Medium severity · published Feb 26, 2025
CVE-2025-20119
Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability
5.7
CVSS
0.1%
EPSS
No
On KEV
Description
A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to a race condition with handling system files. An attacker could exploit this vulnerability by doing specific operations on the file system. A successful exploit could allow the attacker to overwrite system files, which could lead to the device being in an inconsistent state and cause a DoS condition.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
High
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Cisco Application Policy Infrastructure Controller (APIC) · Cisco
3.2(8d); 3.2(1m); 3.2(5e); 4.1(2m); 3.2(41d); 3.2(3s); +34 more · source: vendor
AP
Application Policy Infrastructure Controller · Cisco
3.2(1l); 3.2(1m); 3.2(2l); 3.2(2o); 3.2(3i); 3.2(3j); +34 more · source: NVD
Affected product
CA
Cisco Application Policy Infrastructure Controller (APIC)
Cisco
More from Cisco Application Policy Infrastructure Controller (APIC)
9.8
CVE-2026-76500
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities
9.8
CVE-2026-76498
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities
9.8
CVE-2026-76499
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities
7.2
CVE-2024-20478
Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability
6.7
CVE-2025-20117
Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability