Certificate Validation Flaw in Cisco Catalyst SD-WAN Manager

CVE-2025-20157

Summary

A flaw in certificate validation processing in Cisco Catalyst SD-WAN Manager allows unauthenticated remote attackers to access sensitive information. This vulnerability arises from the improper validation of certificates utilized by the Smart Licensing feature. An attacker positioned advantageously on the network could exploit this weakness by intercepting Internet traffic, potentially revealing sensitive data, including device credentials that connect to Cisco cloud services. Organizations using this product are advised to implement security measures to mitigate potential risks.

References