PT-2025-22381 · Cisco · Cisco Secure Network Analytics Manager+1

Published 2025-05-21 · Updated 2025-07-23 · CVE-2025-20257

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager (affected versions not specified)

Description A vulnerability in the API subsystem could allow an authenticated, remote attacker with low privileges to generate fraudulent findings used to generate alarms and alerts on an affected product. This issue is due to insufficient authorization enforcement on a specific API. An attacker could exploit this by authenticating as a low-privileged user and performing API calls with crafted input, potentially allowing them to obfuscate legitimate findings in analytics reports or create false indications with alarms and alerts on an affected device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2025-06736

CVE-2025-20257

Affected Products

Cisco Secure Network Analytics Manager

Cisco Secure Network Analytics Virtual Manager

References · 6

• https://osv.dev/vulnerability/CVE-2025-20257 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20257 · Security Note
• https://bdu.fstec.ru/vul/2025-06736 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sna-apiacv-4B6X5ysw · Vendor Advisory
• https://twitter.com/CVEnew/status/1925232470443581471 · Twitter Post
• https://t.me/cveNotify/130023 · Telegram Post