CVEvulnerability
CVE-2025-20186
8.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-05-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-78
Description
A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software could allow an authenticated, remote attacker with a lobby ambassador user account to perform a command injection attack against an affected device.
This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted input to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary Cisco IOS XE Software CLI commands with privilege level 15.
Note: This vulnerability is exploitable only if the attacker obtains the credentials for a lobby ambassador account. This account is not configured by default.
Affected configurations
• cisco ios xe 16.12.4
• cisco ios xe 16.12.4a
• cisco ios xe 16.12.5
• cisco ios xe 16.12.6
• cisco ios xe 16.12.6a
• cisco ios xe 16.12.7
• cisco ios xe 16.12.8
• cisco ios xe 17.2.2
• cisco ios xe 17.2.3
• cisco ios xe 17.3.1
• cisco ios xe 17.3.1a
• cisco ios xe 17.3.2
• cisco ios xe 17.3.2a
• cisco ios xe 17.3.3
• cisco ios xe 17.3.4
• cisco ios xe 17.3.4a
• cisco ios xe 17.3.4c
• cisco ios xe 17.3.5
• cisco ios xe 17.3.5a
• cisco ios xe 17.3.5b
• cisco ios xe 17.3.6
• cisco ios xe 17.3.7
• cisco ios xe 17.3.8
• cisco ios xe 17.3.8a
• cisco ios xe 17.4.1
• cisco ios xe 17.4.1a
• cisco ios xe 17.4.1b
• cisco ios xe 17.4.2
• cisco ios xe 17.5.1
• cisco ios xe 17.5.1a
• cisco ios xe 17.6.1
• cisco ios xe 17.6.1a
• cisco ios xe 17.6.1y
• cisco ios xe 17.6.2
• cisco ios xe 17.6.3
• cisco ios xe 17.6.3a
• cisco ios xe 17.6.4
• cisco ios xe 17.6.5
• cisco ios xe 17.6.5a
• cisco ios xe 17.6.6
• cisco ios xe 17.6.6a
• cisco ios xe 17.6.7
• cisco ios xe 17.7.1
• cisco ios xe 17.7.1a
• cisco ios xe 17.7.2
• cisco ios xe 17.8.1
• cisco ios xe 17.8.1a
• cisco ios xe 17.9.1
• cisco ios xe 17.9.1a
• cisco ios xe 17.9.2
• cisco ios xe 17.9.2a
• cisco ios xe 17.9.3
• cisco ios xe 17.9.3a
• cisco ios xe 17.9.4
• cisco ios xe 17.9.4a
• cisco ios xe 17.9.5
• cisco ios xe 17.9.5a
• cisco ios xe 17.9.5b
• cisco ios xe 17.9.5e
• cisco ios xe 17.9.5f
… and 16 more
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness