CVE-2025-20119
MEDIUM EPSS 0.8%
Published Feb 26, 20251y ago · Modified Jun 17, 20262w ago
5.7 CVSS 3.1
Published Feb 26, 2025 1y ago
Last Modified Jun 17, 2026 2w ago
Description
A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to a race condition with handling system files. An attacker could exploit this vulnerability by doing specific operations on the file system. A successful exploit could allow the attacker to overwrite system files, which could lead to the device being in an inconsistent state and cause a DoS condition.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H Attack Vector Local
Attack Complexity High
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality None
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
0.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-362
Affected Products 128
| Vendor | Product | Version | Range |
|---|---|---|---|
| cisco | application_policy_infrastructure_controller | 3.2\(1l\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(1m\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(2l\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(2o\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(3i\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(3j\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(3n\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(3o\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(3r\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(3s\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(4d\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(4e\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(5d\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(5e\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(5f\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(6i\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(7f\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(7k\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(8d\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(9b\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(9f\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(9h\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(10e\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(10f\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(10g\) | any |
| cisco | application_policy_infrastructure_controller | 3.2\(41d\) | any |
| cisco | application_policy_infrastructure_controller | 4.0\(1h\) | any |
| cisco | application_policy_infrastructure_controller | 4.0\(2c\) | any |
| cisco | application_policy_infrastructure_controller | 4.0\(3c\) | any |
| cisco | application_policy_infrastructure_controller | 4.0\(3d\) | any |
| cisco | application_policy_infrastructure_controller | 4.1\(1a\) | any |
| cisco | application_policy_infrastructure_controller | 4.1\(1i\) | any |
| cisco | application_policy_infrastructure_controller | 4.1\(1j\) | any |
| cisco | application_policy_infrastructure_controller | 4.1\(1k\) | any |
| cisco | application_policy_infrastructure_controller | 4.1\(1l\) | any |
| cisco | application_policy_infrastructure_controller | 4.1\(2g\) | any |
| cisco | application_policy_infrastructure_controller | 4.1\(2m\) | any |
| cisco | application_policy_infrastructure_controller | 4.1\(2o\) | any |
| cisco | application_policy_infrastructure_controller | 4.1\(2s\) | any |
| cisco | application_policy_infrastructure_controller | 4.1\(2u\) | any |
| cisco | application_policy_infrastructure_controller | 4.1\(2w\) | any |
| cisco | application_policy_infrastructure_controller | 4.1\(2x\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(1g\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(1i\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(1j\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(1l\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(2e\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(2f\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(2g\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(3j\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(3l\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(3n\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(3q\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(4i\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(4k\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(4o\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(4p\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(5k\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(5l\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(5n\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(6d\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(6g\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(6h\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(6l\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(6o\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(7f\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(7l\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(7q\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(7r\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(7s\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(7t\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(7u\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(7v\) | any |
| cisco | application_policy_infrastructure_controller | 4.2\(7w\) | any |
| cisco | application_policy_infrastructure_controller | 5.0\(1k\) | any |
| cisco | application_policy_infrastructure_controller | 5.0\(1l\) | any |
| cisco | application_policy_infrastructure_controller | 5.0\(2e\) | any |
| cisco | application_policy_infrastructure_controller | 5.0\(2h\) | any |
| cisco | application_policy_infrastructure_controller | 5.1\(1h\) | any |
| cisco | application_policy_infrastructure_controller | 5.1\(2e\) | any |
| cisco | application_policy_infrastructure_controller | 5.1\(3e\) | any |
| cisco | application_policy_infrastructure_controller | 5.1\(4c\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(1g\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(2e\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(2f\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(2g\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(2h\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(3e\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(3f\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(3g\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(4d\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(4e\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(4f\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(4h\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(5c\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(5d\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(5e\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(6e\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(6g\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(6h\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(7f\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(7g\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(8d\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(8e\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(8f\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(8g\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(8h\) | any |
| cisco | application_policy_infrastructure_controller | 5.2\(8i\) | any |
| cisco | application_policy_infrastructure_controller | 5.3\(1d\) | any |
| cisco | application_policy_infrastructure_controller | 5.3\(2a\) | any |
| cisco | application_policy_infrastructure_controller | 5.3\(2b\) | any |
| cisco | application_policy_infrastructure_controller | 5.3\(2c\) | any |
| cisco | application_policy_infrastructure_controller | 5.3\(2d\) | any |
| cisco | application_policy_infrastructure_controller | 5.3\(2e\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(1g\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(1j\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(2h\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(2j\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(3d\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(3e\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(3g\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(4c\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(5h\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(5j\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(6c\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(7e\) | any |
| cisco | application_policy_infrastructure_controller | 6.0\(8d\) | any |
| cisco | application_policy_infrastructure_controller | 6.1\(1f\) | any |
References 1
- sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-multi-vulns-9ummtg5
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.