CVE-2025-20118: Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability
Published Feb 26, 2025
·Updated
A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient masking of sensitive information that is displayed through system CLI commands. An attacker could exploit this vulnerability by using reconnaissance techniques at the device CLI. A successful exploit could allow the attacker to access sensitive information on an affected device that could be used for additional attacks.
Affected Software
129 affected components
Cisco Application Policy Infrastructure Controller
Cisco Application Policy Infrastructure Controller=3.2\(1l\)
Cisco Application Policy Infrastructure Controller=3.2\(1m\)
Cisco Application Policy Infrastructure Controller=3.2\(2l\)
Cisco Application Policy Infrastructure Controller=3.2\(2o\)
Cisco Application Policy Infrastructure Controller=3.2\(3i\)
Cisco Application Policy Infrastructure Controller=3.2\(3j\)
Cisco Application Policy Infrastructure Controller=3.2\(3n\)
Cisco Application Policy Infrastructure Controller=3.2\(3o\)
Cisco Application Policy Infrastructure Controller=3.2\(3r\)
Cisco Application Policy Infrastructure Controller=3.2\(3s\)
Cisco Application Policy Infrastructure Controller=3.2\(4d\)
Cisco Application Policy Infrastructure Controller=3.2\(4e\)
Cisco Application Policy Infrastructure Controller=3.2\(5d\)
Cisco Application Policy Infrastructure Controller=3.2\(5e\)
Cisco Application Policy Infrastructure Controller=3.2\(5f\)
Cisco Application Policy Infrastructure Controller=3.2\(6i\)
Cisco Application Policy Infrastructure Controller=3.2\(7f\)
Cisco Application Policy Infrastructure Controller=3.2\(7k\)
Cisco Application Policy Infrastructure Controller=3.2\(8d\)
Cisco Application Policy Infrastructure Controller=3.2\(9b\)
Cisco Application Policy Infrastructure Controller=3.2\(9f\)
Cisco Application Policy Infrastructure Controller=3.2\(9h\)
Cisco Application Policy Infrastructure Controller=3.2\(10e\)
Cisco Application Policy Infrastructure Controller=3.2\(10f\)
Cisco Application Policy Infrastructure Controller=3.2\(10g\)
Cisco Application Policy Infrastructure Controller=3.2\(41d\)
Cisco Application Policy Infrastructure Controller=4.0\(1h\)
Cisco Application Policy Infrastructure Controller=4.0\(2c\)
Cisco Application Policy Infrastructure Controller=4.0\(3c\)
Cisco Application Policy Infrastructure Controller=4.0\(3d\)
Cisco Application Policy Infrastructure Controller=4.1\(1a\)
Cisco Application Policy Infrastructure Controller=4.1\(1i\)
Cisco Application Policy Infrastructure Controller=4.1\(1j\)
Cisco Application Policy Infrastructure Controller=4.1\(1k\)
Cisco Application Policy Infrastructure Controller=4.1\(1l\)
Cisco Application Policy Infrastructure Controller=4.1\(2g\)
Cisco Application Policy Infrastructure Controller=4.1\(2m\)
Cisco Application Policy Infrastructure Controller=4.1\(2o\)
Cisco Application Policy Infrastructure Controller=4.1\(2s\)
Cisco Application Policy Infrastructure Controller=4.1\(2u\)
Cisco Application Policy Infrastructure Controller=4.1\(2w\)
Cisco Application Policy Infrastructure Controller=4.1\(2x\)
Cisco Application Policy Infrastructure Controller=4.2\(1g\)
Cisco Application Policy Infrastructure Controller=4.2\(1i\)
Cisco Application Policy Infrastructure Controller=4.2\(1j\)
Cisco Application Policy Infrastructure Controller=4.2\(1l\)
Cisco Application Policy Infrastructure Controller=4.2\(2e\)
Cisco Application Policy Infrastructure Controller=4.2\(2f\)
Cisco Application Policy Infrastructure Controller=4.2\(2g\)
Cisco Application Policy Infrastructure Controller=4.2\(3j\)
Cisco Application Policy Infrastructure Controller=4.2\(3l\)
Cisco Application Policy Infrastructure Controller=4.2\(3n\)
Cisco Application Policy Infrastructure Controller=4.2\(3q\)
Cisco Application Policy Infrastructure Controller=4.2\(4i\)
Cisco Application Policy Infrastructure Controller=4.2\(4k\)
Cisco Application Policy Infrastructure Controller=4.2\(4o\)
Cisco Application Policy Infrastructure Controller=4.2\(4p\)
Cisco Application Policy Infrastructure Controller=4.2\(5k\)
Cisco Application Policy Infrastructure Controller=4.2\(5l\)
Cisco Application Policy Infrastructure Controller=4.2\(5n\)
Cisco Application Policy Infrastructure Controller=4.2\(6d\)
Cisco Application Policy Infrastructure Controller=4.2\(6g\)
Cisco Application Policy Infrastructure Controller=4.2\(6h\)
Cisco Application Policy Infrastructure Controller=4.2\(6l\)
Cisco Application Policy Infrastructure Controller=4.2\(6o\)
Cisco Application Policy Infrastructure Controller=4.2\(7f\)
Cisco Application Policy Infrastructure Controller=4.2\(7l\)
