2025‑20352, creating a remote, low-complexity attack path that can cause denial-of-service and — with elevated...