Medium WID-SEC-2025-0977 4 CVEs

Cisco IOS XE Software Web-Based Management Interface: Mehrere Schwachstellen

Published May 7, 2025 · Updated May 7, 2025 · de-DE

Vendor: Cisco Product: IOS XE

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen im Cisco IOS XE Software Web-Based Management Interface ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen, Daten zu manipulieren oder Code auszuführen

Product

Cisco Internetwork Operating System (IOS) ist ein Betriebssystem, das für Cisco Geräte wie z. B. Router und Switches eingesetzt wird.

Vulnerabilities 4

High 8.8

CVE-2025-20186

A vulnerability in the web-based management interface of the Wireless LAN Controller feature of Cisco IOS XE Software c…

Cisco Cisco IOS XE Software iOS Network devices

May 7, 2025
Medium 6.5

CVE-2025-20193

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privil…

Cisco Cisco IOS XE Software iOS Network devices

May 7, 2025
Medium 5.4

CVE-2025-20194

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authenticated, low-privil…

Cisco Cisco IOS XE Software iOS Network devices

May 7, 2025
Medium 4.3

CVE-2025-20195

A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an unauthenticated, remote a…

Cisco Cisco IOS XE Software iOS Network devices

May 7, 2025

Revision history

2025-05-07 #1
Initiale Fassung

References

Cisco Security Advisory cisco-sa-webui-cmdinj-gVn3OKNC vom 2025-05-07
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-cmdinj-gVn3OKNC
Cisco Security Advisory cisco-sa-webui-multi-ARNHM4v6 vom 2025-05-07
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webui-multi-ARNHM4v6