CVE-2025-20194 - Vulnerability Details

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read limited files from the underlying operating system or clear the syslog and licensing logs on the affected device.
Weaknesses		CWE-78
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6
Metrics		cvssV3_1 `{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-20194", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2024-10-10T19:15:13.227Z", "datePublished": "2025-05-07T17:48:13.644Z", "dateUpdated": "2025-05-08T03:56:37.461Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-05-07T17:48:13.644Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device.\r\n\r\n This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read limited files from the underlying operating system or clear the syslog and licensing logs on the affected device."}], "affected": [{"vendor": "Cisco", "product": "Cisco IOS XE Software", "versions": [{"version": "17.3.1", "status": "affected"}, {"version": "17.3.2", "status": "affected"}, {"version": "17.3.3", "status": "affected"}, {"version": "17.3.1a", "status": "affected"}, {"version": "17.3.1w", "status": "affected"}, {"version": "17.3.2a", "status": "affected"}, {"version": "17.3.1x", "status": "affected"}, {"version": "17.3.1z", "status": "affected"}, {"version": "17.3.4", "status": "affected"}, {"version": "17.3.5", "status": "affected"}, {"version": "17.3.4a", "status": "affected"}, {"version": "17.3.6", "status": "affected"}, {"version": "17.3.4b", "status": "affected"}, {"version": "17.3.4c", "status": "affected"}, {"version": "17.3.5a", "status": "affected"}, {"version": "17.3.5b", "status": "affected"}, {"version": "17.3.7", "status": "affected"}, {"version": "17.3.8", "status": "affected"}, {"version": "17.3.8a", "status": "affected"}, {"version": "17.4.1", "status": "affected"}, {"version": "17.4.2", "status": "affected"}, {"version": "17.4.1a", "status": "affected"}, {"version": "17.4.1b", "status": "affected"}, {"version": "17.4.2a", "status": "affected"}, {"version": "17.5.1", "status": "affected"}, {"version": "17.5.1a", "status": "affected"}, {"version": "17.6.1", "status": "affected"}, {"version": "17.6.2", "status": "affected"}, {"version": "17.6.1w", "status": "affected"}, {"version": "17.6.1a", "status": "affected"}, {"version": "17.6.1x", "status": "affected"}, {"version": "17.6.3", "status": "affected"}, {"version": "17.6.1y", "status": "affected"}, {"version": "17.6.1z", "status": "affected"}, {"version": "17.6.3a", "status": "affected"}, {"version": "17.6.4", "status": "affected"}, {"version": "17.6.1z1", "status": "affected"}, {"version": "17.6.5", "status": "affected"}, {"version": "17.6.6", "status": "affected"}, {"version": "17.6.6a", "status": "affected"}, {"version": "17.6.5a", "status": "affected"}, {"version": "17.6.7", "status": "affected"}, {"version": "17.6.8", "status": "affected"}, {"version": "17.6.8a", "status": "affected"}, {"version": "17.7.1", "status": "affected"}, {"version": "17.7.1a", "status": "affected"}, {"version": "17.7.1b", "status": "affected"}, {"version": "17.7.2", "status": "affected"}, {"version": "17.10.1", "status": "affected"}, {"version": "17.10.1a", "status": "affected"}, {"version": "17.10.1b", "status": "affected"}, {"version": "17.8.1", "status": "affected"}, {"version": "17.8.1a", "status": "affected"}, {"version": "17.9.1", "status": "affected"}, {"version": "17.9.1w", "status": "affected"}, {"version": "17.9.2", "status": "affected"}, {"version": "17.9.1a", "status": "affected"}, {"version": "17.9.1x", "status": "affected"}, {"version": "17.9.1y", "status": "affected"}, {"version": "17.9.3", "status": "affected"}, {"version": "17.9.2a", "status": "affected"}, {"version": "17.9.1x1", "status": "affected"}, {"version": "17.9.3a", "status": "affected"}, {"version": "17.9.4", "status": "affected"}, {"version": "17.9.1y1", "status": "affected"}, {"version": "17.9.5", "status": "affected"}, {"version": "17.9.4a", "status": "affected"}, {"version": "17.9.5a", "status": "affected"}, {"version": "17.9.5b", "status": "affected"}, {"version": "17.9.6", "status": "affected"}, {"version": "17.9.6a", "status": "affected"}, {"version": "17.9.5e", "status": "affected"}, {"version": "17.9.5f", "status": "affected"}, {"version": "17.11.1", "status": "affected"}, {"version": "17.11.1a", "status": "affected"}, {"version": "17.12.1", "status": "affected"}, {"version": "17.12.1w", "status": "affected"}, {"version": "17.12.1a", "status": "affected"}, {"version": "17.12.1x", "status": "affected"}, {"version": "17.12.2", "status": "affected"}, {"version": "17.12.3", "status": "affected"}, {"version": "17.12.2a", "status": "affected"}, {"version": "17.12.1y", "status": "affected"}, {"version": "17.12.1z", "status": "affected"}, {"version": "17.12.4", "status": "affected"}, {"version": "17.12.3a", "status": "affected"}, {"version": "17.12.1z1", "status": "affected"}, {"version": "17.12.4a", "status": "affected"}, {"version": "17.12.4b", "status": "affected"}, {"version": "17.13.1", "status": "affected"}, {"version": "17.13.1a", "status": "affected"}, {"version": "17.14.1", "status": "affected"}, {"version": "17.14.1a", "status": "affected"}, {"version": "17.11.99SW", "status": "affected"}, {"version": "17.15.1", "status": "affected"}, {"version": "17.15.1w", "status": "affected"}, {"version": "17.15.1a", "status": "affected"}, {"version": "17.15.1b", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "type": "cwe", "cweId": "CWE-78"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6", "name": "cisco-sa-webui-multi-ARNHM4v6"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "baseScore": 5.4, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "NONE"}}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "source": {"advisory": "cisco-sa-webui-multi-ARNHM4v6", "discovery": "INTERNAL", "defects": ["CSCwk25133"]}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-05-07T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2025-20194"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-08T03:56:37.461Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2025-20194 (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

