CVE-2025-20213: Cisco Catalyst SDWAN Manager Arbitrary File Overwrite Vulnerability
First published: Wed May 07 2025(Updated: )
A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials with CLI access on the affected system. This vulnerability is due to improper access controls on files that are on the local file system. An attacker could exploit this vulnerability by running a series of crafted commands on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device and gain privileges of the root user. To exploit this vulnerability, an attacker would need to have CLI access as a low-privilege user.
Credit: psirt@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Catalyst SD-WAN Manager |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-20213?
CVE-2025-20213 has been classified as a high severity vulnerability.
How do I fix CVE-2025-20213?
To mitigate CVE-2025-20213, apply the latest patches released by Cisco for the Catalyst SD-WAN Manager.
Who is affected by CVE-2025-20213?
CVE-2025-20213 affects users of Cisco Catalyst SD-WAN Manager with authenticated access.
What type of attack does CVE-2025-20213 enable?
CVE-2025-20213 enables an authenticated, local attacker to overwrite arbitrary files on the device's file system.
Is CVE-2025-20213 exploitable remotely?
No, CVE-2025-20213 requires local access to the affected device for exploitation.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/title
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/severity
- agent/author
- agent/source
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco catalyst sd-wan manager