CVE-2025-20308

🗓️ 02 Jul 2025 16:05:35Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 23 Views

Cisco Spaces Connector allows privilege escalation for authenticated users to execute commands as root

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2025-20308	2 Jul 202516:05	–	attackerkb
BDU FSTEC	The vulnerability of the data collection and aggregation application from Cisco Spaces Connectors lies in the lack of measures taken to neutralize special elements used in operating system teams. This allows attackers to enhance their privileges and execute arbitrary code with root privileges.	8 Aug 202500:00	–	bdu_fstec
Circl	CVE-2025-20308	2 Jul 202517:10	–	circl
Cisco	Cisco Spaces Connector Privilege Escalation Vulnerability	2 Jul 202516:00	–	cisco
CNNVD	Cisco Spaces Connector 操作系统命令注入漏洞	2 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-20308 Cisco Spaces Connector Privilege Escalation Vulnerability	2 Jul 202516:05	–	cvelist
EUVD	EUVD-2025-19738	3 Oct 202520:07	–	euvd
NVD	CVE-2025-20308	2 Jul 202516:15	–	nvd
Positive Technologies	PT-2025-27655 · Cisco · Cisco Spaces Connector	2 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-20308	4 Jul 202516:24	–	redhatcve

NVD

Node

cisco spaces_connectorMatch3.0-

cisco spaces_connectorMatch3.0jan_2023

cisco spaces_connectorMatch3.0jan_2024

cisco spaces_connectorMatch3.0jan_2025

cisco spaces_connectorMatch3.0july_2024

cisco spaces_connectorMatch3.0may_2023

cisco spaces_connectorMatch3.0may_2024

cisco spaces_connectorMatch3.0sep_2022

[
  {
    "vendor": "Cisco",
    "product": "Cisco DNA Spaces Connector",
    "versions": [
      {
        "version": "Connector 3 Jan 2023",
        "status": "affected"
      },
      {
        "version": "Connector 3-May 2023",
        "status": "affected"
      },
      {
        "version": "Connector 3-Jan 2024",
        "status": "affected"
      },
      {
        "version": "Connector 3-Jun 2024",
        "status": "affected"
      },
      {
        "version": "Connector 3-May 2024",
        "status": "affected"
      },
      {
        "version": "Connector 3-Jul 2024",
        "status": "affected"
      },
      {
        "version": "Connector 3-Jan 2025",
        "status": "affected"
      }
    ],
    "defaultStatus": "unknown"
  }
]