This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Cisco fixes 15 vulnerabilities

Cisco fixes 15 vulnerabilities in various products, the most severe of which are described below. The remaining ones, including the list of vulnerable products and available fixes, can be found at [1] by clicking through the individual advisories.

Cisco Nexus 3000/9000 Series Switches - DoS (CVE-2025-20241)
CVSS 7.4 (High)

Due to insufficient input validation in the implementation of the Intermediate System-to-Intermediate System (IS-IS) routing protocol in Cisco NX-OS Software for Cisco Nexus 3000 and 9000 Series switches, an unauthenticated attacker who is Layer 2 adjacent to the vulnerable device can carry out a DoS attack using a specially crafted IS-IS packet [2].

CVSS: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

More information:

The vulnerability was publicly disclosed 27. 8. 2025.

Cisco Integrated Management Controller - sensitive information disclosure (CVE-2025-20317)
CVSS 7.1 (High)

Due to insufficient verification of Virtual Keyboard Video Monitor (vKVM) endpoints in Cisco Integrated Management Controller (IMC) and Cisco UCS Manager, an unauthenticated remote attacker can use a forged link to redirect a user to a malicious website and potentially obtain their login credentials [3].

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

More information:

The vulnerability was publicly disclosed 27. 8. 2025.

Cisco UCS Manager Software - command injection, privilege escalation (CVE-2025-20294)
CVSS 6.5 (Medium)

Due to insufficient input validation in the web interface and CLI of Cisco UCS Manager Software for UCS 6300/6400/6500 Series Fabric Interconnects and UCS X-Series Direct Fabric Interconnect 9108 100G, an authenticated remote attacker with administrator privileges can execute commands in the operating system and elevate their privileges to root [4].

The vulnerability is present in product:

  • Cisco UCS Manager Software; <4.2(3p); >=4.3(6c), <4.3(6c);

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

More information:

  • CVE-2025-20294 at cve.org, NVD
  • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') at cwe.mitre.org

The vulnerability was publicly disclosed 27. 8. 2025.

Cisco Nexus Dashboard - privilege escalation (CVE-2025-20344)
CVSS 6.5 (Medium)

Due to insufficient validation in the backup restore functionality of Cisco Nexus Dashboard, an authenticated remote attacker with Administrator credentials can perform a path traversal attack and obtain root privileges in the shell of the affected device [5].

The vulnerability is present in product:

  • Cisco Nexus Dashboard; <4.1(1g);

CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

More information:

  • CVE-2025-20344 at cve.org, NVD
  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') at cwe.mitre.org

The vulnerability was publicly disclosed 27. 8. 2025.

Cisco Evolved Programmable Network Manager & Prime Infrastructure - sensitive information disclosure (CVE-2025-20269)
CVSS 6.5 (Medium)

Due to insufficient input validation in the web interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure, an authenticated remote attacker can use specially crafted HTTP requests to obtain arbitrary files from the file system of the affected device and thereby potentially sensitive information [6].

The vulnerability is present in products:

  • Cisco Evolved Programmable Network Manager; <8.1.1;
  • Cisco Prime Infrastructure; <3.10.6 Security Update 02;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

More information:

The vulnerability was publicly disclosed 20. 8. 2025.

By CESNET, z.s.p.o. Michaela Ručková on 1. 9. 2025.

CESNET, z.s.p.o. Logo