Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-20184

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance could allow an authenticated, remote attacker to perform command injection attacks against an affected device. The attacker must authenticate with valid administrator credentials. This vulnerability is due to insufficient validation of XML configuration files by an affected device. An attacker could exploit this vulnerability by uploading a crafted XML configuration file. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.

Published

2025-02-05T17:15:25.697

Last Modified

2025-08-08T17:11:23.557

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.5 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-20
  • Type: Primary
    CWE-77
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco asyncos 13.0.0-392 Yes
Operating System cisco asyncos 13.0.5-007 Yes
Operating System cisco asyncos 13.5.1-277 Yes
Operating System cisco asyncos 13.5.4-038 Yes
Operating System cisco asyncos 14.0.0-698 Yes
Operating System cisco asyncos 14.2.0-620 Yes
Operating System cisco asyncos 14.2.1-020 Yes
Operating System cisco asyncos 14.3.0-032 Yes
Operating System cisco asyncos 15.0.0-104 Yes
Operating System cisco asyncos 15.0.1-030 Yes
Operating System cisco asyncos 15.0.3-002 Yes
Operating System cisco asyncos 15.5.0-048 Yes
Operating System cisco asyncos 15.5.1-055 Yes
Operating System cisco asyncos 15.5.2-018 Yes
Operating System cisco asyncos 15.5.3-022 Yes
Application cisco secure_email_gateway_virtual_appliance_c100v - No
Application cisco secure_email_gateway_virtual_appliance_c300v - No
Application cisco secure_email_gateway_virtual_appliance_c600v - No
Hardware cisco secure_email_gateway_c195 - No
Hardware cisco secure_email_gateway_c395 - No
Hardware cisco secure_email_gateway_c695 - No
Operating System cisco asyncos 11.8.0-414 Yes
Operating System cisco asyncos 11.8.0-429 Yes
Operating System cisco asyncos 11.8.0-453 Yes
Operating System cisco asyncos 11.8.1-023 Yes
Operating System cisco asyncos 11.8.3-018 Yes
Operating System cisco asyncos 11.8.3-021 Yes
Operating System cisco asyncos 11.8.4-004 Yes
Operating System cisco asyncos 12.0.1-268 Yes
Operating System cisco asyncos 12.0.1-334 Yes
Operating System cisco asyncos 12.0.2-004 Yes
Operating System cisco asyncos 12.0.2-012 Yes
Operating System cisco asyncos 12.0.3-005 Yes
Operating System cisco asyncos 12.0.3-007 Yes
Operating System cisco asyncos 12.0.4-002 Yes
Operating System cisco asyncos 12.0.5-011 Yes
Operating System cisco asyncos 12.5.1-011 Yes
Operating System cisco asyncos 12.5.1-043 Yes
Operating System cisco asyncos 12.5.2-007 Yes
Operating System cisco asyncos 12.5.2-011 Yes
Operating System cisco asyncos 12.5.3-002 Yes
Operating System cisco asyncos 12.5.4-005 Yes
Operating System cisco asyncos 12.5.4-011 Yes
Operating System cisco asyncos 12.5.5-004 Yes
Operating System cisco asyncos 12.5.5-005 Yes
Operating System cisco asyncos 12.5.5-008 Yes
Operating System cisco asyncos 12.5.6-008 Yes
Operating System cisco asyncos 14.0.1-014 Yes
Operating System cisco asyncos 14.0.1-040 Yes
Operating System cisco asyncos 14.0.1-053 Yes
Operating System cisco asyncos 14.0.1-503 Yes
Operating System cisco asyncos 14.0.2-012 Yes
Operating System cisco asyncos 14.0.3-014 Yes
Operating System cisco asyncos 14.0.4-005 Yes
Operating System cisco asyncos 14.0.5-007 Yes
Operating System cisco asyncos 14.1.0-032 Yes
Operating System cisco asyncos 14.1.0-041 Yes
Operating System cisco asyncos 14.1.0-047 Yes
Operating System cisco asyncos 14.5.0-498 Yes
Operating System cisco asyncos 14.5.0-537 Yes
Operating System cisco asyncos 14.5.0-673 Yes
Operating System cisco asyncos 14.5.1-008 Yes
Operating System cisco asyncos 14.5.1-016 Yes
Operating System cisco asyncos 14.5.1-510 Yes
Operating System cisco asyncos 14.5.1-607 Yes
Operating System cisco asyncos 14.5.2-011 Yes
Operating System cisco asyncos 14.5.3-033 Yes
Operating System cisco asyncos 15.0.0-322 Yes
Operating System cisco asyncos 15.0.0-355 Yes
Operating System cisco asyncos 15.0.1-004 Yes
Operating System cisco asyncos 15.1.0-287 Yes
Operating System cisco asyncos 15.2.0-116 Yes
Operating System cisco asyncos 15.2.0-164 Yes
Operating System cisco asyncos 15.2.1-011 Yes
Application cisco secure_web_appliance_virtual_s1000v - No
Application cisco secure_web_appliance_virtual_s100v - No
Application cisco secure_web_appliance_virtual_s300v - No
Application cisco secure_web_appliance_virtual_s600v - No
Hardware cisco secure_web_appliance_s196 - No
Hardware cisco secure_web_appliance_s396 - No
Hardware cisco secure_web_appliance_s696 - No
References