Takeovers possible with critical Net-SNMP vulnerability

Popular Simple Network Management Protocol implementation Net-SNMP has been impacted by a critical vulnerability, tracked as CVE-2025-68615, which could be leveraged to facilitate critical service crashes and system hijacking, reports The Cyber Express.

Attackers could harness the flaw, which stems from the protocol's snmptrapd daemon, using a specially crafted packet to cause a buffer overflow and eventually a denial-of-service scenario, according to a GitHub advisory.

With all Net-SNMP versions impacted by the security weakness, users have been urged to promptly upgrade to Net-SNMP versions 5.9.5 and 5.10.pre2. However, security admins who cannot immediately apply the updates should ensure network segmentation to defend against potential compromise.

Aside from restricting public access for all SNMP ports, admins should also strengthen firewall rules to prevent external access to the snmptrapd port, said the advisory.