# Is GitHub going to get banned in Australia? - Threat Wire

Source: https://www.youtube.com/watch?v=NFF801fc5xY
Recap page: https://rapidrecap.app/video/NFF801fc5xY
Generated: 2025-10-02T14:32:41.697+00:00

---
## Quick Overview

Cisco disclosed a high-severity vulnerability (CVSS 7.7) affecting Cisco IOS and IOS XE Software's SNMP subsystem, which allows unauthenticated remote attackers to cause a Denial of Service (DoS) or achieve remote code execution (RCE) via a crafted SNMP packet, and no workarounds are available, requiring immediate updates for affected devices.

**Key Points:**
- Cisco announced a high-severity vulnerability (CVE-2023-20352) in the SNMP subsystem of Cisco IOS and IOS XE Software.
- The vulnerability has a CVSS score of 7.7 and is rated as "High" severity.
- An unauthenticated, remote attacker can cause a Denial of Service (DoS) or execute arbitrary code as the root user, achieving full system control.
- Exploitation requires the attacker to send a crafted SNMP packet to an affected device over IPv4 or IPv6 networks.
- The vulnerability is due to a stack overflow condition in the SNMP subsystem.
- Cisco has released software updates to address the issue, and importantly, no workarounds are currently available.
- The issue affects all versions of SNMP on the affected software.

![Screenshot at 00:27: The Cisco Security Advisory details the high-severity vulnerability \(CVSS Score 7.7\) affecting Cisco IOS and IOS XE Software SNMP, noting that no workarounds are available.](https://ss.rapidrecap.app/screens/NFF801fc5xY/00-00-27.png)

**Context:** The video segment discusses recent cybersecurity threats, specifically focusing on a new vulnerability disclosed by Cisco on September 25, 2025. This vulnerability affects the Simple Network Management Protocol (SNMP) subsystem within Cisco IOS and IOS XE Software, presenting risks ranging from service disruption to complete system takeover if exploited.

## Detailed Analysis

Cisco announced a critical vulnerability, CVE-2023-20352, affecting the SNMP subsystem in Cisco IOS and IOS XE Software, published on September 25, 2025, with a last update on September 30, 2025. Rated High severity with a CVSS score of 7.7, this flaw allows an unauthenticated, remote attacker to exploit a stack overflow condition by sending a crafted SNMP packet. Successful exploitation can lead to a Denial of Service (DoS) condition—where the affected device reloads—or, with higher privileges, allow an attacker to execute arbitrary code as the root user and gain full control of the system. The attack is possible using SNMPv2c or SNMPv3 credentials (community string or administrative/privilege credentials). Cisco has released software updates to patch this issue, but the advisory explicitly states that no workarounds are available, meaning users must update immediately. The vulnerability affects all versions of SNMP on the impacted software.

### Cisco IOS/IOS XE SNMP Vulnerability

- CVE-2023-20352 disclosed on 09/25/2025
- CVSS Score 7.7 (High)
- Affects SNMP subsystem
- No workarounds available

### Exploitation Vectors

- Unauthenticated remote attacker can cause DoS condition via SNMPv2c or SNMPv3 community string/credentials
- High-privileged attacker can achieve RCE as root user

### Vulnerability Cause

- Stack overflow condition in the SNMP subsystem of the affected software

### Mitigation

- Software updates released by Cisco address the security issue; immediate patching is required.

### Other News

- Australia is considering banning social media platforms for users under 16 starting December 10, 2025, requiring platforms to prove they are not harmful or argue for exemption
- US Secret Service discovered large-scale SIM card device farms in NYC used for telecommunications attacks and anonymous encrypted communication.

### Malicious MCP Servers

- A malicious NPM package, postmark-mcp, was discovered in the wild, installed 1,500 times weekly, which secretly emailed user data (passwords, invoices, memos) to the attacker's server.

![Screenshot at 00:00: Host Allie Diamond presenting the news segment "Threat Wire" against a multicolored backdrop.](https://ss.rapidrecap.app/screens/NFF801fc5xY/00-00-00.png)
![Screenshot at 00:06: Satellite map view of Washington D.C. overlaid with red crosshairs, indicating a geographical search or focus.](https://ss.rapidrecap.app/screens/NFF801fc5xY/00-00-06.png)
![Screenshot at 00:08: Glitch effect screen transitioning into the "Threat Wire" title graphic.](https://ss.rapidrecap.app/screens/NFF801fc5xY/00-00-08.png)
![Screenshot at 00:13: On-screen graphic highlighting the topic: "Cisco CVE With No Work Around".](https://ss.rapidrecap.app/screens/NFF801fc5xY/00-00-13.png)
![Screenshot at 00:27: Cisco Security Advisory detailing CVE-2023-20352, noting High severity and CVSS Score 7.7.](https://ss.rapidrecap.app/screens/NFF801fc5xY/00-00-27.png)
![Screenshot at 01:39: Second headline graphic introducing the Australian social media ban topic: "GitHub Could Get Banned In Australia".](https://ss.rapidrecap.app/screens/NFF801fc5xY/00-01-39.png)
![Screenshot at 01:51: Article snippet showing various social media logos \(Pinterest, Discord, Reddit, etc.\) around a large question mark, illustrating the debate over the under-16 ban.](https://ss.rapidrecap.app/screens/NFF801fc5xY/00-01-51.png)
![Screenshot at 02:48: Third headline graphic announcing the US Secret Service findings: "Threat Actors Found In New York City".](https://ss.rapidrecap.app/screens/NFF801fc5xY/00-02-48.png)
![Screenshot at 03:47: Fourth headline graphic covering the NPM supply chain attack: "Malicious MCP Servers Are Here".](https://ss.rapidrecap.app/screens/NFF801fc5xY/00-03-47.png)
![Screenshot at 03:54: Article screenshot from npm detailing the malicious 'postmark-mcp' package, showing weekly downloads of 1576.](https://ss.rapidrecap.app/screens/NFF801fc5xY/00-03-54.png)