CVE-2025-20122CWE-300

Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability

High · published May 7, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on the underlying operating system.

This vulnerability is due to insufficient input validation. An authenticated attacker with read-only privileges on the SD-WAN Manager system could exploit this vulnerability by sending a crafted request to the CLI of the SD-WAN Manager. A successful exploit could allow the attacker to gain root privileges on the underlying operating system.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.2th percentile
Weakness
CWE-300 · Channel Accessible by Non-Endpoint
Published
2025-05-07T17:18Z
EPSS history
Timeline
  • 07 MAY 17:18Z
    Cisco Catalyst SD-WAN Manager Privilege Escalation Vulnerability
    cvelistv5