CVE-2025-20122

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on the underlying operating system. This vulnerability is due to insufficient input validation. An authenticated attacker with read-only privileges on the SD-WAN Manager system could exploit this vulnerability by sending a crafted request to the CLI of the SD-WAN Manager. A successful exploit could allow the attacker to gain root privileges on the underlying operating system.

• CWE-300

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-priviesc-WCk7bmmtVendor Advisory

Published

May 7, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-20116A vulnerability in the web UI of Cisco APIC could allow an a…4.8
• CVE-2025-20117A vulnerability in the CLI of Cisco APIC could allow an auth…6.7
• CVE-2025-20118A vulnerability in the implementation of the internal system…4.4
• CVE-2025-20119A vulnerability in the system file permission handling of Ci…5.7
• CVE-2025-2012Ashlar-Vellum Cobalt VS File Parsing Out-Of-Bounds Read Remo…7.8
• CVE-2025-20120A vulnerability in the web-based management interface of Cis…6.1
• CVE-2025-20123Multiple vulnerabilities in the web-based management interfa…4.8
• CVE-2025-20124A vulnerability in an API of Cisco ISE could allow an authen…7.2
• CVE-2025-20125A vulnerability in an API of Cisco ISE could allow an authen…7.2
• CVE-2025-20126A vulnerability in certification validation routines of Cisc…4.8
• CVE-2025-20127A vulnerability in the TLS 1.3 implementation for a specific…7.7
• CVE-2025-20128A vulnerability in the Object Linking and Embedding 2 (OLE2)…7.5