6

CVE-2025-20119: cisco application_policy_infrastructure_controller Race Condition

CVSS: 6.0v3.1MediumAnalyzed
Published 26-02-2025Last modified 03-03-2025
Open JSON

Vulnerability summary

CVE-2025-20119 is a medium (CVSS 6.0) Race Condition vulnerability in cisco application_policy_infrastructure_controller. EPSS estimates a 0.10% chance of exploitation in the next 30 days, higher than 0.8% of scored vulnerabilities.

Overall risk
24/100
0100
Low · default modelHow is this calculated?
CVSS score
6.0/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.10%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 26-02-2025
    PublishedVulnerability first disclosed.
  2. 03-03-2025
    Last modifiedVulnerability information updated.

Description

A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to a race condition with handling system files. An attacker could exploit this vulnerability by doing specific operations on the file system. A successful exploit could allow the attacker to overwrite system files, which could lead to the device being in an inconsistent state and cause a DoS condition.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.10%

Chance of exploitation in the next 30 days

Percentile

1%

Versus all other CVEs

30-day change

0.00 pp

From 0.10% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.10%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco2 products
  • application_policy_infrastructure_controller3.2\(1l\) | 3.2\(1m\) | 3.2\(2l\) | 3.2\(2o\) | 3.2\(3i\) | 3.2\(3j\) | 3.2\(3n\) | 3.2\(3o\) | 3.2\(3r\) | 3.2\(3s\) | 3.2\(4d\) | 3.2\(4e\) | 3.2\(5d\) | 3.2\(5e\) | 3.2\(5f\) | 3.2\(6i\) | 3.2\(7f\) | 3.2\(7k\) | 3.2\(8d\) | 3.2\(9b\) | 3.2\(9f\) | 3.2\(9h\) | 3.2\(10e\) | 3.2\(10f\) | 3.2\(10g\) | 3.2\(41d\) | 4.0\(1h\) | 4.0\(2c\) | 4.0\(3c\) | 4.0\(3d\) | 4.1\(1a\) | 4.1\(1i\) | 4.1\(1j\) | 4.1\(1k\) | 4.1\(1l\) | 4.1\(2g\) | 4.1\(2m\) | 4.1\(2o\) | 4.1\(2s\) | 4.1\(2u\) | 4.1\(2w\) | 4.1\(2x\) | 4.2\(1g\) | 4.2\(1i\) | 4.2\(1j\) | 4.2\(1l\) | 4.2\(2e\) | 4.2\(2f\) | 4.2\(2g\) | 4.2\(3j\) | 4.2\(3l\) | 4.2\(3n\) | 4.2\(3q\) | 4.2\(4i\) | 4.2\(4k\) | 4.2\(4o\) | 4.2\(4p\) | 4.2\(5k\) | 4.2\(5l\) | 4.2\(5n\) | 4.2\(6d\) | 4.2\(6g\) | 4.2\(6h\) | 4.2\(6l\) | 4.2\(6o\) | 4.2\(7f\) | 4.2\(7l\) | 4.2\(7q\) | 4.2\(7r\) | 4.2\(7s\) | 4.2\(7t\) | 4.2\(7u\) | 4.2\(7v\) | 4.2\(7w\) | 5.0\(1k\) | 5.0\(1l\) | 5.0\(2e\) | 5.0\(2h\) | 5.1\(1h\) | 5.1\(2e\) | 5.1\(3e\) | 5.1\(4c\) | 5.2\(1g\) | 5.2\(2e\) | 5.2\(2f\) | 5.2\(2g\) | 5.2\(2h\) | 5.2\(3e\) | 5.2\(3f\) | 5.2\(3g\) | 5.2\(4d\) | 5.2\(4e\) | 5.2\(4f\) | 5.2\(4h\) | 5.2\(5c\) | 5.2\(5d\) | 5.2\(5e\) | 5.2\(6e\) | 5.2\(6g\) | 5.2\(6h\) | 5.2\(7f\) | 5.2\(7g\) | 5.2\(8d\) | 5.2\(8e\) | 5.2\(8f\) | 5.2\(8g\) | 5.2\(8h\) | 5.2\(8i\) | 5.3\(1d\) | 5.3\(2a\) | 5.3\(2b\) | 5.3\(2c\) | 5.3\(2d\) | 5.3\(2e\) | 6.0\(1g\) | 6.0\(1j\) | 6.0\(2h\) | 6.0\(2j\) | 6.0\(3d\) | 6.0\(3e\) | 6.0\(3g\) | 6.0\(4c\) | 6.0\(5h\) | 6.0\(5j\) | 6.0\(6c\) | 6.0\(7e\) | 6.0\(8d\) | 6.1\(1f\)
  • cisco application policy infrastructure controller (apic)3.2(8d) | 3.2(1m) | 3.2(5e) | 4.1(2m) | 3.2(41d) | 3.2(3s) | 4.0(3c) | 4.1(1k) | 3.2(4d) | 4.2(2e) | 4.2(3j) | 4.2(3n) | 4.0(1h) | 4.1(1l) | 3.2(9f) | 4.2(3l) | 4.2(2g) | 3.2(7k) | 3.2(9b) | 3.2(3j) | 4.1(2u) | 4.2(1l) | 4.1(1a) | 4.0(3d) | 3.2(4e) | 4.1(1i) | 3.2(5f) | 3.2(1l) | 4.2(1i) | 4.1(2o) | 4.2(1g) | 4.1(2g) | 4.2(2f) | 3.2(6i) | 3.2(3i) | 3.2(3n) | 4.1(2x) | 3.2(5d) | 4.2(3q) | 4.1(1j) | 4.1(2w) | 3.2(2o) | 3.2(3r) | 4.0(2c) | 4.1(2s) | 3.2(7f) | 3.2(3o) | 3.2(2l) | 4.2(1j) | 4.2(4i) | 3.2(9h) | 5.0(1k) | 4.2(4k) | 5.0(1l) | 5.0(2e) | 4.2(4o) | 4.2(4p) | 5.0(2h) | 4.2(5k) | 4.2(5l) | 4.2(5n) | 5.1(1h) | 4.2(6d) | 5.1(2e) | 4.2(6g) | 4.2(6h) | 5.1(3e) | 3.2(10e) | 4.2(6l) | 4.2(7f) | 5.1(4c) | 4.2(6o) | 5.2(1g) | 5.2(2e) | 4.2(7l) | 3.2(10f) | 5.2(2f) | 5.2(2g) | 4.2(7q) | 5.2(2h) | 5.2(3f) | 5.2(3e) | 5.2(3g) | 4.2(7r) | 4.2(7s) | 5.2(4d) | 5.2(4e) | 4.2(7t) | 5.2(5d) | 3.2(10g) | 5.2(5c) | 6.0(1g) | 4.2(7u) | 5.2(5e) | 5.2(4f) | 5.2(6e) | 6.0(1j) | 5.2(6g) | 5.2(7f) | 4.2(7v) | 5.2(7g) | 6.0(2h) | 4.2(7w) | 5.2(6h) | 5.2(4h) | 5.2(8d) | 6.0(2j) | 5.2(8e) | 6.0(3d) | 6.0(3e) | 5.2(8f) | 5.2(8g) | 5.3(1d) | 5.2(8h) | 6.0(4c) | 5.3(2a) | 5.2(8i) | 6.0(5h) | 5.3(2b) | 6.0(3g) | 6.0(5j) | 5.3(2c) | 6.0(6c) | 6.1(1f) | 6.0(7e) | 5.3(2d) | 6.0(8d) | 5.3(2e)

1 vendor · 2 products

References

1 links