state : PUBLISHED (string)

assignerShortName : cisco (string)

dateReserved : 2024-10-10T19:15:13.227Z (string)

datePublished : 2025-05-07T17:48:13.644Z (string)

dateUpdated : 2025-05-08T03:56:37.461Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2025-05-07T17:48:13.644Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read limited files from the underlying operating system or clear the syslog and licensing logs on the affected device. (string)

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco IOS XE Software (string)

versions : [ »

0 : { »

version : 17.3.1 (string)

status : affected (string)

}

1 : { »

version : 17.3.2 (string)

status : affected (string)

}

2 : { »

version : 17.3.3 (string)

status : affected (string)

}

3 : { »

version : 17.3.1a (string)

status : affected (string)

}

4 : { »

version : 17.3.1w (string)

status : affected (string)

}

5 : { »

version : 17.3.2a (string)

status : affected (string)

}

6 : { »

version : 17.3.1x (string)

status : affected (string)

}

7 : { »

version : 17.3.1z (string)

status : affected (string)

}

8 : { »

version : 17.3.4 (string)

status : affected (string)

}

9 : { »

version : 17.3.5 (string)

status : affected (string)

}

10 : { »

version : 17.3.4a (string)

status : affected (string)

}

11 : { »

version : 17.3.6 (string)

status : affected (string)

}

12 : { »

version : 17.3.4b (string)

status : affected (string)

}

13 : { »

version : 17.3.4c (string)

status : affected (string)

}

14 : { »

version : 17.3.5a (string)

status : affected (string)

}

15 : { »

version : 17.3.5b (string)

status : affected (string)

}

16 : { »

version : 17.3.7 (string)

status : affected (string)

}

17 : { »

version : 17.3.8 (string)

status : affected (string)

}

18 : { »

version : 17.3.8a (string)

status : affected (string)

}

19 : { »

version : 17.4.1 (string)

status : affected (string)

}

20 : { »

version : 17.4.2 (string)

status : affected (string)

}

21 : { »

version : 17.4.1a (string)

status : affected (string)

}

22 : { »

version : 17.4.1b (string)

status : affected (string)

}

23 : { »

version : 17.4.2a (string)

status : affected (string)

}

24 : { »

version : 17.5.1 (string)

status : affected (string)

}

25 : { »

version : 17.5.1a (string)

status : affected (string)

}

26 : { »

version : 17.6.1 (string)

status : affected (string)

}

27 : { »

version : 17.6.2 (string)

status : affected (string)

}

28 : { »

version : 17.6.1w (string)

status : affected (string)

}

29 : { »

version : 17.6.1a (string)

status : affected (string)

