CVE-2025-20213: cisco catalyst_sd-wan_manager OS Command Injection

CVSS: 5.5v3.1MediumAnalyzed

Published 07-05-2025Last modified 26-02-2026

Vulnerability summary

CVE-2025-20213 is a medium (CVSS 5.5) OS Command Injection vulnerability in cisco catalyst_sd-wan_manager. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.8% of scored vulnerabilities.

Overall risk

22/100

0100

Low · default modelHow is this calculated?

CVSS score

5.5/10

010

Medium · v3.1 (CVE.org)

EPSS score

0.17%

0%100%

Low · +0.01 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

07-05-2025
PublishedVulnerability first disclosed.
26-02-2026
Last modifiedVulnerability information updated.

Description

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials with CLI access on the affected system. This vulnerability is due to improper access controls on files that are on the local file system. An attacker could exploit this vulnerability by running a series of crafted commands on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device and gain privileges of the root user. To exploit this vulnerability, an attacker would need to have CLI access as a low-privilege user.

CVSS metrics

2 scores · 2 sources · 1 version

v3.15.5

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

Versus all other CVEs

30-day change

+0.01 pp

From 0.16% on 18-09-2026

18-09-202618-10-2026

EPSS score

0.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Affected systems

Cisco2 products

catalyst_sd-wan_manager20.3.5.0.7 | 20.3.5.0.8 | 20.3.5.0.9 | 20.3.5.1 | 20.3.6 | 20.3.7 | 20.3.7.1 | 20.3.7.2 | 20.3.8 | 20.3.813 | 20.3.814 | 20.4.1 | 20.4.1.0.01 | 20.4.1.0.1 | 20.4.1.0.02 | 20.4.1.1 | 20.4.1.1.5 | 20.4.1.2 | 20.4.2 | 20.4.2.0.1 | 20.4.2.0.2 | 20.4.2.0.4 | 20.4.2.1 | 20.4.2.1.1 | 20.4.2.2 | 20.4.2.2.1 | 20.4.2.2.2 | 20.4.2.2.3 | 20.4.2.2.4 | 20.4.2.2.8 | 20.4.2.3 | 20.5.0.1.1 | 20.5.1 | 20.5.1.0.1 | 20.5.1.0.2 | 20.5.1.1 | 20.5.1.2 | 20.6.0.18.3 | 20.6.0.18.4 | 20.6.1 | 20.6.1.0.1 | 20.6.1.1 | 20.6.1.2 | 20.6.2 | 20.6.2.0.4 | 20.6.2.1 | 20.6.2.2 | 20.6.2.2.2 | 20.6.2.2.3 | 20.6.2.2.4 | 20.6.2.2.7 | 20.6.3 | 20.6.3.0.2 | 20.6.3.0.5 | 20.6.3.0.7 | 20.6.3.0.10 | 20.6.3.0.11 | 