Lucene search
+L

CVE-2025-20186

🗓️ 07 May 2025 17:37:53Reported by ciscoType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 70 Views

Vulnerability in Cisco IOS XE allows command injection via Wireless LAN Controller interface.

Related
Detection
Affected
Refs
Social
NVD
Vulners
Node
OR
ciscoios_xeMatch16.12.4
ciscoios_xeMatch16.12.4a
ciscoios_xeMatch16.12.5
ciscoios_xeMatch16.12.6
ciscoios_xeMatch16.12.6a
ciscoios_xeMatch16.12.7
ciscoios_xeMatch16.12.8
ciscoios_xeMatch17.2.2
ciscoios_xeMatch17.2.3
ciscoios_xeMatch17.3.1
ciscoios_xeMatch17.3.1a
ciscoios_xeMatch17.3.2
ciscoios_xeMatch17.3.2a
ciscoios_xeMatch17.3.3
ciscoios_xeMatch17.3.4
ciscoios_xeMatch17.3.4a
ciscoios_xeMatch17.3.4c
ciscoios_xeMatch17.3.5
ciscoios_xeMatch17.3.5a
ciscoios_xeMatch17.3.5b
ciscoios_xeMatch17.3.6
ciscoios_xeMatch17.3.7
ciscoios_xeMatch17.3.8
ciscoios_xeMatch17.3.8a
ciscoios_xeMatch17.4.1
ciscoios_xeMatch17.4.1a
ciscoios_xeMatch17.4.1b
ciscoios_xeMatch17.4.2
ciscoios_xeMatch17.5.1
ciscoios_xeMatch17.5.1a
ciscoios_xeMatch17.6.1
ciscoios_xeMatch17.6.1a
ciscoios_xeMatch17.6.1y
ciscoios_xeMatch17.6.2
ciscoios_xeMatch17.6.3
ciscoios_xeMatch17.6.3a
ciscoios_xeMatch17.6.4
ciscoios_xeMatch17.6.5
ciscoios_xeMatch17.6.5a
ciscoios_xeMatch17.6.6
ciscoios_xeMatch17.6.6a
ciscoios_xeMatch17.6.7
ciscoios_xeMatch17.7.1
ciscoios_xeMatch17.7.1a
ciscoios_xeMatch17.7.2
ciscoios_xeMatch17.8.1
ciscoios_xeMatch17.8.1a
ciscoios_xeMatch17.9.1
ciscoios_xeMatch17.9.1a
ciscoios_xeMatch17.9.2
ciscoios_xeMatch17.9.2a
ciscoios_xeMatch17.9.3
ciscoios_xeMatch17.9.3a
ciscoios_xeMatch17.9.4
ciscoios_xeMatch17.9.4a
ciscoios_xeMatch17.9.5
ciscoios_xeMatch17.9.5a
ciscoios_xeMatch17.9.5b
ciscoios_xeMatch17.9.5e
ciscoios_xeMatch17.9.5f
ciscoios_xeMatch17.10.1
ciscoios_xeMatch17.10.1a
ciscoios_xeMatch17.11.1
ciscoios_xeMatch17.11.1a
ciscoios_xeMatch17.12.1
ciscoios_xeMatch17.12.1a
ciscoios_xeMatch17.12.2
ciscoios_xeMatch17.12.3
ciscoios_xeMatch17.12.3a
ciscoios_xeMatch17.12.4
ciscoios_xeMatch17.12.4a
ciscoios_xeMatch17.12.4b
ciscoios_xeMatch17.13.1
ciscoios_xeMatch17.13.1a
ciscoios_xeMatch17.14.1
ciscoios_xeMatch17.14.1a
[
  {
    "vendor": "Cisco",
    "product": "Cisco IOS XE Software",
    "versions": [
      {
        "version": "16.12.8",
        "status": "affected"
      },
      {
        "version": "16.12.4",
        "status": "affected"
      },
      {
        "version": "16.12.4a",
        "status": "affected"
      },
      {
        "version": "16.12.5",
        "status": "affected"
      },
      {
        "version": "16.12.6",
        "status": "affected"
      },
      {
        "version": "16.12.6a",
        "status": "affected"
      },
      {
        "version": "16.12.7",
        "status": "affected"
      },
      {
        "version": "17.2.2",
        "status": "affected"
      },
      {
        "version": "17.2.3",
        "status": "affected"
      },
      {
        "version": "17.3.1",
        "status": "affected"
      },
      {
        "version": "17.3.2",
        "status": "affected"
      },
      {
        "version": "17.3.3",
        "status": "affected"
      },
      {
        "version": "17.3.1a",
        "status": "affected"
      },
      {
        "version": "17.3.2a",
        "status": "affected"
      },
      {
        "version": "17.3.4",
        "status": "affected"
      },
      {
        "version": "17.3.5",
        "status": "affected"
      },
      {
        "version": "17.3.4a",
        "status": "affected"
      },
      {
        "version": "17.3.6",
        "status": "affected"
      },
      {
        "version": "17.3.4c",
        "status": "affected"
      },
      {
        "version": "17.3.5a",
        "status": "affected"
      },
      {
        "version": "17.3.5b",
        "status": "affected"
      },
      {
        "version": "17.3.7",
        "status": "affected"
      },
      {
        "version": "17.3.8",
        "status": "affected"
      },
      {
        "version": "17.3.8a",
        "status": "affected"
      },
      {
        "version": "17.4.1",
        "status": "affected"
      },
      {
        "version": "17.4.2",
        "status": "affected"
      },
      {
        "version": "17.4.1a",
        "status": "affected"
      },
      {
        "version": "17.4.1b",
        "status": "affected"
      },
      {
        "version": "17.5.1",
        "status": "affected"
      },
      {
        "version": "17.5.1a",
        "status": "affected"
      },
      {
        "version": "17.6.1",
        "status": "affected"
      },
      {
        "version": "17.6.2",
        "status": "affected"
      },
      {
        "version": "17.6.1a",
        "status": "affected"
      },
      {
        "version": "17.6.3",
        "status": "affected"
      },
      {
        "version": "17.6.1y",
        "status": "affected"
      },
      {
        "version": "17.6.3a",
        "status": "affected"
      },
      {
        "version": "17.6.4",
        "status": "affected"
      },
      {
        "version": "17.6.5",
        "status": "affected"
      },
      {
        "version": "17.6.6",
        "status": "affected"
      },
      {
        "version": "17.6.6a",
        "status": "affected"
      },
      {
        "version": "17.6.5a",
        "status": "affected"
      },
      {
        "version": "17.6.7",
        "status": "affected"
      },
      {
        "version": "17.7.1",
        "status": "affected"
      },
      {
        "version": "17.7.1a",
        "status": "affected"
      },
      {
        "version": "17.7.2",
        "status": "affected"
      },
      {
        "version": "17.10.1",
        "status": "affected"
      },
      {
        "version": "17.10.1a",
        "status": "affected"
      },
      {
        "version": "17.8.1",
        "status": "affected"
      },
      {
        "version": "17.8.1a",
        "status": "affected"
      },
      {
        "version": "17.9.1",
        "status": "affected"
      },
      {
        "version": "17.9.2",
        "status": "affected"
      },
      {
        "version": "17.9.1a",
        "status": "affected"
      },
      {
        "version": "17.9.3",
        "status": "affected"
      },
      {
        "version": "17.9.2a",
        "status": "affected"
      },
      {
        "version": "17.9.3a",
        "status": "affected"
      },
      {
        "version": "17.9.4",
        "status": "affected"
      },
      {
        "version": "17.9.5",
        "status": "affected"
      },
      {
        "version": "17.9.4a",
        "status": "affected"
      },
      {
        "version": "17.9.5a",
        "status": "affected"
      },
      {
        "version": "17.9.5b",
        "status": "affected"
      },
      {
        "version": "17.9.5e",
        "status": "affected"
      },
      {
        "version": "17.9.5f",
        "status": "affected"
      },
      {
        "version": "17.11.1",
        "status": "affected"
      },
      {
        "version": "17.11.1a",
        "status": "affected"
      },
      {
        "version": "17.12.1",
        "status": "affected"
      },
      {
        "version": "17.12.1a",
        "status": "affected"
      },
      {
        "version": "17.12.2",
        "status": "affected"
      },
      {
        "version": "17.12.3",
        "status": "affected"
      },
      {
        "version": "17.12.4",
        "status": "affected"
      },
      {
        "version": "17.12.3a",
        "status": "affected"
      },
      {
        "version": "17.12.4a",
        "status": "affected"
      },
      {
        "version": "17.12.4b",
        "status": "affected"
      },
      {
        "version": "17.13.1",
        "status": "affected"
      },
      {
        "version": "17.13.1a",
        "status": "affected"
      },
      {
        "version": "17.14.1",
        "status": "affected"
      },
      {
        "version": "17.14.1a",
        "status": "affected"
      }
    ]
  }
]

