CVE-2025-20184

Cisco Secure Email and Web Manager and Secure Web Appliance Command Injection Vulnerability

State: Published
Severity: 6.5 Medium
Published: Feb 5, 2025
Updated: Feb 5, 2025
Reserved: Oct 10, 2024

Description

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance could allow an authenticated, remote attacker to perform command injection attacks against an affected device. The attacker must authenticate with valid administrator credentials.

This vulnerability is due to insufficient validation of XML configuration files by an affected device. An attacker could exploit this vulnerability by uploading a crafted XML configuration file. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N	cisco

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
Cisco Secure EmailCisco	14.0.0-698Affected 13.5.1-277Affected 13.0.0-392Affected 14.2.0-620Affected 13.0.5-007Affected 13.5.4-038Affected 14.2.1-020Affected 14.3.0-032Affected 15.0.0-104Affected 15.0.1-030Affected 15.5.0-048Affected 15.5.1-055Affected 15.5.2-018Affected 15.0.3-002Affected 15.5.3-022Affected
Cisco Secure Web ApplianceCisco	11.8.0-453Affected 12.5.3-002Affected 12.0.3-007Affected 12.0.3-005Affected 14.1.0-032Affected 14.1.0-047Affected 14.1.0-041Affected 12.0.4-002Affected 14.0.2-012Affected 11.8.0-414Affected 12.0.1-268Affected 11.8.1-023Affected 11.8.3-021Affected 11.8.3-018Affected 12.5.1-011Affected 11.8.4-004Affected 12.5.2-007Affected 12.5.2-011Affected 14.5.0-498Affected 12.5.4-005Affected 12.5.4-011Affected 12.0.5-011Affected 14.0.3-014Affected 12.5.5-004Affected 12.5.5-005Affected and 28 more versions

Product

Versions

Cisco Secure EmailCisco

14.0.0-698Affected
13.5.1-277Affected
13.0.0-392Affected
14.2.0-620Affected
13.0.5-007Affected
13.5.4-038Affected
14.2.1-020Affected
14.3.0-032Affected
15.0.0-104Affected
15.0.1-030Affected
15.5.0-048Affected
15.5.1-055Affected
15.5.2-018Affected
15.0.3-002Affected
15.5.3-022Affected

Cisco Secure Web ApplianceCisco

11.8.0-453Affected
12.5.3-002Affected
12.0.3-007Affected
12.0.3-005Affected
14.1.0-032Affected
14.1.0-047Affected
14.1.0-041Affected
12.0.4-002Affected
14.0.2-012Affected
11.8.0-414Affected
12.0.1-268Affected
11.8.1-023Affected
11.8.3-021Affected
11.8.3-018Affected
12.5.1-011Affected
11.8.4-004Affected
12.5.2-007Affected
12.5.2-011Affected
14.5.0-498Affected
12.5.4-005Affected
12.5.4-011Affected
12.0.5-011Affected
14.0.3-014Affected
12.5.5-004Affected
12.5.5-005Affected
and 28 more versions

References

cisco-sa-esa-sma-wsa-multi-yKUJhS34

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.