CVE-2025-20164

State: Published
Severity: 8.3 High
Published: May 7, 2025
Updated: Feb 26, 2026
Reserved: Oct 10, 2024

Description

A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges. This vulnerability is due to insufficient validation of authorizations for authenticated users. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to elevate privileges to privilege level 15. To exploit this vulnerability, the attacker must have valid credentials for a user account with privilege level 5 or higher. Read-only DM users are assigned privilege level 5.

Scores

CVSS	Score	Vector	Source
3.1	8.3 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H	cisco

Weaknesses

CWE-862 Missing Authorization

Affected Products

Product	Versions
IOSCisco	15.0(2)SE8Affected 15.0(2)EAAffected 15.0(2)EA1Affected 15.2(2)EAffected 15.2(2)E1Affected 15.2(3)E1Affected 15.2(2)E2Affected 15.2(2)E3Affected 15.2(2a)E2Affected 15.2(3)E2Affected 15.2(3)E3Affected 15.2(2)E4Affected 15.2(2)E5Affected 15.2(3)E4Affected 15.2(5)EAffected 15.2(2)E6Affected 15.2(5)E1Affected 15.2(2)E5aAffected 15.2(5a)E1Affected 15.2(2)E7Affected 15.2(5)E2Affected 15.2(6)EAffected 15.2(5)E2cAffected 15.2(2)E8Affected 15.2(6)E0aAffected and 50 more versions

Product

Versions

IOSCisco

15.0(2)SE8Affected
15.0(2)EAAffected
15.0(2)EA1Affected
15.2(2)EAffected
15.2(2)E1Affected
15.2(3)E1Affected
15.2(2)E2Affected
15.2(2)E3Affected
15.2(2a)E2Affected
15.2(3)E2Affected
15.2(3)E3Affected
15.2(2)E4Affected
15.2(2)E5Affected
15.2(3)E4Affected
15.2(5)EAffected
15.2(2)E6Affected
15.2(5)E1Affected
15.2(2)E5aAffected
15.2(5a)E1Affected
15.2(2)E7Affected
15.2(5)E2Affected
15.2(6)EAffected
15.2(5)E2cAffected
15.2(2)E8Affected
15.2(6)E0aAffected
and 50 more versions

References

cisco-sa-ios-http-privesc-wCRd5e3

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.