Medium severity · published Feb 26, 2025
CVE-2025-20119
Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability
5.7
CVSS
0.1%
EPSS
No
On KEV
Description
A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition. To exploit this vulnerability, the attacker must have valid administrative credentials.
This vulnerability is due to a race condition with handling system files. An attacker could exploit this vulnerability by doing specific operations on the file system. A successful exploit could allow the attacker to overwrite system files, which could lead to the device being in an inconsistent state and cause a DoS condition.
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H
Attack vector
Local
Complexity
High
Privileges
High
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CA
Cisco Application Policy Infrastructure Controller (APIC) · Cisco
3.2(8d); 3.2(1m); 3.2(5e); 4.1(2m); 3.2(41d); 3.2(3s); +34 more · source: vendor
AP
Application Policy Infrastructure Controller · Cisco
3.2(1l); 3.2(1m); 3.2(2l); 3.2(2o); 3.2(3i); 3.2(3j); +34 more · source: NVD
Affected product
CA
Cisco Application Policy Infrastructure Controller (APIC)
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-20119
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-20119
Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-multi-vulns-9ummtg5
More from Cisco Application Policy Infrastructure Controller (APIC)
9.8
CVE-2026-76500
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities
9.8
CVE-2026-76498
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities
9.8
CVE-2026-76499
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities
7.2
CVE-2024-20478
Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability
6.7
CVE-2025-20117
Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability
