CVE-2025-20122: cisco catalyst_sd-wan_manager Channel Accessible by Non-Endpoint

CVSS: 7.8v3.1HighAnalyzed

Published 07-05-2025Last modified 26-02-2026

Vulnerability summary

CVE-2025-20122 is a high (CVSS 7.8) Channel Accessible by Non-Endpoint vulnerability in cisco catalyst_sd-wan_manager. EPSS estimates a 0.15% chance of exploitation in the next 30 days, higher than 4.1% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.8/10

010

High · v3.1 (CVE.org)

EPSS score

0.15%

0%100%

Low · +0.01 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

07-05-2025
PublishedVulnerability first disclosed.
26-02-2026
Last modifiedVulnerability information updated.

Description

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to gain privileges of the root user on the underlying operating system. This vulnerability is due to insufficient input validation. An authenticated attacker with read-only privileges on the SD-WAN Manager system could exploit this vulnerability by sending a crafted request to the CLI of the SD-WAN Manager. A successful exploit could allow the attacker to gain root privileges on the underlying operating system.

CVSS metrics

2 scores · 2 sources · 1 version

v3.17.8

EPSS trend

Probability

0.15%

Chance of exploitation in the next 30 days

Percentile

Versus all other CVEs

30-day change

+0.01 pp

From 0.15% on 19-09-2026

19-09-202619-10-2026

EPSS score

0.15%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-300Channel Accessible by Non-EndpointThe product does not adequately verify the identity of actors at both ends of a communication channel, or does not adequately ensure the integrity of the channel, in a way that allows the channel to be accessed or influenced by an actor that is not an endpoint.

