CVEvulnerability

CVE-2025-20119

5.7 MEDIUM Published 2025-02-26 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-02-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS 3.1 ([email protected])
5.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-362

Description

A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to a race condition with handling system files. An attacker could exploit this vulnerability by doing specific operations on the file system. A successful exploit could allow the attacker to overwrite system files, which could lead to the device being in an inconsistent state and cause a DoS condition.

Affected configurations

• cisco application policy infrastructure controller 3.2\(1l\) • cisco application policy infrastructure controller 3.2\(1m\) • cisco application policy infrastructure controller 3.2\(2l\) • cisco application policy infrastructure controller 3.2\(2o\) • cisco application policy infrastructure controller 3.2\(3i\) • cisco application policy infrastructure controller 3.2\(3j\) • cisco application policy infrastructure controller 3.2\(3n\) • cisco application policy infrastructure controller 3.2\(3o\) • cisco application policy infrastructure controller 3.2\(3r\) • cisco application policy infrastructure controller 3.2\(3s\) • cisco application policy infrastructure controller 3.2\(4d\) • cisco application policy infrastructure controller 3.2\(4e\) • cisco application policy infrastructure controller 3.2\(5d\) • cisco application policy infrastructure controller 3.2\(5e\) • cisco application policy infrastructure controller 3.2\(5f\) • cisco application policy infrastructure controller 3.2\(6i\) • cisco application policy infrastructure controller 3.2\(7f\) • cisco application policy infrastructure controller 3.2\(7k\) • cisco application policy infrastructure controller 3.2\(8d\) • cisco application policy infrastructure controller 3.2\(9b\) • cisco application policy infrastructure controller 3.2\(9f\) • cisco application policy infrastructure controller 3.2\(9h\) • cisco application policy infrastructure controller 3.2\(10e\) • cisco application policy infrastructure controller 3.2\(10f\) • cisco application policy infrastructure controller 3.2\(10g\) • cisco application policy infrastructure controller 3.2\(41d\) • cisco application policy infrastructure controller 4.0\(1h\) • cisco application policy infrastructure controller 4.0\(2c\) • cisco application policy infrastructure controller 4.0\(3c\) • cisco application policy infrastructure controller 4.0\(3d\) • cisco application policy infrastructure controller 4.1\(1a\) • cisco application policy infrastructure controller 4.1\(1i\) • cisco application policy infrastructure controller 4.1\(1j\) • cisco application policy infrastructure controller 4.1\(1k\) • cisco application policy infrastructure controller 4.1\(1l\) • cisco application policy infrastructure controller 4.1\(2g\) • cisco application policy infrastructure controller 4.1\(2m\) • cisco application policy infrastructure controller 4.1\(2o\) • cisco application policy infrastructure controller 4.1\(2s\) • cisco application policy infrastructure controller 4.1\(2u\) • cisco application policy infrastructure controller 4.1\(2w\) • cisco application policy infrastructure controller 4.1\(2x\) • cisco application policy infrastructure controller 4.2\(1g\) • cisco application policy infrastructure controller 4.2\(1i\) • cisco application policy infrastructure controller 4.2\(1j\) • cisco application policy infrastructure controller 4.2\(1l\) • cisco application policy infrastructure controller 4.2\(2e\) • cisco application policy infrastructure controller 4.2\(2f\) • cisco application policy infrastructure controller 4.2\(2g\) • cisco application policy infrastructure controller 4.2\(3j\) • cisco application policy infrastructure controller 4.2\(3l\) • cisco application policy infrastructure controller 4.2\(3n\) • cisco application policy infrastructure controller 4.2\(3q\) • cisco application policy infrastructure controller 4.2\(4i\) • cisco application policy infrastructure controller 4.2\(4k\) • cisco application policy infrastructure controller 4.2\(4o\) • cisco application policy infrastructure controller 4.2\(4p\) • cisco application policy infrastructure controller 4.2\(5k\) • cisco application policy infrastructure controller 4.2\(5l\) • cisco application policy infrastructure controller 4.2\(5n\) … and 68 more

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References