syedaquib77

Vulnerability Alert: Cisco IOS XE Software Web-Based Management Interface Command Injection Vulnerability Timeline: Disclosure: 2025-05-07, Patch: Not specified CVE ID: CVE-2025-20186 Base Score: 8.8 CVSS Metrics: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H cvssSeverity: High EPSS Percentile: 67% Exploit Maturity: Not Available Affected Versions: - Catalyst 9800-CL Wireless Controllers for Cloud - Catalyst 9800 Embedded Wireless Controller for Catalyst 9300, 9400, and 9500 Series Switches - Catalyst 9800 Series Wireless Controllers - Embedded Wireless Controller on Catalyst 9100X Series Access Points - Integrated access points (APs) in Integrated Service Routers (ISR)1100 (Wi-Fi 6) - Wi-Fi 6 pluggable module for Catalyst IR1800 Rugged Series Routers Fixed Versions: - Software updates are available Attack Vectors: - Authenticated Remote Attack Summary: A command injection vulnerability exists in the web-based management interface of Cisco IOS XE Wireless LAN Controller feature. An authenticated remote attacker can exploit insufficient input validation to execute arbitrary CLI commands with privilege level 15. Affected devices require a configured lobby ambassador account. No workarounds available. Impact Scope: Execution of arbitrary commands with level 15 privileges Recommended Actions: - Update Cisco IOS XE Software immediately to the latest version as indicated in the advisory Related Resources: - https://t.co/tIvuVhbI3y - https://t.co/zIGwiq23Ja Tags: #Cisco #IOS #XE #CommandInjection #Cybersecurity

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 08:41Current
9.2High risk
Vulners AI Score9.2
CVSS 3.18.8
EPSS0.00845
SSVC
70