Affected systems

Cisco2 products

catalyst_sd-wan_manager17.2.4 | 17.2.5 | 17.2.6 | 17.2.7 | 17.2.8 | 17.2.9 | 17.2.10 | 18.2.0 | 18.3.0 | 18.3.1 | 18.3.1.1 | 18.3.3 | 18.3.3.1 | 18.3.4 | 18.3.5 | 18.3.6 | 18.3.6.1 | 18.3.7 | 18.3.8 | 18.4.0 | 18.4.0.1 | 18.4.1 | 18.4.3 | 18.4.4 | 18.4.5 | 18.4.6 | 18.4.302 | 18.4.303 | 18.4.501_es | 19.0.0 | 19.0.1a | 19.1.0 | 19.2.0 | 19.2.1 | 19.2.2 | 19.2.3 | 19.2.4 | 19.2.4.0.1 | 19.2.4.0.8 | 19.2.4.0.9 | 19.2.31 | 19.2.32 | 19.2.097 | 19.2.098 | 19.2.099 | 19.2.929 | 19.3.0 | 20.1.1 | 20.1.1.1 | 20.1.2 | 20.1.2_937 | 20.1.3 | 20.13.1 | 20.1.12 | 20.3.1 | 20.3.2 | 20.3.2.0.5 | 20.3.2.0.6 | 20.3.2.1 | 20.3.2.1_927 | 20.3.2.1_930 | 20.3.2_925 | 20.3.2_928 | 20.3.2_929 | 20.3.2_937 | 20.3.3 | 20.3.3.0.2 | 20.3.3.0.4 | 20.3.3.0.8 | 20.3.3.0.14 | 20.3.3.0.16 | 20.3.3.0.17 | 20.3.3.0.18 | 20.3.3.1 | 20.3.3.1.1 | 20.3.3.1.2 | 20.3.3.1.5 | 20.3.3.1.7 | 20.3.3.1.10 | 20.3.3.2 | 20.3.4 | 20.3.4.0.1 | 20.3.4.0.5 | 20.3.4.0.6 | 20.3.4.0.9 | 20.3.4.0.11 | 20.3.4.0.19 | 20.3.4.0.20 | 20.3.4.0.24 | 20.3.4.0.25 | 20.3.4.0.26 | 20.3.4.1 | 20.3.4.1.1 | 20.3.4.1.2 | 20.3.4.2 | 20.3.4.2.1 | 20.3.4.2.2 | 20.3.4.3 | 20.3.5 | 20.3.5.0.7 | 20.3.5.0.8 | 20.3.5.0.9 | 20.3.5.1 | 20.3.6 | 20.3.7 | 20.3.7.1 | 20.3.7.2 | 20.3.8 | 20.3.813 | 20.3.814 | 20.4.1 | 20.4.1.0.01 | 20.4.1.0.1 | 20.4.1.0.02 | 20.4.1.1 | 20.4.1.1.5 | 20.4.1.2 | 20.4.2 | 20.4.2.0.1 | 20.4.2.0.2 | 20.4.2.0.4 | 20.4.2.1 | 20.4.2.1.1 | 20.4.2.2 | 20.4.2.2.1 | 20.4.2.2.2 | 20.4.2.2.3 | 20.4.2.2.4 | 20.4.2.2.8 | 20.4.2.3 | 20.5.0.1.1 | 20.5.1 | 20.5.1.0.1 | 20.5.1.0.2 | 20.5.1.1 | 20.5.1.2 | 20.6.0.18.3 | 20.6.0.18.4 | 20.6.1 | 20.6.1.0.1 | 20.6.1.1 | 20.6.1.2 | 20.6.2 | 20.6.2.0.4 | 20.6.2.1 | 20.6.2.2 | 20.6.2.2.2 | 20.6.2.2.3 | 20.6.2.2.4 | 20.6.2.2.7 | 20.6.3 | 20.6.3.0.2 | 20.6.3.0.5 | 20.6.3.0.7 | 20.6.3.0.10 | 20.6.3.0.11 | 20.6.3.0.14 | 20.6.3.0.18 | 20.6.3.0.19 | 20.6.3.0.23 | 20.6.3.0.25 | 20.6.3.0.27 | 20.6.3.0.29 | 20.6.3.0.31 | 20.6.3.0.32 | 20.6.3.0.33 | 20.6.3.0.38 | 20.6.3.0.39 | 20.6.3.0.40 | 20.6.3.0.41 | 20.6.3.0.45 | 20.6.3.0.46 | 20.6.3.0.47 | 20.6.3.0.51 | 20.6.3.1 | 20.6.3.1.1 | 20.6.3.2 | 20.6.3.3 | 20.6.3.4 | 20.6.4 | 20.6.4.0.4 | 20.6.4.0.19 | 20.6.4.0.21 | 20.6.4.1 | 20.6.4.2 | 20.6.5 | 20.6.5.1 | 20.6.5.1.2 | 20.6.5.1.3 | 20.6.5.1.4 | 20.6.5.1.5 | 20.6.5.1.6 | 20.6.5.1.7 | 20.6.5.1.9 | 20.6.5.1.10 | 20.6.5.1.11 | 20.6.5.1.13 | 20.6.5.1.14 | 20.6.5.2 | 20.6.5.2.1 | 20.6.5.2.3 | 20.6.5.2.4 | 20.6.5.2.8 | 20.6.5.3 | 20.6.5.4 | 20.6.5.5 | 20.6.6 | 20.6.6.0.1 | 20.6.7 | 20.6.8 | 20.7.1 | 20.7.1.0.2 | 20.7.1.1 | 20.7.1eft2 | 20.7.2 | 20.8.1 | 20.9.1 | 20.9.1.1 | 20.9.1eft2 | 20.9.2 | 20.9.2.0.01 | 20.9.2.1 | 20.9.2.2 | 20.9.2.3 | 20.9.3 | 20.9.3.0.2 | 20.9.3.0.3 | 20.9.3.0.4 | 20.9.3.0.5 | 20.9.3.0.7 | 20.9.3.0.8 | 20.9.3.0.12 | 20.9.3.0.16 | 20.9.3.0.17 | 20.9.3.0.18 | 20.9.3.0.20 | 20.9.3.0.21 | 20.9.3.0.23 | 20.9.3.0.24 | 20.9.3.0.25 | 20.9.3.0.26 | 20.9.3.0.29 | 20.9.3.1 | 20.9.3.2 | 20.9.4 | 20.9.4.0.4 | 20.9.4.1 | 20.9.4.1.1 | 20.9.4.1.3 | 20.9.4.1.6 | 20.9.5 | 20.9.5.1 | 20.9.5.1.4 | 20.9.5.2 | 20.9.5.2.1 | 20.9.5.2.7 | 20.9.5.2.13 | 20.9.5.2.14 | 20.9.5.2.16 | 20.9.5.2.21 | 20.9.5.3 | 20.9.6 | 20.9.6.0.3 | 20.10.1 | 20.10.1.1 | 20.10.1.2 | 20.11.1.1 | 20.11.1.2 | 20.12.1 | 20.12.2 | 20.12.3 | 20.12.3.1 | 20.12.4 | 20.12.4.0.03 | 20.12.4.0.4 | 20.12.4.0.6 | 20.12.4.1 | 20.12.401 | 20.14.1 | 20.15.1
cisco catalyst sd-wan manager20.1.12 | 19.2.1 | 18.4.4 | 18.4.5 | 20.11.1 | 20.1.1 | 19.3.0 | 19.2.2 | 19.2.099 | 18.3.6 | 18.3.7 | 19.2.0 | 18.3.8 | 19.0.0 | 19.1.0 | 18.4.302 | 18.4.303 | 19.2.097 | 19.2.098 | 17.2.10 | 18.3.6.1 | 19.0.1a | 18.2.0 | 18.4.3 | 18.4.1 | 17.2.8 | 18.3.3.1 | 18.4.0 | 18.3.1 | 17.2.6 | 17.2.9 | 18.3.4 | 17.2.5 | 18.3.1.1 | 18.3.5 | 18.4.0.1 | 18.3.3 | 17.2.7 | 17.2.4 | 18.3.0 | 19.2.3 | 18.4.501_ES | 20.3.1 | 20.1.2 | 19.2.929 | 19.2.31 | 20.3.2 | 19.2.32 | 20.3.2_925 | 20.3.2.1 | 20.3.2.1_927 | 18.4.6 | 20.1.2_937 | 20.4.1 | 20.3.2_928 | 20.3.2_929 | 20.4.1.0.1 | 20.3.2.1_930 | 19.2.4 | 20.5.0.1.1 | 20.4.1.1 | 20.3.3 | 19.2.4.0.1 | 20.3.2_937 | 20.3.3.1 | 20.5.1 | 20.1.3 | 20.3.3.0.4 | 20.3.3.1.2 | 20.3.3.1.1 | 20.4.1.2 | 20.3.3.0.2 | 20.4.1.1.5 | 20.4.1.0.01 | 20.4.1.0.02 | 20.3.3.1.7 | 20.3.3.1.5 | 20.5.1.0.1 | 20.3.3.1.10 | 20.3.3.0.8 | 20.4.2 | 20.4.2.0.1 | 20.3.4 | 20.3.3.0.14 | 19.2.4.0.8 | 19.2.4.0.9 | 20.3.4.0.1 | 20.3.2.0.5 | 20.6.1 | 20.5.1.0.2 | 20.3.3.0.17 | 20.6.1.1 | 20.6.0.18.3 | 20.3.2.0.6 | 20.6.0.18.4 | 20.4.2.0.2 | 20.3.3.0.16 | 20.3.4.0.5 | 20.6.1.0.1 | 20.3.4.0.6 | 20.6.2 | 20.7.1EFT2 | 20.3.4.0.9 | 20.3.4.0.11 | 20.4.2.0.4 | 20.3.3.0.18 | 20.7.1 | 20.6.2.1 | 20.3.4.1 | 20.5.1.1 | 20.4.2.1 | 20.4.2.1.1 | 20.3.4.1.1 | 20.3.813 | 20.3.4.0.19 | 20.4.2.2.1 | 20.5.1.2 | 20.3.4.2 | 20.3.814 | 20.4.2.2 | 20.6.2.2 | 20.3.4.2.1 | 20.7.1.1 | 20.3.4.1.2 | 20.6.2.2.2 | 20.3.4.0.20 | 20.6.2.2.3 | 20.4.2.2.2 | 20.3.5 | 20.6.2.0.4 | 20.4.2.2.3 | 20.3.4.0.24 | 20.6.2.2.7 | 20.6.3 | 20.3.4.2.2 | 20.4.2.2.4 | 20.7.1.0.2 | 20.8.1 | 20.3.5.0.8 | 20.3.5.0.9 | 20.4.2.2.8 | 20.3.5.0.7 | 20.6.3.0.7 | 20.6.3.0.5 | 20.6.3.0.10 | 20.6.3.0.2 | 20.7.2 | 20.9.1EFT2 | 20.6.3.0.11 | 20.6.3.1 | 20.6.3.0.14 | 20.6.4 | 20.9.1 | 20.6.3.0.19 | 20.6.3.0.18 | 20.3.6 | 20.9.1.1 | 20.6.3.0.23 | 20.6.4.0.4 | 20.6.3.0.25 | 20.6.5 | 20.6.3.0.27 | 20.9.2 | 20.9.2.1 | 20.6.3.0.29 | 20.6.3.0.31 | 20.6.3.0.32 | 20.10.1 | 20.6.3.0.33 | 20.9.2.0.01 | 20.9.1_LI_Images | 20.10.1_LI_Images | 20.9.2_LI_Images | 20.3.7 | 20.9.3 | 20.6.5.1 | 20.11.1_LI_Images | 20.9.3_LI_ Images | 20.6.3.1.1 | 20.9.3.0.2 | 20.6.5.1.2 | 20.9.3.0.3 | 20.4.2.3 | 20.6.3.2 | 20.6.4.1 | 20.6.3.0.38 | 20.6.3.0.39 | 20.3.5.1 | 20.3.4.3 | 20.9.3.1 | 20.3.3.2 | 20.6.5.2 | 20.3.7.1 | 20.10.1.1 | 20.6.5.2.1 | 20.3.4.0.25 | 20.6.2.2.4 | 20.6.1.2 | 20.11.1.1 | 20.9.3.0.5 | 20.3.4.0.26 | 20.6.5.1.3 | 20.6.3.0.40 | 20.13.1 | 20.9.2.2 | 20.6.5.2.3 | 20.6.5.1.4 | 20.6.5.3 | 20.6.3.0.41 | 20.9.3.0.7 | 20.6.5.1.5 | 20.9.3.0.4 | 20.6.4.0.19 | 20.6.5.1.6 | 20.9.3.0.8 | 20.6.3.3 | 20.3.7.2 | 20.6.5.4 | 20.6.5.1.7 | 20.9.3.0.12 | 20.6.4.2 | 20.6.5.5 | 20.9.3.2 | 20.11.1.2 | 20.6.3.4 | 20.10.1.2 | 20.6.5.1.9 | 20.9.3.0.16 | 20.6.3.0.45 | 20.6.5.1.10 | 20.9.3.0.17 | 20.6.5.2.4 | 20.6.4.0.21 | 20.9.3.0.18 | 20.6.3.0.46 | 20.6.3.0.47 | 20.9.2.3 | 20.9.3.2_LI_Images | 20.9.3.0.21 | 20.9.3.0.20 | 20.9.4_LI_Images | 20.9.4 | 20.6.5.1.11 | 20.12.1 | 20.12.1_LI_Images | 20.6.5.1.13 | 20.9.3.0.23 | 20.6.5.2.8 | 20.9.4.1 | 20.9.4.1_LI_Images | 20.9.3.0.25 | 20.9.3.0.24 | 20.6.5.1.14 | 20.3.8 | 20.6.6 | 20.9.3.0.26 | 20.6.3.0.51 | 20.9.3.0.29 | 20.12.2 | 20.12.2_LI_Images | 20.6.6.0.1 | 20.13.1_LI_Images | 20.9.4.0.4 | 20.9.4.1.1 | 20.9.5 | 20.9.5_LI_Images | 20.12.3_LI_Images | 20.12.3 | 20.9.4.1.3 | 20.6.7 | 20.9.5.1 | 20.9.5.1_LI_Images | 20.9.4.1.6 | 20.14.1 | 20.14.1_LI_Images | 20.9.5.2 | 20.9.5.2.1 | 20.9.5.2_LI_Images | 20.12.3.1 | 20.12.4 | 20.15.1_LI_Images | 20.15.1 | 20.9.5.1.4 | 20.9.5.2.7 | 20.9.5.2.13 | 20.9.6 | 20.9.6_LI_Images | 20.9.5.2.14 | 20.6.8 | 20.12.4.0.03 | 20.12.4_LI_Images | 20.9.5.2.16 | 20.12.4.0.4 | 20.12.401 | 20.9.5.3 | 20.9.5.3_LI_Images | 20.12.4.1_LI_Images | 20.12.4.1 | 20.9.5.2.21 | 20.9.6.0.3 | 20.12.4.0.6

1 vendor · 2 products

References

1 links

sec.cloudapps.cisco.com/security/…Vendor Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities