CVE-2025-20213Medium· 5.5▾ SunlitA vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnera…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.2%
A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials with CLI access on the affected system.
This vulnerability is due to improper access controls on files that are on the local file system. An attacker could exploit this vulnerability by running a series of crafted commands on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device and gain privileges of the root user. To exploit this vulnerability, an attacker would need to have CLI access as a low-privilege user.
catalyst_sd-wan_manager 20.1.12catalyst_sd-wan_manager 19.2.1catalyst_sd-wan_manager 18.4.4catalyst_sd-wan_manager 18.4.5catalyst_sd-wan_manager 20.1.1.1catalyst_sd-wan_manager 20.1.1catalyst_sd-wan_manager 19.3.0catalyst_sd-wan_manager 19.2.2catalyst_sd-wan_manager 19.2.099catalyst_sd-wan_manager 18.3.6catalyst_sd-wan_manager 18.3.7catalyst_sd-wan_manager 19.2.0catalyst_sd-wan_manager 18.3.8catalyst_sd-wan_manager 19.0.0catalyst_sd-wan_manager 19.1.0catalyst_sd-wan_manager 18.4.302catalyst_sd-wan_manager 18.4.303catalyst_sd-wan_manager 19.2.097catalyst_sd-wan_manager 19.2.098catalyst_sd-wan_manager 17.2.10catalyst_sd-wan_manager 18.3.6.1catalyst_sd-wan_manager 19.0.1acatalyst_sd-wan_manager 18.2.0catalyst_sd-wan_manager 18.4.3catalyst_sd-wan_manager 18.4.1catalyst_sd-wan_manager 17.2.8catalyst_sd-wan_manager 18.3.3.1catalyst_sd-wan_manager 18.4.0catalyst_sd-wan_manager 18.3.1catalyst_sd-wan_manager 17.2.6catalyst_sd-wan_manager 17.2.9catalyst_sd-wan_manager 18.3.4catalyst_sd-wan_manager 17.2.5catalyst_sd-wan_manager 18.3.1.1catalyst_sd-wan_manager 18.3.5catalyst_sd-wan_manager 18.4.0.1catalyst_sd-wan_manager 18.3.3catalyst_sd-wan_manager 17.2.7catalyst_sd-wan_manager 17.2.4catalyst_sd-wan_manager 18.3.0catalyst_sd-wan_manager 19.2.3catalyst_sd-wan_manager 18.4.501_EScatalyst_sd-wan_manager 20.3.1catalyst_sd-wan_manager 20.1.2catalyst_sd-wan_manager 19.2.929catalyst_sd-wan_manager 19.2.31catalyst_sd-wan_manager 20.3.2catalyst_sd-wan_manager 19.2.32catalyst_sd-wan_manager 20.3.2_925catalyst_sd-wan_manager 20.3.2.1Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2020-3167High· 7.8A vulnerability in the CLI of Cisco FXOS Software and Cisco UCS Manager Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS)
CVE-2019-1709Medium· 6.0A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to perform a command injection attack
CVE-2026-76437Medium· 4.9A vulnerability in the web-based user interface of Cisco License On-Prem, formerly Cisco Smart Software Manager On-Prem (SSM On-Prem), could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operatin…
CVE-2021-1279Medium· 5.3Cisco SD-WAN Denial of Service Vulnerabilties
CVE-2023-20193Medium· 6.0A vulnerability in the Embedded Service Router (ESR) of Cisco ISE could allow an authenticated, local attacker to read, write, or delete arbitrary files on the underlying operating system and escalate their privileges to root
CVE-2019-1971Critical· 9.8A vulnerability in the web portal of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an unauthenticated, remote attacker to perform a command injection attack and execute arbitrary commands with root privileges