}

30 : { »

version : 17.6.1x (string)

status : affected (string)

}

31 : { »

version : 17.6.3 (string)

status : affected (string)

}

32 : { »

version : 17.6.1y (string)

status : affected (string)

}

33 : { »

version : 17.6.1z (string)

status : affected (string)

}

34 : { »

version : 17.6.3a (string)

status : affected (string)

}

35 : { »

version : 17.6.4 (string)

status : affected (string)

}

36 : { »

version : 17.6.1z1 (string)

status : affected (string)

}

37 : { »

version : 17.6.5 (string)

status : affected (string)

}

38 : { »

version : 17.6.6 (string)

status : affected (string)

}

39 : { »

version : 17.6.6a (string)

status : affected (string)

}

40 : { »

version : 17.6.5a (string)

status : affected (string)

}

41 : { »

version : 17.6.7 (string)

status : affected (string)

}

42 : { »

version : 17.6.8 (string)

status : affected (string)

}

43 : { »

version : 17.6.8a (string)

status : affected (string)

}

44 : { »

version : 17.7.1 (string)

status : affected (string)

}

45 : { »

version : 17.7.1a (string)

status : affected (string)

}

46 : { »

version : 17.7.1b (string)

status : affected (string)

}

47 : { »

version : 17.7.2 (string)

status : affected (string)

}

48 : { »

version : 17.10.1 (string)

status : affected (string)

}

49 : { »

version : 17.10.1a (string)

status : affected (string)

}

50 : { »

version : 17.10.1b (string)

status : affected (string)

}

51 : { »

version : 17.8.1 (string)

status : affected (string)

}

52 : { »

version : 17.8.1a (string)

status : affected (string)

}

53 : { »

version : 17.9.1 (string)

status : affected (string)

}

54 : { »

version : 17.9.1w (string)

status : affected (string)

}

55 : { »

version : 17.9.2 (string)

status : affected (string)

}

56 : { »

version : 17.9.1a (string)

status : affected (string)

}

57 : { »

version : 17.9.1x (string)

status : affected (string)

}

58 : { »

version : 17.9.1y (string)

status : affected (string)

}

59 : { »

version : 17.9.3 (string)

status : affected (string)

}

60 : { »

version : 17.9.2a (string)

status : affected (string)

}

61 : { »

version : 17.9.1x1 (string)

status : affected (string)

}

62 : { »

version : 17.9.3a (string)

status : affected (string)

}

63 : { »

version : 17.9.4 (string)

status : affected (string)

}

64 : { »

version : 17.9.1y1 (string)

status : affected (string)

}

65 : { »

version : 17.9.5 (string)

status : affected (string)

}

66 : { »

version : 17.9.4a (string)

status : affected (string)

}

67 : { »

version : 17.9.5a (string)

status : affected (string)

}

68 : { »

version : 17.9.5b (string)

status : affected (string)

}

69 : { »

version : 17.9.6 (string)

status : affected (string)

}

70 : { »

version : 17.9.6a (string)

status : affected (string)

}

71 : { »

version : 17.9.5e (string)

status : affected (string)

}

72 : { »

version : 17.9.5f (string)

status : affected (string)

}

73 : { »

version : 17.11.1 (string)

status : affected (string)

}

74 : { »

version : 17.11.1a (string)

status : affected (string)

}

75 : { »

version : 17.12.1 (string)

status : affected (string)

}

76 : { »

version : 17.12.1w (string)

status : affected (string)

}

77 : { »

version : 17.12.1a (string)

status : affected (string)

}

78 : { »

version : 17.12.1x (string)

status : affected (string)

}

79 : { »

version : 17.12.2 (string)

status : affected (string)

}

80 : { »

version : 17.12.3 (string)

status : affected (string)

}

81 : { »

version : 17.12.2a (string)

status : affected (string)

}

82 : { »

version : 17.12.1y (string)

status : affected (string)

}

83 : { »

version : 17.12.1z (string)

status : affected (string)

}

84 : { »

version : 17.12.4 (string)

status : affected (string)

}

85 : { »

version : 17.12.3a (string)

status : affected (string)

}

86 : { »

version : 17.12.1z1 (string)

status : affected (string)

}

87 : { »

version : 17.12.4a (string)

status : affected (string)

}

88 : { »

version : 17.12.4b (string)

status : affected (string)

}

89 : { »

version : 17.13.1 (string)

status : affected (string)

}

90 : { »

version : 17.13.1a (string)

status : affected (string)

}

91 : { »

version : 17.14.1 (string)

status : affected (string)

}

92 : { »

version : 17.14.1a (string)

status : affected (string)

}

93 : { »

version : 17.11.99SW (string)

status : affected (string)

}

94 : { »

version : 17.15.1 (string)

status : affected (string)

}

95 : { »

version : 17.15.1w (string)

status : affected (string)

}

96 : { »

version : 17.15.1a (string)

status : affected (string)

}

97 : { »

version : 17.15.1b (string)

status : affected (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (string)

type : cwe (string)

cweId : CWE-78 (string)

}

]

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6 (string)

name : cisco-sa-webui-multi-ARNHM4v6 (string)

}

]

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N (string)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

attackVector : NETWORK (string)

attackComplexity : LOW (string)

privilegesRequired : LOW (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

availabilityImpact : NONE (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory. (string)

}

]

source : { »

advisory : cisco-sa-webui-multi-ARNHM4v6 (string)

discovery : INTERNAL (string)

defects : [ »

0 : CSCwk25133 (string)

]

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-05-07T00:00:00+00:00 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

id : CVE-2025-20194 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-05-08T03:56:37.461Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-20194", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-07T18:55:38.277772Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-07T18:55:40.253Z"}}], "cna": {"source": {"defects": ["CSCwk25133"], "advisory": "cisco-sa-webui-multi-ARNHM4v6", "discovery": "INTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "Cisco", "product": "Cisco IOS XE Software", "versions": [{"status": "affected", "version": "17.3.1"}, {"status": "affected", "version": "17.3.2"}, {"status": "affected", "version": "17.3.3"}, {"status": "affected", "version": "17.3.1a"}, {"status": "affected", "version": "17.3.1w"}, {"status": "affected", "version": "17.3.2a"}, {"status": "affected", "version": "17.3.1x"}, {"status": "affected", "version": "17.3.1z"}, {"status": "affected", "version": "17.3.4"}, {"status": "affected", "version": "17.3.5"}, {"status": "affected", "version": "17.3.4a"}, {"status": "affected", "version": "17.3.6"}, {"status": "affected", "version": "17.3.4b"}, {"status": "affected", "version": "17.3.4c"}, {"status": "affected", "version": "17.3.5a"}, {"status": "affected", "version": "17.3.5b"}, {"status": "affected", "version": "17.3.7"}, {"status": "affected", "version": "17.3.8"}, {"status": "affected", "version": "17.3.8a"}, {"status": "affected", "version": "17.4.1"}, {"status": "affected", "version": "17.4.2"}, {"status": "affected", "version": "17.4.1a"}, {"status": "affected", "version": "17.4.1b"}, {"status": "affected", "version": "17.4.2a"}, {"status": "affected", "version": "17.5.1"}, {"status": "affected", "version": "17.5.1a"}, {"status": "affected", "version": "17.6.1"}, {"status": "affected", "version": "17.6.2"}, {"status": "affected", "version": "17.6.1w"}, {"status": "affected", "version": "17.6.1a"}, {"status": "affected", "version": "17.6.1x"}, {"status": "affected", "version": "17.6.3"}, {"status": "affected", "version": "17.6.1y"}, {"status": "affected", "version": "17.6.1z"}, {"status": "affected", "version": "17.6.3a"}, {"status": "affected", "version": "17.6.4"}, {"status": "affected", "version": "17.6.1z1"}, {"status": "affected", "version": "17.6.5"}, {"status": "affected", "version": "17.6.6"}, {"status": "affected", "version": "17.6.6a"}, {"status": "affected", "version": "17.6.5a"}, {"status": "affected", "version": "17.6.7"}, {"status": "affected", "version": "17.6.8"}, {"status": "affected", "version": "17.6.8a"}, {"status": "affected", "version": "17.7.1"}, {"status": "affected", "version": "17.7.1a"}, {"status": "affected", "version": "17.7.1b"}, {"status": "affected", "version": "17.7.2"}, {"status": "affected", "version": "17.10.1"}, {"status": "affected", "version": "17.10.1a"}, {"status": "affected", "version": "17.10.1b"}, {"status": "affected", "version": "17.8.1"}, {"status": "affected", "version": "17.8.1a"}, {"status": "affected", "version": "17.9.1"}, {"status": "affected", "version": "17.9.1w"}, {"status": "affected", "version": "17.9.2"}, {"status": "affected", "version": "17.9.1a"}, {"status": "affected", "version": "17.9.1x"}, {"status": "affected", "version": "17.9.1y"}, {"status": "affected", "version": "17.9.3"}, {"status": "affected", "version": "17.9.2a"}, {"status": "affected", "version": "17.9.1x1"}, {"status": "affected", "version": "17.9.3a"}, {"status": "affected", "version": "17.9.4"}, {"status": "affected", "version": "17.9.1y1"}, {"status": "affected", "version": "17.9.5"}, {"status": "affected", "version": "17.9.4a"}, {"status": "affected", "version": "17.9.5a"}, {"status": "affected", "version": "17.9.5b"}, {"status": "affected", "version": "17.9.6"}, {"status": "affected", "version": "17.9.6a"}, {"status": "affected", "version": "17.9.5e"}, {"status": "affected", "version": "17.9.5f"}, {"status": "affected", "version": "17.11.1"}, {"status": "affected", "version": "17.11.1a"}, {"status": "affected", "version": "17.12.1"}, {"status": "affected", "version": "17.12.1w"}, {"status": "affected", "version": "17.12.1a"}, {"status": "affected", "version": "17.12.1x"}, {"status": "affected", "version": "17.12.2"}, {"status": "affected", "version": "17.12.3"}, {"status": "affected", "version": "17.12.2a"}, {"status": "affected", "version": "17.12.1y"}, {"status": "affected", "version": "17.12.1z"}, {"status": "affected", "version": "17.12.4"}, {"status": "affected", "version": "17.12.3a"}, {"status": "affected", "version": "17.12.1z1"}, {"status": "affected", "version": "17.12.4a"}, {"status": "affected", "version": "17.12.4b"}, {"status": "affected", "version": "17.13.1"}, {"status": "affected", "version": "17.13.1a"}, {"status": "affected", "version": "17.14.1"}, {"status": "affected", "version": "17.14.1a"}, {"status": "affected", "version": "17.11.99SW"}, {"status": "affected", "version": "17.15.1"}, {"status": "affected", "version": "17.15.1w"}, {"status": "affected", "version": "17.15.1a"}, {"status": "affected", "version": "17.15.1b"}]}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6", "name": "cisco-sa-webui-multi-ARNHM4v6"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device.\r\n\r\n This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read limited files from the underlying operating system or clear the syslog and licensing logs on the affected device."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-78", "description": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-05-07T17:48:13.644Z"}}}, "cveMetadata": {"cveId": "CVE-2025-20194", "state": "PUBLISHED", "dateUpdated": "2025-05-08T03:56:37.461Z", "dateReserved": "2024-10-10T19:15:13.227Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2025-05-07T17:48:13.644Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2025-20194 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-05-07T18:55:38.277772Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-05-07T18:55:40.253Z (string)

}

]

cna : { »

source : { »

defects : [ »

0 : CSCwk25133 (string)

]

advisory : cisco-sa-webui-multi-ARNHM4v6 (string)

discovery : INTERNAL (string)

}

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.4 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : LOW (string)

confidentialityImpact : LOW (string)

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco IOS XE Software (string)

versions : [ »

0 : { »

status : affected (string)

version : 17.3.1 (string)

}

1 : { »

status : affected (string)

version : 17.3.2 (string)

}

2 : { »

status : affected (string)

version : 17.3.3 (string)

}

3 : { »

status : affected (string)

version : 17.3.1a (string)

}

4 : { »

status : affected (string)

version : 17.3.1w (string)

}

5 : { »

status : affected (string)

version : 17.3.2a (string)

}

6 : { »

status : affected (string)

version : 17.3.1x (string)

}

7 : { »

status : affected (string)

version : 17.3.1z (string)

}

8 : { »

status : affected (string)

version : 17.3.4 (string)

}

9 : { »

status : affected (string)

version : 17.3.5 (string)

}

10 : { »

status : affected (string)

version : 17.3.4a (string)

}

11 : { »

status : affected (string)

version : 17.3.6 (string)

}

12 : { »

status : affected (string)

version : 17.3.4b (string)

}

13 : { »

status : affected (string)

version : 17.3.4c (string)

}

14 : { »

status : affected (string)

version : 17.3.5a (string)

}

15 : { »

status : affected (string)

version : 17.3.5b (string)

