Cisco Catalyst SD-WAN Manager 20.15.2
Approved changes feed: RSS · Atom
cpe:2.3:a:cisco:catalyst_sd-wan_manager:20.15.2:*:*:*:*:*:*:*
part: a version: 20.15.2 update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Catalyst Sd Wan Manager (4cc03eb1-d261-53ff-99fe-52c11d44f89b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-20213 |
vulnerable | 2026-06-08 07:08:47.361859 |
Cisco Catalyst SDWAN Manager Arbitrary File Overwrite Vulnerability
MEDIUM (5.5)
A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials with CLI access on the affected system.
This vulnerability is due to improper access controls on files that are on the local file system. An attacker could exploit this vulnerability by running a series of crafted commands on the local file system of an affected device. A successful exploit could allow the attacker to overwrite arbitrary files on the affected device and gain privileges of the root user. To exploit this vulnerability, an attacker would need to have CLI access as a low-privilege user.
Published: 2025-05-07T17:18:23.179Z
Updated: 2026-02-26T18:28:50.198Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.