CVE-2025-20256
published 2025-05-21CVE-2025-20256: A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow…
PriorityP352high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
0.50%
38.9th percentile
A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating system.
This vulnerability is due to insufficient input validation in specific fields of the web-based management interface. An attacker with valid administrative credentials could exploit this vulnerability by sending crafted input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_secure_network_analytics | — | — |
| cisco | cisco_secure_network_analytics | — | — |
| cisco | cisco_secure_network_analytics | — | — |
| cisco | cisco_secure_network_analytics | — | — |
| cisco | cisco_secure_network_analytics | — | — |
| cisco | secure_network_analytics | — | — |
| cisco | secure_network_analytics | — | — |
| cisco | secure_network_analytics | — | — |
| cisco | secure_network_analytics | — | — |
| cisco | secure_network_analytics | — | — |
| cisco | secure_network_analytics_manager | — | — |
CVSS provenance
nvdv3.17.2HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
vendor_cisco6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Secure Network Analytics Manager Privilege Escalation Vulnerability
vendor_cisco·2025-05-21·CVSS 6.5
CVE-2025-20256 [MEDIUM] CWE-74 Cisco Secure Network Analytics Manager Privilege Escalation Vulnerability
Cisco Secure Network Analytics Manager Privilege Escalation Vulnerability
A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating system.
This vulnerability is due to insufficient input validation in specific fields of the web-based management interface. An attacker with valid administrative credentials could exploit this vulnerability by sending crafted input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.
Cisco has released software updates t
Cisco
Cisco Secure Network Analytics Manager Privilege Escalation Vulnerability
vendor_cisco·CVSS 3.1
CVE-2025-20256 Cisco Secure Network Analytics Manager Privilege Escalation Vulnerability
CVE-2025-20256: Cisco Secure Network Analytics Manager Privilege Escalation Vulnerability
A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating system. This vulnerability is due to insufficient input validation in specific fields of the web-based management interface. An attacker with valid administrative credentials could exploit this vulnerability by sending crafted input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. Cisco has released softw
GHSA
GHSA-w687-qrqx-jr57: A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager cou
ghsa_unreviewed·2025-05-21
CVE-2025-20256 [MEDIUM] CWE-74 GHSA-w687-qrqx-jr57: A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager cou
A vulnerability in the web-based management interface of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with valid administrative credentials to execute arbitrary commands as root on the underlying operating system.
This vulnerability is due to insufficient input validation in specific fields of the web-based management interface. An attacker with valid administrative credentials could exploit this vulnerability by sending crafted input to an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-05-21
Published