PT-2025-20246 · Cisco · Cisco Catalyst Sd-Wan Manager

Andrew Kim · Published 2025-05-07 · Updated 2025-05-07 · CVE-2025-20122

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Catalyst SD-WAN Manager (affected versions not specified)

Description A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager could allow an authenticated, local attacker to gain privileges of the root user on the underlying operating system. This issue is due to insufficient input validation, allowing an attacker with read-only privileges to exploit the vulnerability by sending a crafted request to the CLI. A successful exploit could allow the attacker to gain root privileges on the underlying operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-300

Related Identifiers

BDU:2025-10323

CVE-2025-20122

Affected Products

Cisco Catalyst Sd-Wan Manager

References · 5

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-priviesc-WCk7bmmt · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10323 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-20122 · Security Note
• https://osv.dev/vulnerability/CVE-2025-20122 · Vendor Advisory
• https://twitter.com/CVEnew/status/1920246425264300532 · Twitter Post