CVE-2025-20119

Summary

CVE-2025-20119 is a vulnerability affecting the file permission handling in Cisco APIC. This issue allows authenticated, local attackers to overwrite critical system files, resulting in a denial-of-service (DoS) condition. The vulnerability arises due to a race condition during file system operations. An adversary can exploit this flaw by carefully manipulating the file system, enabling them to overwrite essential files, leading to an inconsistent state and ultimately, a DoS condition. To exploit this vulnerability, the attacker must have valid administrative credentials.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.