CVE-2025-20117— Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability

Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability

A vulnerability in the CLI of Cisco APIC could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by including crafted input as the argument of an affected CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with the privileges of root.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N

在命令中使用的特殊元素转义处理不恰当(命令注入)

Cisco APIC 命令注入漏洞

Cisco APIC是美国思科（Cisco）公司的一款用于 Cisco ACI 交换矩阵自动化和管理的软件。可进行策略实施、健康监控、网络配置等。 Cisco APIC存在命令注入漏洞，该漏洞源于CLI命令参数验证不足，允许本地认证用户以root权限执行任意命令。

N/A

N/A