Cisco Application Policy Infrastructure Controller=4.2\(7q\)
Cisco Application Policy Infrastructure Controller=4.2\(7r\)
Cisco Application Policy Infrastructure Controller=4.2\(7s\)
Cisco Application Policy Infrastructure Controller=4.2\(7t\)
Cisco Application Policy Infrastructure Controller=4.2\(7u\)
Cisco Application Policy Infrastructure Controller=4.2\(7v\)
Cisco Application Policy Infrastructure Controller=4.2\(7w\)
Cisco Application Policy Infrastructure Controller=5.0\(1k\)
Cisco Application Policy Infrastructure Controller=5.0\(1l\)
Cisco Application Policy Infrastructure Controller=5.0\(2e\)
Cisco Application Policy Infrastructure Controller=5.0\(2h\)
Cisco Application Policy Infrastructure Controller=5.1\(1h\)
Cisco Application Policy Infrastructure Controller=5.1\(2e\)
Cisco Application Policy Infrastructure Controller=5.1\(3e\)
Cisco Application Policy Infrastructure Controller=5.1\(4c\)
Cisco Application Policy Infrastructure Controller=5.2\(1g\)
Cisco Application Policy Infrastructure Controller=5.2\(2e\)
Cisco Application Policy Infrastructure Controller=5.2\(2f\)
Cisco Application Policy Infrastructure Controller=5.2\(2g\)
Cisco Application Policy Infrastructure Controller=5.2\(2h\)
Cisco Application Policy Infrastructure Controller=5.2\(3e\)
Cisco Application Policy Infrastructure Controller=5.2\(3f\)
Cisco Application Policy Infrastructure Controller=5.2\(3g\)
Cisco Application Policy Infrastructure Controller=5.2\(4d\)
Cisco Application Policy Infrastructure Controller=5.2\(4e\)
Cisco Application Policy Infrastructure Controller=5.2\(4f\)
Cisco Application Policy Infrastructure Controller=5.2\(4h\)
Cisco Application Policy Infrastructure Controller=5.2\(5c\)
Cisco Application Policy Infrastructure Controller=5.2\(5d\)
Cisco Application Policy Infrastructure Controller=5.2\(5e\)
Cisco Application Policy Infrastructure Controller=5.2\(6e\)
Cisco Application Policy Infrastructure Controller=5.2\(6g\)
Cisco Application Policy Infrastructure Controller=5.2\(6h\)
Cisco Application Policy Infrastructure Controller=5.2\(7f\)
Cisco Application Policy Infrastructure Controller=5.2\(7g\)
Cisco Application Policy Infrastructure Controller=5.2\(8d\)
Cisco Application Policy Infrastructure Controller=5.2\(8e\)
Cisco Application Policy Infrastructure Controller=5.2\(8f\)
Cisco Application Policy Infrastructure Controller=5.2\(8g\)
Cisco Application Policy Infrastructure Controller=5.2\(8h\)
Cisco Application Policy Infrastructure Controller=5.2\(8i\)
Cisco Application Policy Infrastructure Controller=5.3\(1d\)
Cisco Application Policy Infrastructure Controller=5.3\(2a\)
Cisco Application Policy Infrastructure Controller=5.3\(2b\)
Cisco Application Policy Infrastructure Controller=5.3\(2c\)
Cisco Application Policy Infrastructure Controller=5.3\(2d\)
Cisco Application Policy Infrastructure Controller=5.3\(2e\)
Cisco Application Policy Infrastructure Controller=6.0\(1g\)
Cisco Application Policy Infrastructure Controller=6.0\(1j\)
Cisco Application Policy Infrastructure Controller=6.0\(2h\)
Cisco Application Policy Infrastructure Controller=6.0\(2j\)
Cisco Application Policy Infrastructure Controller=6.0\(3d\)
Cisco Application Policy Infrastructure Controller=6.0\(3e\)
Cisco Application Policy Infrastructure Controller=6.0\(3g\)
Cisco Application Policy Infrastructure Controller=6.0\(4c\)
Cisco Application Policy Infrastructure Controller=6.0\(5h\)
Cisco Application Policy Infrastructure Controller=6.0\(5j\)
Cisco Application Policy Infrastructure Controller=6.0\(6c\)
Cisco Application Policy Infrastructure Controller=6.0\(7e\)
Cisco Application Policy Infrastructure Controller=6.0\(8d\)
Cisco Application Policy Infrastructure Controller=6.1\(1f\)
Event History
Feb 26, 2025
CVE Published
via MITRE·04:23 PM
Data Sourced
via MITRE·04:23 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20118?
CVE-2025-20118 is classified as a high-severity vulnerability due to its potential impact on sensitive information.
2
How do I fix CVE-2025-20118?
To mitigate CVE-2025-20118, ensure that your Cisco APIC software is updated to the latest version recommended by Cisco.
3
Who is affected by CVE-2025-20118?
CVE-2025-20118 affects systems running Cisco Application Policy Infrastructure Controller with administrative access.
4
What kind of attack can exploit CVE-2025-20118?
CVE-2025-20118 can be exploited by an authenticated local attacker with valid administrative credentials.
5
What type of information is at risk due to CVE-2025-20118?
CVE-2025-20118 could allow an attacker to access sensitive information stored on the affected Cisco APIC device.