}

16 : { »

status : affected (string)

version : 17.3.7 (string)

}

17 : { »

status : affected (string)

version : 17.3.8 (string)

}

18 : { »

status : affected (string)

version : 17.3.8a (string)

}

19 : { »

status : affected (string)

version : 17.4.1 (string)

}

20 : { »

status : affected (string)

version : 17.4.2 (string)

}

21 : { »

status : affected (string)

version : 17.4.1a (string)

}

22 : { »

status : affected (string)

version : 17.4.1b (string)

}

23 : { »

status : affected (string)

version : 17.4.2a (string)

}

24 : { »

status : affected (string)

version : 17.5.1 (string)

}

25 : { »

status : affected (string)

version : 17.5.1a (string)

}

26 : { »

status : affected (string)

version : 17.6.1 (string)

}

27 : { »

status : affected (string)

version : 17.6.2 (string)

}

28 : { »

status : affected (string)

version : 17.6.1w (string)

}

29 : { »

status : affected (string)

version : 17.6.1a (string)

}

30 : { »

status : affected (string)

version : 17.6.1x (string)

}

31 : { »

status : affected (string)

version : 17.6.3 (string)

}

32 : { »

status : affected (string)

version : 17.6.1y (string)

}

33 : { »

status : affected (string)

version : 17.6.1z (string)

}

34 : { »

status : affected (string)

version : 17.6.3a (string)

}

35 : { »

status : affected (string)

version : 17.6.4 (string)

}

36 : { »

status : affected (string)

version : 17.6.1z1 (string)

}

37 : { »

status : affected (string)

version : 17.6.5 (string)

}

38 : { »

status : affected (string)

version : 17.6.6 (string)

}

39 : { »

status : affected (string)

version : 17.6.6a (string)

}

40 : { »

status : affected (string)

version : 17.6.5a (string)

}

41 : { »

status : affected (string)

version : 17.6.7 (string)

}

42 : { »

status : affected (string)

version : 17.6.8 (string)

}

43 : { »

status : affected (string)

version : 17.6.8a (string)

}

44 : { »

status : affected (string)

version : 17.7.1 (string)

}

45 : { »

status : affected (string)

version : 17.7.1a (string)

}

46 : { »

status : affected (string)

version : 17.7.1b (string)

}

47 : { »

status : affected (string)

version : 17.7.2 (string)

}

48 : { »

status : affected (string)

version : 17.10.1 (string)

}

49 : { »

status : affected (string)

version : 17.10.1a (string)

}

50 : { »

status : affected (string)

version : 17.10.1b (string)

}

51 : { »

status : affected (string)

version : 17.8.1 (string)

}

52 : { »

status : affected (string)

version : 17.8.1a (string)

}

53 : { »

status : affected (string)

version : 17.9.1 (string)

}

54 : { »

status : affected (string)

version : 17.9.1w (string)

}

55 : { »

status : affected (string)

version : 17.9.2 (string)

}

56 : { »

status : affected (string)

version : 17.9.1a (string)

}

57 : { »

status : affected (string)

version : 17.9.1x (string)

}

58 : { »

status : affected (string)

version : 17.9.1y (string)

}

59 : { »

status : affected (string)

version : 17.9.3 (string)

}

60 : { »

status : affected (string)

version : 17.9.2a (string)

}

61 : { »

status : affected (string)

version : 17.9.1x1 (string)

}

62 : { »

status : affected (string)

version : 17.9.3a (string)

}

63 : { »

status : affected (string)

version : 17.9.4 (string)

}

64 : { »

status : affected (string)

version : 17.9.1y1 (string)

}

65 : { »

status : affected (string)

version : 17.9.5 (string)

}

66 : { »

status : affected (string)

version : 17.9.4a (string)

}

67 : { »

status : affected (string)

version : 17.9.5a (string)

}

68 : { »

status : affected (string)

version : 17.9.5b (string)

}

69 : { »

status : affected (string)

version : 17.9.6 (string)

}

70 : { »

status : affected (string)

version : 17.9.6a (string)

}

71 : { »

status : affected (string)

version : 17.9.5e (string)

}

72 : { »

status : affected (string)

version : 17.9.5f (string)

}

73 : { »

status : affected (string)

version : 17.11.1 (string)

}

74 : { »

status : affected (string)

version : 17.11.1a (string)

}

75 : { »

status : affected (string)

version : 17.12.1 (string)

}

76 : { »

status : affected (string)

version : 17.12.1w (string)

}

77 : { »

status : affected (string)

version : 17.12.1a (string)

}

78 : { »

status : affected (string)

version : 17.12.1x (string)

}

79 : { »

status : affected (string)

version : 17.12.2 (string)

}

80 : { »

status : affected (string)

version : 17.12.3 (string)

}

81 : { »

status : affected (string)

version : 17.12.2a (string)

}

82 : { »

status : affected (string)

version : 17.12.1y (string)

}

83 : { »

status : affected (string)

version : 17.12.1z (string)

}

84 : { »

status : affected (string)

version : 17.12.4 (string)

}

85 : { »

status : affected (string)

version : 17.12.3a (string)

}

86 : { »

status : affected (string)

version : 17.12.1z1 (string)

}

87 : { »

status : affected (string)

version : 17.12.4a (string)

}

88 : { »

status : affected (string)

version : 17.12.4b (string)

}

89 : { »

status : affected (string)

version : 17.13.1 (string)

}

90 : { »

status : affected (string)

version : 17.13.1a (string)

}

91 : { »

status : affected (string)

version : 17.14.1 (string)

}

92 : { »

status : affected (string)

version : 17.14.1a (string)

}

93 : { »

status : affected (string)

version : 17.11.99SW (string)

}

94 : { »

status : affected (string)

version : 17.15.1 (string)

}

95 : { »

status : affected (string)

version : 17.15.1w (string)

}

96 : { »

status : affected (string)

version : 17.15.1a (string)

}

97 : { »

status : affected (string)

version : 17.15.1b (string)

}

]

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory. (string)

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6 (string)

name : cisco-sa-webui-multi-ARNHM4v6 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read limited files from the underlying operating system or clear the syslog and licensing logs on the affected device. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : cwe (string)

cweId : CWE-78 (string)

description : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (string)

}

]

}

]

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2025-05-07T17:48:13.644Z (string)

}

cveMetadata : { »

cveId : CVE-2025-20194 (string)

state : PUBLISHED (string)

dateUpdated : 2025-05-08T03:56:37.461Z (string)

dateReserved : 2024-10-10T19:15:13.227Z (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

datePublished : 2025-05-07T17:48:13.644Z (string)

assignerShortName : cisco (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device.\r\n\r\n This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read limited files from the underlying operating system or clear the syslog and licensing logs on the affected device."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de administraci\u00f3n web del software Cisco IOS XE podr\u00eda permitir que un atacante remoto autenticado y con pocos privilegios realice un ataque de inyecci\u00f3n contra un dispositivo afectado. Esta vulnerabilidad se debe a una validaci\u00f3n de entrada insuficiente. Un atacante podr\u00eda explotarla enviando una entrada manipulada a la interfaz de administraci\u00f3n web. Una explotaci\u00f3n exitosa podr\u00eda permitirle leer archivos limitados del sistema operativo subyacente o borrar los registros de syslog y de licencias del dispositivo afectado."}], "id": "CVE-2025-20194", "lastModified": "2025-05-08T14:39:09.683", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "psirt@cisco.com", "type": "Primary"}]}, "published": "2025-05-07T18:15:39.593", "references": [{"source": "psirt@cisco.com", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "psirt@cisco.com", "type": "Primary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read limited files from the underlying operating system or clear the syslog and licensing logs on the affected device. (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad en la interfaz de administración web del software Cisco IOS XE podría permitir que un atacante remoto autenticado y con pocos privilegios realice un ataque de inyección contra un dispositivo afectado. Esta vulnerabilidad se debe a una validación de entrada insuficiente. Un atacante podría explotarla enviando una entrada manipulada a la interfaz de administración web. Una explotación exitosa podría permitirle leer archivos limitados del sistema operativo subyacente o borrar los registros de syslog y de licencias del dispositivo afectado. (string)

}

]

id : CVE-2025-20194 (string)

lastModified : 2025-05-08T14:39:09.683 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : LOW (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 2.5 (number)

source : psirt@cisco.com (string)

type : Primary (string)

}

]

}

published : 2025-05-07T18:15:39.593 (string)

references : [ »

0 : { »

source : psirt@cisco.com (string)

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6 (string)

}

]

sourceIdentifier : psirt@cisco.com (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-78 (string)

}

]

source : psirt@cisco.com (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object