20.6.3.0.14 | 20.6.3.0.18 | 20.6.3.0.19 | 20.6.3.0.23 | 20.6.3.0.25 | 20.6.3.0.27 | 20.6.3.0.29 | 20.6.3.0.31 | 20.6.3.0.32 | 20.6.3.0.33 | 20.6.3.0.38 | 20.6.3.0.39 | 20.6.3.0.40 | 20.6.3.0.41 | 20.6.3.0.45 | 20.6.3.0.46 | 20.6.3.0.47 | 20.6.3.0.51 | 20.6.3.1 | 20.6.3.1.1 | 20.6.3.2 | 20.6.3.3 | 20.6.3.4 | 20.6.4 | 20.6.4.0.4 | 20.6.4.0.19 | 20.6.4.0.21 | 20.6.4.1 | 20.6.4.2 | 20.6.5 | 20.6.5.1 | 20.6.5.1.2 | 20.6.5.1.3 | 20.6.5.1.4 | 20.6.5.1.5 | 20.6.5.1.6 | 20.6.5.1.7 | 20.6.5.1.9 | 20.6.5.1.10 | 20.6.5.1.11 | 20.6.5.1.13 | 20.6.5.1.14 | 20.6.5.2 | 20.6.5.2.1 | 20.6.5.2.3 | 20.6.5.2.4 | 20.6.5.2.8 | 20.6.5.3 | 20.6.5.4 | 20.6.5.5 | 20.6.6 | 20.6.6.0.1 | 20.6.7 | 20.6.8 | 20.7.1 | 20.7.1.0.2 | 20.7.1.1 | 20.7.1eft2 | 20.7.2 | 20.8.1 | 20.9.1 | 20.9.1.1 | 20.9.1eft2 | 20.9.2 | 20.9.2.0.01 | 20.9.2.1 | 20.9.2.2 | 20.9.2.3 | 20.9.3 | 20.9.3.0.2 | 20.9.3.0.3 | 20.9.3.0.4 | 20.9.3.0.5 | 20.9.3.0.7 | 20.9.3.0.8 | 20.9.3.0.12 | 20.9.3.0.16 | 20.9.3.0.17 | 20.9.3.0.18 | 20.9.3.0.20 | 20.9.3.0.21 | 20.9.3.0.23 | 20.9.3.0.24 | 20.9.3.0.25 | 20.9.3.0.26 | 20.9.3.0.29 | 20.9.3.1 | 20.9.3.2 | 20.9.4 | 20.9.4.0.4 | 20.9.4.1 | 20.9.4.1.1 | 20.9.4.1.3 | 20.9.4.1.6 | 20.9.5 | 20.9.5.1 | 20.9.5.1.4 | 20.9.5.2 | 20.9.5.2.1 | 20.9.5.2.7 | 20.9.5.2.13 | 20.9.5.2.14 | 20.9.5.2.16 | 20.9.5.2.21 | 20.9.5.3 | 20.9.6 | 20.9.6.0.3 | 20.10.1 | 20.10.1.1 | 20.10.1.2 | 20.11.1.1 | 20.11.1.2 | 20.12.1 | 20.12.2 | 20.12.3 | 20.12.3.1 | 20.12.4 | 20.12.4.0.03 | 20.12.4.0.4 | 20.12.4.0.6 | 20.12.4.1 | 20.12.401 | 20.14.1 | 20.15.1 | 20.15.2 | 17.2.4 | 17.2.5 | 17.2.6 | 17.2.7 | 17.2.8 | 17.2.9 | 17.2.10 | 18.2.0 | 18.3.0 | 18.3.1 | 18.3.1.1 | 18.3.3 | 18.3.3.1 | 18.3.4 | 18.3.5 | 18.3.6 | 18.3.6.1 | 18.3.7 | 18.3.8 | 18.4.0 | 18.4.0.1 | 18.4.1 | 18.4.3 | 18.4.4 | 18.4.5 | 18.4.6 | 18.4.302 | 18.4.303 | 18.4.501_es | 19.0.0 | 19.0.1a | 19.1.0 | 19.2.0 | 19.2.1 | 19.2.2 | 19.2.3 | 19.2.4 | 19.2.4.0.1 | 19.2.4.0.8 | 19.2.4.0.9 | 19.2.31 | 19.2.32 | 19.2.097 | 19.2.098 | 19.2.099 | 19.2.929 | 19.3.0 | 20.1.1 | 20.1.1.1 | 20.1.2 | 20.1.2_937 | 20.1.3 | 20.13.1 | 20.1.12 | 20.3.1 | 20.3.2 | 20.3.2.0.5 | 20.3.2.0.6 | 20.3.2.1 | 20.3.2.1_927 | 20.3.2.1_930 | 20.3.2_925 | 20.3.2_928 | 20.3.2_929 | 20.3.2_937 | 20.3.3 | 20.3.3.0.2 | 20.3.3.0.4 | 20.3.3.0.8 | 20.3.3.0.14 | 20.3.3.0.16 | 20.3.3.0.17 | 20.3.3.0.18 | 20.3.3.1 | 20.3.3.1.1 | 20.3.3.1.2 | 20.3.3.1.5 | 20.3.3.1.7 | 20.3.3.1.10 | 20.3.3.2 | 20.3.4 | 20.3.4.0.1 | 20.3.4.0.5 | 20.3.4.0.6 | 20.3.4.0.9 | 20.3.4.0.11 | 20.3.4.0.19 | 20.3.4.0.20 | 20.3.4.0.24 | 20.3.4.0.25 | 20.3.4.0.26 | 20.3.4.1 | 20.3.4.1.1 | 20.3.4.1.2 | 20.3.4.2 | 20.3.4.2.1 | 20.3.4.2.2 | 20.3.4.3 | 20.3.5
cisco catalyst sd-wan manager20.1.12 | 19.2.1 | 18.4.4 | 18.4.5 | 20.11.1 | 20.1.1 | 19.3.0 | 19.2.2 | 19.2.099 | 18.3.6 | 18.3.7 | 19.2.0 | 18.3.8 | 19.0.0 | 19.1.0 | 18.4.302 | 18.4.303 | 19.2.097 | 19.2.098 | 17.2.10 | 18.3.6.1 | 19.0.1a | 18.2.0 | 18.4.3 | 18.4.1 | 17.2.8 | 18.3.3.1 | 18.4.0 | 18.3.1 | 17.2.6 | 17.2.9 | 18.3.4 | 17.2.5 | 18.3.1.1 | 18.3.5 | 18.4.0.1 | 18.3.3 | 17.2.7 | 17.2.4 | 18.3.0 | 19.2.3 | 18.4.501_ES | 20.3.1 | 20.1.2 | 19.2.929 | 19.2.31 | 20.3.2 | 19.2.32 | 20.3.2_925 | 20.3.2.1 | 20.3.2.1_927 | 18.4.6 | 20.1.2_937 | 20.4.1 | 20.3.2_928 | 20.3.2_929 | 20.4.1.0.1 | 20.3.2.1_930 | 19.2.4 | 20.5.0.1.1 | 20.4.1.1 | 20.3.3 | 19.2.4.0.1 | 20.3.2_937 | 20.3.3.1 | 20.5.1 | 20.1.3 | 20.3.3.0.4 | 20.3.3.1.2 | 20.3.3.1.1 | 20.4.1.2 | 20.3.3.0.2 | 20.4.1.1.5 | 20.4.1.0.01 | 20.4.1.0.02 | 20.3.3.1.7 | 20.3.3.1.5 | 20.5.1.0.1 | 20.3.3.1.10 | 20.3.3.0.8 | 20.4.2 | 20.4.2.0.1 | 20.3.4 | 20.3.3.0.14 | 19.2.4.0.8 | 19.2.4.0.9 | 20.3.4.0.1 | 20.3.2.0.5 | 20.6.1 | 20.5.1.0.2 | 20.3.3.0.17 | 20.6.1.1 | 20.6.0.18.3 | 20.3.2.0.6 | 20.6.0.18.4 | 20.4.2.0.2 | 20.3.3.0.16 | 20.3.4.0.5 | 20.6.1.0.1 | 20.3.4.0.6 | 20.6.2 | 20.7.1EFT2 | 20.3.4.0.9 | 20.3.4.0.11 | 20.4.2.0.4 | 20.3.3.0.18 | 20.7.1 | 20.6.2.1 | 20.3.4.1 | 20.5.1.1 | 20.4.2.1 | 20.4.2.1.1 | 20.3.4.1.1 | 20.3.813 | 20.3.4.0.19 | 20.4.2.2.1 | 20.5.1.2 | 20.3.4.2 | 20.3.814 | 20.4.2.2 | 20.6.2.2 | 20.3.4.2.1 | 20.7.1.1 | 20.3.4.1.2 | 20.6.2.2.2 | 20.3.4.0.20 | 20.6.2.2.3 | 20.4.2.2.2 | 20.3.5 | 20.6.2.0.4 | 20.4.2.2.3 | 20.3.4.0.24 | 20.6.2.2.7 | 20.6.3 | 20.3.4.2.2 | 20.4.2.2.4 | 20.7.1.0.2 | 20.8.1 | 20.3.5.0.8 | 20.3.5.0.9 | 20.4.2.2.8 | 20.3.5.0.7 | 20.6.3.0.7 | 20.6.3.0.5 | 20.6.3.0.10 | 20.6.3.0.2 | 20.7.2 | 20.9.1EFT2 | 20.6.3.0.11 | 20.6.3.1 | 20.6.3.0.14 | 20.6.4 | 20.9.1 | 20.6.3.0.19 | 20.6.3.0.18 | 20.3.6 | 20.9.1.1 | 20.6.3.0.23 | 20.6.4.0.4 | 20.6.3.0.25 | 20.6.5 | 20.6.3.0.27 | 20.9.2 | 20.9.2.1 | 20.6.3.0.29 | 20.6.3.0.31 | 20.6.3.0.32 | 20.10.1 | 20.6.3.0.33 | 20.9.2.0.01 | 20.9.1_LI_Images | 20.10.1_LI_Images | 20.9.2_LI_Images | 20.3.7 | 20.9.3 | 20.6.5.1 | 20.11.1_LI_Images | 20.9.3_LI_ Images | 20.6.3.1.1 | 20.9.3.0.2 | 20.6.5.1.2 | 20.9.3.0.3 | 20.4.2.3 | 20.6.3.2 | 20.6.4.1 | 20.6.3.0.38 | 20.6.3.0.39 | 20.3.5.1 | 20.3.4.3 | 20.9.3.1 | 20.3.3.2 | 20.6.5.2 | 20.3.7.1 | 20.10.1.1 | 20.6.5.2.1 | 20.3.4.0.25 | 20.6.2.2.4 | 20.6.1.2 | 20.11.1.1 | 20.9.3.0.5 | 20.3.4.0.26 | 20.6.5.1.3 | 20.6.3.0.40 | 20.13.1 | 20.9.2.2 | 20.6.5.2.3 | 20.6.5.1.4 | 20.6.5.3 | 20.6.3.0.41 | 20.9.3.0.7 | 20.6.5.1.5 | 20.9.3.0.4 | 20.6.4.0.19 | 20.6.5.1.6 | 20.9.3.0.8 | 20.6.3.3 | 20.3.7.2 | 20.6.5.4 | 20.6.5.1.7 | 20.9.3.0.12 | 20.6.4.2 | 20.6.5.5 | 20.9.3.2 | 20.11.1.2 | 20.6.3.4 | 20.10.1.2 | 20.6.5.1.9 | 20.9.3.0.16 | 20.6.3.0.45 | 20.6.5.1.10 | 20.9.3.0.17 | 20.6.5.2.4 | 20.6.4.0.21 | 20.9.3.0.18 | 20.6.3.0.46 | 20.6.3.0.47 | 20.9.2.3 | 20.9.3.2_LI_Images | 20.9.3.0.21 | 20.9.3.0.20 | 20.9.4_LI_Images | 20.9.4 | 20.6.5.1.11 | 20.12.1 | 20.12.1_LI_Images | 20.6.5.1.13 | 20.9.3.0.23 | 20.6.5.2.8 | 20.9.4.1 | 20.9.4.1_LI_Images | 20.9.3.0.25 | 20.9.3.0.24 | 20.6.5.1.14 | 20.3.8 | 20.6.6 | 20.9.3.0.26 | 20.6.3.0.51 | 20.9.3.0.29 | 20.12.2 | 20.12.2_LI_Images | 20.6.6.0.1 | 20.13.1_LI_Images | 20.9.4.0.4 | 20.9.4.1.1 | 20.9.5 | 20.9.5_LI_Images | 20.12.3_LI_Images | 20.12.3 | 20.9.4.1.3 | 20.6.7 | 20.9.5.1 | 20.9.5.1_LI_Images | 20.9.4.1.6 | 20.14.1 | 20.14.1_LI_Images | 20.9.5.2 | 20.9.5.2.1 | 20.9.5.2_LI_Images | 20.12.3.1 | 20.12.4 | 20.15.1_LI_Images | 20.15.1 | 20.9.5.1.4 | 20.9.5.2.7 | 20.9.5.2.13 | 20.9.6 | 20.9.6_LI_Images | 20.9.5.2.14 | 20.6.8 | 20.12.4.0.03 | 20.12.4_LI_Images | 20.9.5.2.16 | 20.12.4.0.4 | 20.12.401 | 20.9.5.3 | 20.9.5.3_LI_Images | 20.12.4.1_LI_Images | 20.12.4.1 | 20.9.5.2.21 | 20.9.6.0.3 | 20.12.4.0.6 | 20.15.2_LI_Images | 20.15.2

1 vendor · 2 products

References

1 links

sec.cloudapps.cisco.com/security/…Vendor Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities