ByteOS Network

CVE Vulnerability Details :

CVE-2025-20201

PUBLISHED

More Info Official Page

Assigner-cisco

Assigner Org ID-d1c1063e-7a18-46af-9102-31f8928bc633

Published At-07 May, 2025 | 17:44

Updated At-26 Feb, 2026 | 18:28

▼CVE Numbering Authority (CNA)

A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with privilege level 15 to elevate privileges to root on the underlying operating system of an affected device. This vulnerability is due to insufficient input validation when processing specific configuration commands. An attacker could exploit this vulnerability by including crafted input in specific configuration commands. A successful exploit could allow the attacker to elevate privileges to root on the underlying operating system of an affected device. The security impact rating (SIR) of this advisory has been raised to High because an attacker could gain access to the underlying operating system of the affected device and perform potentially undetected actions. Note: The attacker must have privileges to enter configuration mode on the affected device. This is usually referred to as privilege level 15.

Affected Products

Vendor

Cisco Systems, Inc.

Product

Cisco IOS XE Software

Versions

Affected

3.7.0S
3.7.1S
3.7.2S
3.7.3S
3.7.4S
3.7.5S
3.7.6S
3.7.7S
3.7.4aS
3.7.2tS
3.7.0bS
3.7.1aS
3.3.0SG
3.3.2SG
3.3.1SG
3.8.0S
3.8.1S
3.8.2S
3.9.1S
3.9.0S
3.9.2S
3.9.1aS
3.9.0aS
3.2.0SE
3.2.1SE
3.2.2SE
3.2.3SE
3.3.0SE
3.3.1SE
3.3.2SE
3.3.3SE
3.3.4SE
3.3.5SE
3.4.0SG
3.4.2SG
3.4.1SG
3.4.3SG
3.4.4SG
3.4.5SG
3.4.6SG
3.4.7SG
3.4.8SG
3.5.0E
3.5.1E
3.5.2E
3.5.3E
3.11.1S
3.11.2S
3.11.0S
3.11.3S
3.11.4S
3.12.0S
3.12.1S
3.12.2S
3.12.3S
3.12.0aS
3.12.4S
3.13.0S
3.13.1S
3.13.2S
3.13.3S
3.13.4S
3.13.5S
3.13.2aS
3.13.0aS
3.13.5aS
3.13.6S
3.13.7S
3.13.6aS
3.13.7aS
3.13.8S
3.13.9S
3.13.10S
3.6.0E
3.6.1E
3.6.2aE
3.6.2E
3.6.3E
3.6.4E
3.6.5E
3.6.6E
3.6.5aE
3.6.5bE
3.6.7E
3.6.8E
3.6.7bE
3.6.9E
3.6.10E
3.14.0S
3.14.1S
3.14.2S
3.14.3S
3.14.4S
3.15.0S
3.15.1S
3.15.2S
3.15.1cS
3.15.3S
3.15.4S
3.7.0E
3.7.1E
3.7.2E
3.7.3E
3.7.4E
3.7.5E
3.16.0S
3.16.1S
3.16.1aS
3.16.2S
3.16.2aS
3.16.0cS
3.16.3S
3.16.2bS
3.16.3aS
3.16.4S
3.16.4aS
3.16.4bS
3.16.5S
3.16.4dS
3.16.6S
3.16.7S
3.16.6bS
3.16.7aS
3.16.7bS
3.16.8S
3.16.9S
3.16.10S
3.17.0S
3.17.1S
3.17.2S
3.17.1aS
3.17.3S
3.17.4S
16.1.1
16.1.2
16.1.3
16.2.1
16.2.2
3.8.0E
3.8.1E
3.8.2E
3.8.3E
3.8.4E
3.8.5E
3.8.5aE
3.8.6E
3.8.7E
3.8.8E
3.8.9E
3.8.10E
16.3.1
16.3.2
16.3.3
16.3.1a
16.3.4
16.3.5
16.3.5b
16.3.6
16.3.7
16.3.8
16.3.9
16.3.10
16.3.11
16.4.1
16.4.2
16.4.3
16.5.1
16.5.1a
16.5.1b
16.5.2
16.5.3
3.18.0aS
3.18.0S
3.18.1S
3.18.2S
3.18.3S
3.18.4S
3.18.0SP
3.18.1SP
3.18.1aSP
3.18.1bSP
3.18.1cSP
3.18.2SP
3.18.2aSP
3.18.3SP
3.18.4SP
3.18.3aSP
3.18.3bSP
3.18.5SP
3.18.6SP
3.18.7SP
3.18.8aSP
3.18.9SP
3.9.0E
3.9.1E
3.9.2E
16.6.1
16.6.2
16.6.3
16.6.4
16.6.5
16.6.4a
16.6.5a
16.6.6
16.6.7
16.6.8
16.6.9
16.6.10
16.7.1
16.7.1a
16.7.1b
16.7.2
16.7.3
16.7.4
16.8.1
16.8.1a
16.8.1b
16.8.1s
16.8.1c
16.8.1d
16.8.2
16.8.1e
16.8.3
16.9.1
16.9.2
16.9.1a
16.9.1b
16.9.1s
16.9.3
16.9.4
16.9.3a
16.9.5
16.9.5f
16.9.6
16.9.7
16.9.8
16.10.1
16.10.1a
16.10.1b
16.10.1s
16.10.1c
16.10.1e
16.10.1d
16.10.2
16.10.1f
16.10.1g
16.10.3
3.10.0E
3.10.1E
3.10.0cE
3.10.2E
3.10.3E
16.11.1
16.11.1a
16.11.1b
16.11.2
16.11.1s
16.12.1
16.12.1s
16.12.1a
16.12.1c
16.12.1w
16.12.2
16.12.1y
16.12.2a
16.12.3
16.12.8
16.12.2s
16.12.1x
16.12.1t
16.12.4
16.12.3s
16.12.3a
16.12.4a
16.12.5
16.12.6
16.12.1z1
16.12.5a
16.12.5b
16.12.1z2
16.12.6a
16.12.7
16.12.9
16.12.10
16.12.10a
16.12.11
16.12.12
3.11.0E
3.11.1E
3.11.2E
3.11.3E
3.11.1aE
3.11.4E
3.11.3aE
3.11.5E
3.11.6E
3.11.7E
3.11.8E
3.11.9E
3.11.10E
3.11.11E
17.1.1
17.1.1a
17.1.1s
17.1.1t
17.1.3
17.2.1
17.2.1r
17.2.1a
17.2.1v
17.2.2
17.2.3
17.3.1
17.3.2
17.3.3
17.3.1a
17.3.1w
17.3.2a
17.3.1x
17.3.1z
17.3.4
17.3.5
17.3.4a
17.3.6
17.3.4b
17.3.4c
17.3.5a
17.3.5b
17.3.7
17.3.8
17.3.8a
17.4.1
17.4.2
17.4.1a
17.4.1b
17.4.2a
17.5.1
17.5.1a
17.6.1
17.6.2
17.6.1w
17.6.1a
17.6.1x
17.6.3
17.6.1y
17.6.1z
17.6.3a
17.6.4
17.6.1z1
17.6.5
17.6.6
17.6.6a
17.6.5a
17.6.7
17.6.8
17.6.8a
17.7.1
17.7.1a
17.7.1b
17.7.2
17.10.1
17.10.1a
17.10.1b
17.8.1
17.8.1a
17.9.1
17.9.1w
17.9.2
17.9.1a
17.9.1x
17.9.1y
17.9.3
17.9.2a
17.9.1x1
17.9.3a
17.9.4
17.9.1y1
17.9.5
17.9.4a
17.9.5a
17.9.5b
17.9.6
17.9.6a
17.9.5e
17.9.5f
17.11.1
17.11.1a
17.12.1
17.12.1w
17.12.1a
17.12.1x
17.12.2
17.12.3
17.12.2a
17.12.1y
17.12.1z
17.12.4
17.12.3a
17.12.1z1
17.12.4a
17.12.4b
17.13.1
17.13.1a
17.14.1
17.14.1a
17.11.99SW
17.15.1
17.15.1w
17.15.1a
17.15.1b

Problem Types

Type	CWE ID	Description
cwe	CWE-754	Improper Check for Unusual or Exceptional Conditions

Type: cwe

CWE ID: CWE-754

Description: Improper Check for Unusual or Exceptional Conditions

Metrics

Version	Base score	Base severity	Vector
3.1	6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:N

Version: 3.1

Base score: 6.7

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:N

Exploits

The Cisco Product Security Incident Response Team is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.

References

Hyperlink	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-privesc-su7scvdp	N/A

Hyperlink: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-privesc-su7scvdp

Resource: N/A

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References