CVE-2025-20119: Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability
Published Feb 26, 2025
·Updated
A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to a race condition with handling system files. An attacker could exploit this vulnerability by doing specific operations on the file system. A successful exploit could allow the attacker to overwrite system files, which could lead to the device being in an inconsistent state and cause a DoS condition.
Affected Software
129 affected components
Cisco Application Policy Infrastructure Controller
Cisco Application Policy Infrastructure Controller=3.2\(1l\)
Cisco Application Policy Infrastructure Controller=3.2\(1m\)
Cisco Application Policy Infrastructure Controller=3.2\(2l\)
Cisco Application Policy Infrastructure Controller=3.2\(2o\)
Cisco Application Policy Infrastructure Controller=3.2\(3i\)
Cisco Application Policy Infrastructure Controller=3.2\(3j\)
Cisco Application Policy Infrastructure Controller=3.2\(3n\)
Cisco Application Policy Infrastructure Controller=3.2\(3o\)
Cisco Application Policy Infrastructure Controller=3.2\(3r\)
Cisco Application Policy Infrastructure Controller=3.2\(3s\)
Cisco Application Policy Infrastructure Controller=3.2\(4d\)
Cisco Application Policy Infrastructure Controller=3.2\(4e\)
Cisco Application Policy Infrastructure Controller=3.2\(5d\)
Cisco Application Policy Infrastructure Controller=3.2\(5e\)
Cisco Application Policy Infrastructure Controller=3.2\(5f\)
Cisco Application Policy Infrastructure Controller=3.2\(6i\)
Cisco Application Policy Infrastructure Controller=3.2\(7f\)
Cisco Application Policy Infrastructure Controller=3.2\(7k\)
Cisco Application Policy Infrastructure Controller=3.2\(8d\)
Cisco Application Policy Infrastructure Controller=3.2\(9b\)
Cisco Application Policy Infrastructure Controller=3.2\(9f\)
Cisco Application Policy Infrastructure Controller=3.2\(9h\)
Cisco Application Policy Infrastructure Controller=3.2\(10e\)
Cisco Application Policy Infrastructure Controller=3.2\(10f\)
Cisco Application Policy Infrastructure Controller=3.2\(10g\)
Cisco Application Policy Infrastructure Controller=3.2\(41d\)
Cisco Application Policy Infrastructure Controller=4.0\(1h\)
Cisco Application Policy Infrastructure Controller=4.0\(2c\)
Cisco Application Policy Infrastructure Controller=4.0\(3c\)
Cisco Application Policy Infrastructure Controller=4.0\(3d\)
Cisco Application Policy Infrastructure Controller=4.1\(1a\)
Cisco Application Policy Infrastructure Controller=4.1\(1i\)
Cisco Application Policy Infrastructure Controller=4.1\(1j\)
Cisco Application Policy Infrastructure Controller=4.1\(1k\)
Cisco Application Policy Infrastructure Controller=4.1\(1l\)
Cisco Application Policy Infrastructure Controller=4.1\(2g\)
Cisco Application Policy Infrastructure Controller=4.1\(2m\)
Cisco Application Policy Infrastructure Controller=4.1\(2o\)
Cisco Application Policy Infrastructure Controller=4.1\(2s\)
Cisco Application Policy Infrastructure Controller=4.1\(2u\)
Cisco Application Policy Infrastructure Controller=4.1\(2w\)
Cisco Application Policy Infrastructure Controller=4.1\(2x\)
Cisco Application Policy Infrastructure Controller=4.2\(1g\)
Cisco Application Policy Infrastructure Controller=4.2\(1i\)
Cisco Application Policy Infrastructure Controller=4.2\(1j\)
Cisco Application Policy Infrastructure Controller=4.2\(1l\)
Cisco Application Policy Infrastructure Controller=4.2\(2e\)
Cisco Application Policy Infrastructure Controller=4.2\(2f\)
Cisco Application Policy Infrastructure Controller=4.2\(2g\)
Cisco Application Policy Infrastructure Controller=4.2\(3j\)
Cisco Application Policy Infrastructure Controller=4.2\(3l\)
Cisco Application Policy Infrastructure Controller=4.2\(3n\)
Cisco Application Policy Infrastructure Controller=4.2\(3q\)
Cisco Application Policy Infrastructure Controller=4.2\(4i\)
Cisco Application Policy Infrastructure Controller=4.2\(4k\)
Cisco Application Policy Infrastructure Controller=4.2\(4o\)
Cisco Application Policy Infrastructure Controller=4.2\(4p\)
Cisco Application Policy Infrastructure Controller=4.2\(5k\)
Cisco Application Policy Infrastructure Controller=4.2\(5l\)
Cisco Application Policy Infrastructure Controller=4.2\(5n\)
Cisco Application Policy Infrastructure Controller=4.2\(6d\)
Cisco Application Policy Infrastructure Controller=4.2\(6g\)
Cisco Application Policy Infrastructure Controller=4.2\(6h\)
Cisco Application Policy Infrastructure Controller=4.2\(6l\)
Cisco Application Policy Infrastructure Controller=4.2\(6o\)
Cisco Application Policy Infrastructure Controller=4.2\(7f\)
Cisco Application Policy Infrastructure Controller=4.2\(7l\)
