Privilege Escalation Vulnerability in Cisco IOS XE Software

CVE-2025-20200

Summary

A vulnerability within the command-line interface (CLI) of Cisco's IOS XE Software enables an authenticated local attacker with privilege level 15 to escalate their privileges to root on the device's underlying operating system. This issue arises from inadequate input validation when handling specific configuration commands. By exploiting this flaw with carefully crafted inputs, an attacker could potentially gain unauthorized access to the device's core system, allowing them to perform actions without detection. Successful exploitation demands that the attacker first possess configuration mode access.

References