PT-2025-46852 · Cisco · Cisco Catalyst Center Virtual Appliance

Published 2025-11-13 · Updated 2025-12-27 · CVE-2025-20341

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Catalyst Center Virtual Appliance (affected versions not specified)

Description A flaw exists in Cisco Catalyst Center Virtual Appliance that could allow a remote attacker with valid credentials for a user account with at least the role of Observer to elevate privileges to Administrator on an affected system. This is due to insufficient validation of user-supplied input. An attacker could exploit this by submitting a crafted HTTP request to the system. A successful exploit could allow the attacker to perform unauthorized modifications, including creating new user accounts or elevating their own privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2025-16487

CVE-2025-20341

Affected Products

Cisco Catalyst Center Virtual Appliance

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2025-20341 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-catc-priv-esc-VS8EeCuX · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-16487 · Security Note
• https://twitter.com/PurpleOps_io/status/1989604608772038831 · Twitter Post
• https://twitter.com/BugBountyShorts/status/1989025350668505471 · Twitter Post
• https://twitter.com/cracbot/status/1990736817721913724 · Twitter Post
• https://twitter.com/dailytechonx/status/1990469240197976248 · Twitter Post
• https://twitter.com/technijian_/status/1990401328326086930 · Twitter Post
• https://twitter.com/Komodosec/status/2003134071950676226 · Twitter Post
• https://twitter.com/autumn_good_35/status/1989374922280636591 · Twitter Post
• https://t.me/CVEtracker/37255 · Telegram Post
• https://t.me/pentestingnews/70964 · Telegram Post
• https://twitter.com/CCBalert/status/1989360643699306854 · Twitter Post
• https://twitter.com/CrowdCyber_Com/status/1989550306422649041 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1989616885428883590 · Twitter Post