CVE-2025-20193: OS Command Injection
A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privileged, remote attacker to perform an injection attack against an affected device.r This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to read files from the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-20193?
CVE-2025-20193 has been classified as a high-severity vulnerability due to its potential impact on affected devices.
How do I fix CVE-2025-20193?
To fix CVE-2025-20193, ensure that you apply the latest security updates and patches provided by Cisco for your IOS XE Software.
Who is affected by CVE-2025-20193?
CVE-2025-20193 affects devices running vulnerable versions of Cisco IOS XE Software with a web-based management interface.
What kind of attack can be performed exploiting CVE-2025-20193?
An attacker can perform an injection attack against an affected device due to the insufficient input validation associated with CVE-2025-20193.
Is CVE-2025-20193 a remote vulnerability?
Yes, CVE-2025-20193 allows low-privileged remote attackers to exploit the vulnerability if they have authenticated access.