This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Cisco fixes 4 vulnerabilities in its products
Cisco fixes 4 vulnerabilities in its products, one of which is critical. A list of vulnerable products and available fixes can be found in the links provided for each vulnerability [1][2][3][4].
An unauthenticated remote attacker can execute code remotely on the affected device due to an error in the processing of SSH messages by the Erlang/OTP server during the authentication phase [1].
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2025-32433 at cve.org, NVD
- CWE-306: Missing Authentication for Critical Function at cwe.mitre.org
The vulnerability was publicly disclosed 22. 4. 2025.
An unauthenticated remote attacker can, due to insufficient input validation when processing meeting links in the Cisco Webex App, trick a user into downloading arbitrary files and subsequently executing arbitrary code with the user's privileges [2].
The vulnerability is present in product:
- *:Cisco Webex App; =44.6; =44.7
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2025-20236 at cve.org, NVD
- CWE-829: Inclusion of Functionality from Untrusted Control Sphere at cwe.mitre.org
The vulnerability was publicly disclosed 16. 4. 2025.
An authenticated remote attacker with administrator credentials can, due to insufficient integrity checking of backups, execute arbitrary commands as root on the Cisco Security Network Analytics system by restoring a backup file [3].
The vulnerability is present in product:
- *:Cisco Secure Network Analytics; =7.5.0; =7.5.1; =7.5.2
CVSS: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
More information:
- CVE-2025-20178 at cve.org, NVD
- CWE-347: Improper Verification of Cryptographic Signature at cwe.mitre.org
The vulnerability was publicly disclosed 16. 4. 2025.
An unauthenticated remote attacker can, as a result of incorrect handling of LDAP authentication requests, discover valid LDAP user accounts in the Cisco Nexus Dashboard system by sending specially crafted requests [4].
The vulnerability is present in product:
- *:Cisco Nexus Dashboard; <=3.1; =3.2
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
More information:
- CVE-2025-20150 at cve.org, NVD
- CWE-209: Generation of Error Message Containing Sensitive Information at cwe.mitre.org
The vulnerability was publicly disclosed 16. 4. 2025.
Links
- [1] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy
- [2] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-app-client-rce-ufyMMYLC
- [3] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sna-prvesc-4BQmK33Z
- [4] https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nd-unenum-2xFFh472
By CESNET, z.s.p.o. Michaela Jarošová on 5. 5. 2025.