Privilege Escalation Vulnerability in Cisco Catalyst Center Virtual Appliance

CVE-2025-20341

What is CVE-2025-20341?

A vulnerability exists in the Cisco Catalyst Center Virtual Appliance that permits an authenticated remote attacker to escalate their privileges to Administrator. This flaw arises from inadequate validation of user-supplied input, enabling an attacker to exploit the system by sending a tailored HTTP request. Should the attack succeed, it provides the attacker with the ability to make unauthorized changes to the system, including the capacity to create new user accounts or enhance their own privileges. To successfully exploit this vulnerability, the attacker needs valid credentials corresponding to a user account with at least Observer permissions.

References