CVE-2025-20185: Cisco Secure Email and Web Manager, Secure Email Gateway, and Secure Web Appliance Privilege Escalation Vulnerability
First published: Wed Feb 05 2025(Updated: )
A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authenticated, local attacker to elevate privileges to root. The attacker must authenticate with valid administrator credentials. This vulnerability is due to an architectural flaw in the password generation algorithm for the remote access functionality. An attacker could exploit this vulnerability by generating a temporary password for the service account. A successful exploit could allow the attacker to execute arbitrary commands as root and access the underlying operating system. Note: The Security Impact Rating (SIR) for this vulnerability is Medium due to the unrestricted scope of information that is accessible to an attacker.
Credit: psirt@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco AsyncOS software | ||
| Cisco Secure Email and Web Manager Firmware | ||
| Cisco AsyncOS for Secure Email Gateway | ||
| Cisco Secure Web Appliance |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-20185?
CVE-2025-20185 has a high severity rating due to its potential to allow local authenticated attackers to elevate their privileges to root.
How do I fix CVE-2025-20185?
To fix CVE-2025-20185, apply the latest security firmware updates provided by Cisco for affected products.
Who is affected by CVE-2025-20185?
CVE-2025-20185 affects users of Cisco AsyncOS Software, Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance.
What type of attack is associated with CVE-2025-20185?
The attack associated with CVE-2025-20185 involves privilege escalation by an authenticated local user.
When was CVE-2025-20185 reported?
CVE-2025-20185 was reported as a security vulnerability in Cisco's security advisory for their product lines.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/weakness
- agent/first-publish-date
- agent/references
- agent/description
- agent/type
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- agent/author
- agent/source
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco asyncos software
- canonical/cisco secure email and web manager firmware
- canonical/cisco asyncos for secure email gateway
- canonical/cisco secure web appliance