CVE-2025-20122

HIGH

Cisco Catalyst SD-WAN Manager - Privilege Escalation

Title source: llm
STIX 2.1

Description

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on the underlying operating system. This vulnerability is due to insufficient input validation. An authenticated attacker with read-only privileges on the SD-WAN Manager system could exploit this vulnerability by sending a crafted request to the CLI of the SD-WAN Manager. A successful exploit could allow the attacker to gain root privileges on the underlying operating system.

References (1)

Core 1

Scores

CVSS v3 7.8
EPSS 0.0006
EPSS Percentile 19.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-300
Status published
Products (50)
cisco/catalyst_sd-wan_manager 17.2.4
cisco/catalyst_sd-wan_manager 17.2.5
cisco/catalyst_sd-wan_manager 17.2.6
cisco/catalyst_sd-wan_manager 17.2.7
cisco/catalyst_sd-wan_manager 17.2.8
cisco/catalyst_sd-wan_manager 17.2.9
cisco/catalyst_sd-wan_manager 17.2.10
cisco/catalyst_sd-wan_manager 18.2.0
cisco/catalyst_sd-wan_manager 18.3.0
cisco/catalyst_sd-wan_manager 18.3.1
... and 40 more
Published May 07, 2025
Tracked Since Feb 18, 2026