csirt@kutim:~/threat-intel/cve/CVE-2025-20187

Katalog CVE

CVSS 6.5 · Medium EPSS 1,3%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada cisco catalyst sd-wan manager. Skor CVSS 3.1 6.5 (Medium) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the application data endpoints of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to write arbitrary files to an affected system. This vulnerability is due to improper validation of requests to APIs. An attacker could exploit this vulnerability by sending malicious requests to an API within the affected system. A successful exploit could allow the attacker to conduct directory traversal attacks and write files to an arbitrary location on the affected system.

Rincian

Terbit di NVD
7 Mei 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
6.5 (Medium), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
EPSS (30 hari)
1,3% peluang dieksploitasi; lebih tinggi dari 69,4% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco catalyst sd-wan manager Versi 17.2.4
cisco catalyst sd-wan manager Versi 17.2.5
cisco catalyst sd-wan manager Versi 17.2.6
cisco catalyst sd-wan manager Versi 17.2.7
cisco catalyst sd-wan manager Versi 17.2.8
cisco catalyst sd-wan manager Versi 17.2.9
cisco catalyst sd-wan manager Versi 17.2.10
cisco catalyst sd-wan manager Versi 18.2.0
cisco catalyst sd-wan manager Versi 18.3.0
cisco catalyst sd-wan manager Versi 18.3.1
cisco catalyst sd-wan manager Versi 18.3.1.1
cisco catalyst sd-wan manager Versi 18.3.3
cisco catalyst sd-wan manager Versi 18.3.3.1
cisco catalyst sd-wan manager Versi 18.3.4
cisco catalyst sd-wan manager Versi 18.3.5
cisco catalyst sd-wan manager Versi 18.3.6
cisco catalyst sd-wan manager Versi 18.3.6.1
cisco catalyst sd-wan manager Versi 18.3.7
cisco catalyst sd-wan manager Versi 18.3.8
cisco catalyst sd-wan manager Versi 18.4.0
cisco catalyst sd-wan manager Versi 18.4.0.1
cisco catalyst sd-wan manager Versi 18.4.1
cisco catalyst sd-wan manager Versi 18.4.3
cisco catalyst sd-wan manager Versi 18.4.4
cisco catalyst sd-wan manager Versi 18.4.5
cisco catalyst sd-wan manager Versi 18.4.6
cisco catalyst sd-wan manager Versi 18.4.302
cisco catalyst sd-wan manager Versi 18.4.303
cisco catalyst sd-wan manager Versi 18.4.501_es
cisco catalyst sd-wan manager Versi 19.0.0
cisco catalyst sd-wan manager Versi 19.0.1a
cisco catalyst sd-wan manager Versi 19.1.0
cisco catalyst sd-wan manager Versi 19.2.0
cisco catalyst sd-wan manager Versi 19.2.1
cisco catalyst sd-wan manager Versi 19.2.2
cisco catalyst sd-wan manager Versi 19.2.3
cisco catalyst sd-wan manager Versi 19.2.4
cisco catalyst sd-wan manager Versi 19.2.4.0.1
cisco catalyst sd-wan manager Versi 19.2.4.0.8
cisco catalyst sd-wan manager Versi 19.2.4.0.9
cisco catalyst sd-wan manager Versi 19.2.31
cisco catalyst sd-wan manager Versi 19.2.32
cisco catalyst sd-wan manager Versi 19.2.097
cisco catalyst sd-wan manager Versi 19.2.098
cisco catalyst sd-wan manager Versi 19.2.099
cisco catalyst sd-wan manager Versi 19.2.929
cisco catalyst sd-wan manager Versi 19.3.0
cisco catalyst sd-wan manager Versi 20.1.1
cisco catalyst sd-wan manager Versi 20.1.1.1
cisco catalyst sd-wan manager Versi 20.1.2
cisco catalyst sd-wan manager Versi 20.1.2_937
cisco catalyst sd-wan manager Versi 20.1.3
cisco catalyst sd-wan manager Versi 20.1.3.1
cisco catalyst sd-wan manager Versi 20.1.12
cisco catalyst sd-wan manager Versi 20.3.1
cisco catalyst sd-wan manager Versi 20.3.2
cisco catalyst sd-wan manager Versi 20.3.2.0.5
cisco catalyst sd-wan manager Versi 20.3.2.0.6
cisco catalyst sd-wan manager Versi 20.3.2.1
cisco catalyst sd-wan manager Versi 20.3.2.1_927

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 106 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.