CVEvulnerability
CVE-2025-20157
5.9 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-05-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-295
Description
A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information.
This vulnerability is due to improper validation of certificates that are used by the Smart Licensing feature. An attacker with a privileged network position could exploit this vulnerability by intercepting traffic that is sent over the Internet. A successful exploit could allow the attacker to gain access to sensitive information, including credentials used by the device to connect to Cisco cloud services.
Affected configurations
• cisco catalyst sd-wan manager 17.2.4
• cisco catalyst sd-wan manager 17.2.5
• cisco catalyst sd-wan manager 17.2.6
• cisco catalyst sd-wan manager 17.2.7
• cisco catalyst sd-wan manager 17.2.8
• cisco catalyst sd-wan manager 17.2.9
• cisco catalyst sd-wan manager 17.2.10
• cisco catalyst sd-wan manager 18.2.0
• cisco catalyst sd-wan manager 18.3.0
• cisco catalyst sd-wan manager 18.3.1
• cisco catalyst sd-wan manager 18.3.1.1
• cisco catalyst sd-wan manager 18.3.3
• cisco catalyst sd-wan manager 18.3.3.1
• cisco catalyst sd-wan manager 18.3.4
• cisco catalyst sd-wan manager 18.3.5
• cisco catalyst sd-wan manager 18.3.6
• cisco catalyst sd-wan manager 18.3.6.1
• cisco catalyst sd-wan manager 18.3.7
• cisco catalyst sd-wan manager 18.3.8
• cisco catalyst sd-wan manager 18.4.0
• cisco catalyst sd-wan manager 18.4.0.1
• cisco catalyst sd-wan manager 18.4.1
• cisco catalyst sd-wan manager 18.4.3
• cisco catalyst sd-wan manager 18.4.4
• cisco catalyst sd-wan manager 18.4.5
• cisco catalyst sd-wan manager 18.4.6
• cisco catalyst sd-wan manager 18.4.302
• cisco catalyst sd-wan manager 18.4.303
• cisco catalyst sd-wan manager 18.4.501 es
• cisco catalyst sd-wan manager 19.0.0
• cisco catalyst sd-wan manager 19.0.1a
• cisco catalyst sd-wan manager 19.1.0
• cisco catalyst sd-wan manager 19.2.0
• cisco catalyst sd-wan manager 19.2.1
• cisco catalyst sd-wan manager 19.2.2
• cisco catalyst sd-wan manager 19.2.3
• cisco catalyst sd-wan manager 19.2.4
• cisco catalyst sd-wan manager 19.2.4.0.1
• cisco catalyst sd-wan manager 19.2.4.0.8
• cisco catalyst sd-wan manager 19.2.4.0.9
• cisco catalyst sd-wan manager 19.2.31
• cisco catalyst sd-wan manager 19.2.32
• cisco catalyst sd-wan manager 19.2.097
• cisco catalyst sd-wan manager 19.2.098
• cisco catalyst sd-wan manager 19.2.099
• cisco catalyst sd-wan manager 19.2.929
• cisco catalyst sd-wan manager 19.3.0
• cisco catalyst sd-wan manager 20.1.1
• cisco catalyst sd-wan manager 20.1.1.1
• cisco catalyst sd-wan manager 20.1.2
• cisco catalyst sd-wan manager 20.1.2 937
• cisco catalyst sd-wan manager 20.1.3
• cisco catalyst sd-wan manager 20.1.3.1
• cisco catalyst sd-wan manager 20.1.12
• cisco catalyst sd-wan manager 20.3.1
• cisco catalyst sd-wan manager 20.3.2
• cisco catalyst sd-wan manager 20.3.2.0.5
• cisco catalyst sd-wan manager 20.3.2.0.6
• cisco catalyst sd-wan manager 20.3.2.1
• cisco catalyst sd-wan manager 20.3.2.1 927
… and 221 more
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness