CVE-2025-20187: fallo de gravedad media en Cisco Catalyst SD-WAN Manager
Cisco SD-WAN Manager Software Arbitrary File Creation Vulnerability
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.5epss 1.3%
A vulnerability in the application data endpoints of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to write arbitrary files to an affected system.
This vulnerability is due to improper validation of requests to APIs. An attacker could exploit this vulnerability by sending malicious requests to an API within the affected system. A successful exploit could allow the attacker to conduct directory traversal attacks and write files to an arbitrary location on the affected system.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Productos afectados
Cisco · Cisco Catalyst SD-WAN ManagerCVEs relacionadas — Cisco Catalyst SD-WAN Manager
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-20182CRITICALCisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityEPSS 91.8%KEVCVE-2026-20127CRITICALCisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityEPSS 87.6%KEVCVE-2026-76504CRITICALCisco Catalyst SD-WAN Manager System Account Authorization Bypass VulnerabilityEPSS 38.9%KEVCVE-2026-20133MEDIUMCVE-2026-20133EPSS 35.3%KEVCVE-2026-20262MEDIUMCisco Catalyst SD-WAN Manager Arbitrary File Write VulnerabilityEPSS 29.1%KEVCVE-2026-20122MEDIUMCisco Catalyst SD-WAN Manager Arbitrary File Overwrite VulnerabilityEPSS 25.8%KEV