CVE-2025-20117
CVSS 3.1 Score 5.1 of 10 (medium)
Details
Published Feb 26, 2025
CWE ID 77
Summary
CVE-2025-20117 is a vulnerability affecting the CLI of Cisco APIC. An authenticated, local attacker with valid administrative credentials can take advantage of insufficient validation of arguments in certain CLI commands, allowing them to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability poses a serious risk, as successful exploitation could lead to significant system compromise.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Cisco Application Policy Infrastructure Controller
Affected Vendors
- Cisco