Privilege Escalation Vulnerability in Cisco Catalyst SD-WAN Manager

CVE-2025-20122

What is CVE-2025-20122?

A vulnerability exists within the CLI of Cisco Catalyst SD-WAN Manager that permits an authenticated local attacker to escalate their privileges to that of the root user on the underlying operating system. This issue arises from inadequate input validation, allowing an authenticated user with read-only rights to craft a malicious request aimed at the CLI. If successful, this exploit grants the attacker unauthorized root access, compromising the system’s integrity and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References