CVE-2025-20198Medium· 4.6▾ SunlitA vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 25.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device.
This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions.
Note: The attacker must have privileges to enter configuration mode on the affected device. This is usually referred to as privilege level 15.
ios_xe_software 3.13.0Sios_xe_software 3.13.1Sios_xe_software 3.13.2Sios_xe_software 3.13.3Sios_xe_software 3.13.4Sios_xe_software 3.13.5Sios_xe_software 3.13.2aSios_xe_software 3.13.0aSios_xe_software 3.13.5aSios_xe_software 3.13.6Sios_xe_software 3.13.7Sios_xe_software 3.13.6aSios_xe_software 3.13.7aSios_xe_software 3.13.8Sios_xe_software 3.13.9Sios_xe_software 3.13.10Sios_xe_software 3.14.0Sios_xe_software 3.14.1Sios_xe_software 3.14.2Sios_xe_software 3.14.3Sios_xe_software 3.14.4Sios_xe_software 3.15.0Sios_xe_software 3.15.1Sios_xe_software 3.15.2Sios_xe_software 3.15.1cSios_xe_software 3.15.3Sios_xe_software 3.15.4Sios_xe_software 3.7.0Eios_xe_software 3.7.1Eios_xe_software 3.7.2Eios_xe_software 3.7.3Eios_xe_software 3.7.4Eios_xe_software 3.7.5Eios_xe_software 3.16.0Sios_xe_software 3.16.1Sios_xe_software 3.16.1aSios_xe_software 3.16.2Sios_xe_software 3.16.2aSios_xe_software 3.16.0cSios_xe_software 3.16.3Sios_xe_software 3.16.2bSios_xe_software 3.16.3aSios_xe_software 3.16.4Sios_xe_software 3.16.4aSios_xe_software 3.16.4bSios_xe_software 3.16.5Sios_xe_software 3.16.4dSios_xe_software 3.16.6Sios_xe_software 3.16.7Sios_xe_software 3.16.6bSRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-20112Medium· 4.8A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user o…
CVE-2026-20308Medium· 4.3A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, remote attacker with low privileges to perform a denial of service (DoS) attack against an affected device. This vulnerabilit…
CVE-2021-1451High· 8.1Cisco IOS XE Software Easy Virtual Switching System Arbitrary Code Execution
CVE-2019-1750High· 7.4Cisco IOS XE Software Catalyst 4500 Cisco Discovery Protocol Denial of Service Vulnerability (CVE-2019-1750)
CVE-2025-20162High· 8.6Cisco IOS XE DHCP Snooping Denial of Service Vulnerability
CVE-2024-20434Medium· 4.3Cisco Catalyst 9000 Series Switches Denial of Service Vulnerability (CVE-2024-20434)