Cisco APIC Vulnerability Exposes Sensitive Information to Local Attackers

CVE-2025-20118

Summary

A security flaw in the internal processes of Cisco APIC can enable an authenticated, local attacker to gain access to sensitive data displayed through system CLI commands. This vulnerability stems from insufficient masking mechanisms, which could be exploited through reconnaissance techniques. An attacker with valid administrative credentials can use this weakness to reveal sensitive information that may facilitate further attacks. Cisco has recommended software updates to mitigate this risk, as there are no effective workarounds.

References