Remote Command Execution Vulnerability in Cisco Secure Network Analytics

CVE-2025-20178

What is CVE-2025-20178?

A vulnerability in the web-based management interface of Cisco Secure Network Analytics allows an authenticated remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating system. This issue arises from insufficient integrity checks within device backup files. By crafting a malicious backup file and restoring it to the affected device, the attacker can gain shell access with root privileges, potentially leading to severe security breaches.

References