PT-2025-16790 · Cisco · Cisco Secure Network Analytics

Published 2025-04-16 · Updated 2025-04-16 · CVE-2025-20178

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Secure Network Analytics (affected versions not specified)

Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating system. This issue is due to insufficient integrity checks within device backup files. An attacker could exploit this by crafting a malicious backup file and restoring it to an affected device, potentially obtaining shell access on the underlying operating system with the privileges of root.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

BDU:2025-05024

CVE-2025-20178

Affected Products

Cisco Secure Network Analytics

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-20178 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sna-prvesc-4BQmK33Z · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05024 · Security Note
• https://osv.dev/vulnerability/CVE-2025-20178 · Vendor Advisory
• https://t.me/cvedetector/23146 · Telegram Post
• https://twitter.com/CVEnew/status/1912564904202293750 · Twitter Post
• https://twitter.com/syedaquib77/status/1912611911142699061 · Twitter Post
• https://t.me/cvetracker/21778 · Telegram Post