Command Injection Vulnerability in Cisco IOS XE Software's Web Management Interface

CVE-2025-20186

Summary

A command injection vulnerability exists in the web-based management interface of Cisco IOS XE Software, allowing an authenticated remote attacker with a lobby ambassador user account to execute arbitrary CLI commands. This risk arises from inadequate input validation, permitting crafted input to be sent to the interface. A successful attack could enable execution of commands with privilege level 15, provided the attacker possesses the credentials for the lobby ambassador account, which is not configured by default. Organizations using affected Cisco devices should take steps to mitigate this threat.

References