Cisco Application Policy Infrastructure Controller=4.2\(7q\)
Cisco Application Policy Infrastructure Controller=4.2\(7r\)
Cisco Application Policy Infrastructure Controller=4.2\(7s\)
Cisco Application Policy Infrastructure Controller=4.2\(7t\)
Cisco Application Policy Infrastructure Controller=4.2\(7u\)
Cisco Application Policy Infrastructure Controller=4.2\(7v\)
Cisco Application Policy Infrastructure Controller=4.2\(7w\)
Cisco Application Policy Infrastructure Controller=5.0\(1k\)
Cisco Application Policy Infrastructure Controller=5.0\(1l\)
Cisco Application Policy Infrastructure Controller=5.0\(2e\)
Cisco Application Policy Infrastructure Controller=5.0\(2h\)
Cisco Application Policy Infrastructure Controller=5.1\(1h\)
Cisco Application Policy Infrastructure Controller=5.1\(2e\)
Cisco Application Policy Infrastructure Controller=5.1\(3e\)
Cisco Application Policy Infrastructure Controller=5.1\(4c\)
Cisco Application Policy Infrastructure Controller=5.2\(1g\)
Cisco Application Policy Infrastructure Controller=5.2\(2e\)
Cisco Application Policy Infrastructure Controller=5.2\(2f\)
Cisco Application Policy Infrastructure Controller=5.2\(2g\)
Cisco Application Policy Infrastructure Controller=5.2\(2h\)
Cisco Application Policy Infrastructure Controller=5.2\(3e\)
Cisco Application Policy Infrastructure Controller=5.2\(3f\)
Cisco Application Policy Infrastructure Controller=5.2\(3g\)
Cisco Application Policy Infrastructure Controller=5.2\(4d\)
Cisco Application Policy Infrastructure Controller=5.2\(4e\)
Cisco Application Policy Infrastructure Controller=5.2\(4f\)
Cisco Application Policy Infrastructure Controller=5.2\(4h\)
Cisco Application Policy Infrastructure Controller=5.2\(5c\)
Cisco Application Policy Infrastructure Controller=5.2\(5d\)
Cisco Application Policy Infrastructure Controller=5.2\(5e\)
Cisco Application Policy Infrastructure Controller=5.2\(6e\)
Cisco Application Policy Infrastructure Controller=5.2\(6g\)
Cisco Application Policy Infrastructure Controller=5.2\(6h\)
Cisco Application Policy Infrastructure Controller=5.2\(7f\)
Cisco Application Policy Infrastructure Controller=5.2\(7g\)
Cisco Application Policy Infrastructure Controller=5.2\(8d\)
Cisco Application Policy Infrastructure Controller=5.2\(8e\)
Cisco Application Policy Infrastructure Controller=5.2\(8f\)
Cisco Application Policy Infrastructure Controller=5.2\(8g\)
Cisco Application Policy Infrastructure Controller=5.2\(8h\)
Cisco Application Policy Infrastructure Controller=5.2\(8i\)
Cisco Application Policy Infrastructure Controller=5.3\(1d\)
Cisco Application Policy Infrastructure Controller=5.3\(2a\)
Cisco Application Policy Infrastructure Controller=5.3\(2b\)
Cisco Application Policy Infrastructure Controller=5.3\(2c\)
Cisco Application Policy Infrastructure Controller=5.3\(2d\)
Cisco Application Policy Infrastructure Controller=5.3\(2e\)
Cisco Application Policy Infrastructure Controller=6.0\(1g\)
Cisco Application Policy Infrastructure Controller=6.0\(1j\)
Cisco Application Policy Infrastructure Controller=6.0\(2h\)
Cisco Application Policy Infrastructure Controller=6.0\(2j\)
Cisco Application Policy Infrastructure Controller=6.0\(3d\)
Cisco Application Policy Infrastructure Controller=6.0\(3e\)
Cisco Application Policy Infrastructure Controller=6.0\(3g\)
Cisco Application Policy Infrastructure Controller=6.0\(4c\)
Cisco Application Policy Infrastructure Controller=6.0\(5h\)
Cisco Application Policy Infrastructure Controller=6.0\(5j\)
Cisco Application Policy Infrastructure Controller=6.0\(6c\)
Cisco Application Policy Infrastructure Controller=6.0\(7e\)
Cisco Application Policy Infrastructure Controller=6.0\(8d\)
Cisco Application Policy Infrastructure Controller=6.1\(1f\)
Event History
Feb 26, 2025
CVE Published
via MITRE·04:23 PM
Data Sourced
via MITRE·04:23 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20119?
CVE-2025-20119 has a severity rating that indicates it could lead to a Denial of Service (DoS) due to critical system file overwrites.
2
How do I fix CVE-2025-20119?
To fix CVE-2025-20119, ensure you apply the latest security patches provided by Cisco for the APIC system.
3
Who is affected by CVE-2025-20119?
CVE-2025-20119 affects Cisco APIC systems where an authenticated local attacker can exploit file permission issues.
4
What type of attack is possible with CVE-2025-20119?
An authenticated local attacker can exploit CVE-2025-20119 to overwrite critical system files, potentially causing a Denial of Service.
5
What are the prerequisites for exploiting CVE-2025-20119?
To exploit CVE-2025-20119, an attacker must have valid administrative credentials on the affected Cisco APIC system.