CVE-2025-20184

HIGH EPSS 55.2%
Published Feb 5, 20251y ago · Modified Jun 17, 20261w ago
7.2 CVSS 3.1
High
Find Similar
Published Feb 5, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance could allow an authenticated, remote attacker to perform command injection attacks against an affected device. The attacker must authenticate with valid administrator credentials. This vulnerability is due to insufficient validation of XML configuration files by an affected device. An attacker could exploit this vulnerability by uploading a crafted XML configuration file. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.

CVSS Details

Base Score
7.2
Exploitability
1.2
Impact
5.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required High
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
55.2% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 2

CWE-20 Improper Input Validation Validation
CWE-77 Command Injection Injection

Affected Products 81

VendorProductVersionRange
ciscoasyncos13.0.0-392any
ciscoasyncos13.0.5-007any
ciscoasyncos13.5.1-277any
ciscoasyncos13.5.4-038any
ciscoasyncos14.0.0-698any
ciscoasyncos14.2.0-620any
ciscoasyncos14.2.1-020any
ciscoasyncos14.3.0-032any
ciscoasyncos15.0.0-104any
ciscoasyncos15.0.1-030any
ciscoasyncos15.0.3-002any
ciscoasyncos15.5.0-048any
ciscoasyncos15.5.1-055any
ciscoasyncos15.5.2-018any
ciscoasyncos15.5.3-022any
ciscosecure_email_gateway_virtual_appliance_c100v*any
ciscosecure_email_gateway_virtual_appliance_c300v*any
ciscosecure_email_gateway_virtual_appliance_c600v*any
ciscosecure_email_gateway_c195*any
ciscosecure_email_gateway_c395*any
ciscosecure_email_gateway_c695*any
ciscoasyncos11.8.0-414any
ciscoasyncos11.8.0-429any
ciscoasyncos11.8.0-453any
ciscoasyncos11.8.1-023any
ciscoasyncos11.8.3-018any
ciscoasyncos11.8.3-021any
ciscoasyncos11.8.4-004any
ciscoasyncos12.0.1-268any
ciscoasyncos12.0.1-334any
ciscoasyncos12.0.2-004any
ciscoasyncos12.0.2-012any
ciscoasyncos12.0.3-005any
ciscoasyncos12.0.3-007any
ciscoasyncos12.0.4-002any
ciscoasyncos12.0.5-011any
ciscoasyncos12.5.1-011any
ciscoasyncos12.5.1-043any
ciscoasyncos12.5.2-007any
ciscoasyncos12.5.2-011any
ciscoasyncos12.5.3-002any
ciscoasyncos12.5.4-005any
ciscoasyncos12.5.4-011any
ciscoasyncos12.5.5-004any
ciscoasyncos12.5.5-005any
ciscoasyncos12.5.5-008any
ciscoasyncos12.5.6-008any
ciscoasyncos14.0.1-014any
ciscoasyncos14.0.1-040any
ciscoasyncos14.0.1-053any
ciscoasyncos14.0.1-503any
ciscoasyncos14.0.2-012any
ciscoasyncos14.0.3-014any
ciscoasyncos14.0.4-005any
ciscoasyncos14.0.5-007any
ciscoasyncos14.1.0-032any
ciscoasyncos14.1.0-041any
ciscoasyncos14.1.0-047any
ciscoasyncos14.5.0-498any
ciscoasyncos14.5.0-537any
ciscoasyncos14.5.0-673any
ciscoasyncos14.5.1-008any
ciscoasyncos14.5.1-016any
ciscoasyncos14.5.1-510any
ciscoasyncos14.5.1-607any
ciscoasyncos14.5.2-011any
ciscoasyncos14.5.3-033any
ciscoasyncos15.0.0-322any
ciscoasyncos15.0.0-355any
ciscoasyncos15.0.1-004any
ciscoasyncos15.1.0-287any
ciscoasyncos15.2.0-116any
ciscoasyncos15.2.0-164any
ciscoasyncos15.2.1-011any
ciscosecure_web_appliance_virtual_s1000v*any
ciscosecure_web_appliance_virtual_s100v*any
ciscosecure_web_appliance_virtual_s300v*any
ciscosecure_web_appliance_virtual_s600v*any
ciscosecure_web_appliance_s196*any
ciscosecure_web_appliance_s396*any
ciscosecure_web_appliance_s696*any

References 1

  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-wsa-multi-yKUJhS34
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.