Privilege Escalation Vulnerability in Cisco Catalyst SD-WAN Manager

CVE-2025-20122

Summary

A vulnerability exists within the CLI of Cisco Catalyst SD-WAN Manager that permits an authenticated local attacker to escalate their privileges to that of the root user on the underlying operating system. This issue arises from inadequate input validation, allowing an authenticated user with read-only rights to craft a malicious request aimed at the CLI. If successful, this exploit grants the attacker unauthorized root access, compromising the system’s integrity and security.

References