Attacker Value
Unknown
0
CVE-2025-20185
0
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
CVE-2025-20185
(Last updated February 06, 2025) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
MITRE ATT&CK
Select the MITRE ATT&CK Tactics that apply to this CVE
Collection
Select any Techniques used:
Command and Control
Select any Techniques used:
Credential Access
Select any Techniques used:
Defense Evasion
Select any Techniques used:
Discovery
Select any Techniques used:
Execution
Select any Techniques used:
Exfiltration
Select any Techniques used:
Impact
Select any Techniques used:
Initial Access
Select any Techniques used:
Lateral Movement
Select any Techniques used:
Persistence
Select any Techniques used:
Privilege Escalation
Select any Techniques used:
Topic Tags
Select the tags that apply to this CVE (Assessment added tags are disabled and cannot be removed)
What makes this of high-value to an attacker?
What makes this of low-value to an attacker?
Description
A vulnerability in the implementation of the remote access functionality of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, Cisco Secure Email Gateway, and Cisco Secure Web Appliance could allow an authenticated, local attacker to elevate privileges to root. The attacker must authenticate with valid administrator credentials.
This vulnerability is due to an architectural flaw in the password generation algorithm for the remote access functionality. An attacker could exploit this vulnerability by generating a temporary password for the service account. A successful exploit could allow the attacker to execute arbitrary commands as root and access the underlying operating system.
Note: The Security Impact Rating (SIR) for this vulnerability is Medium due to the unrestricted scope of information that is accessible to an attacker.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
3.4 Low
Impact Score:
2.5
Exploitability Score:
0.8
Attack Vector (AV):
Local
Attack Complexity (AC):
Low
Privileges Required (PR):
High
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
Low
Integrity (I):
Low
Availability (A):
None
General Information
Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
Cisco Secure Email 14.0.0-698
Cisco Secure Email 13.5.1-277
Cisco Secure Email 13.0.0-392
Cisco Secure Email 14.2.0-620
Cisco Secure Email 13.0.5-007
Cisco Secure Email 13.5.4-038
Cisco Secure Email 14.2.1-020
Cisco Secure Email 14.3.0-032
Cisco Secure Email 15.0.0-104
Cisco Secure Email 15.0.1-030
Cisco Secure Email 15.5.0-048
Cisco Secure Email 15.5.1-055
Cisco Secure Email 15.5.2-018
Cisco Secure Email 15.0.3-002
Cisco Secure Email and Web Manager 13.6.2-023
Cisco Secure Email and Web Manager 13.6.2-078
Cisco Secure Email and Web Manager 13.0.0-249
Cisco Secure Email and Web Manager 13.0.0-277
Cisco Secure Email and Web Manager 13.8.1-052
Cisco Secure Email and Web Manager 13.8.1-068
Cisco Secure Email and Web Manager 13.8.1-074
Cisco Secure Email and Web Manager 14.0.0-404
Cisco Secure Email and Web Manager 12.8.1-002
Cisco Secure Email and Web Manager 14.1.0-227
Cisco Secure Email and Web Manager 13.6.1-201
Cisco Secure Email and Web Manager 14.2.0-203
Cisco Secure Email and Web Manager 14.2.0-212
Cisco Secure Email and Web Manager 12.8.1-021
Cisco Secure Email and Web Manager 13.8.1-108
Cisco Secure Email and Web Manager 14.2.0-224
Cisco Secure Email and Web Manager 14.3.0-120
Cisco Secure Email and Web Manager 15.0.0-334
Cisco Secure Email and Web Manager 15.5.1-024
Cisco Secure Email and Web Manager 15.5.1-029
Cisco Secure Email and Web Manager 15.5.2-005
Cisco Secure Web Appliance 11.8.0-453
Cisco Secure Web Appliance 12.5.3-002
Cisco Secure Web Appliance 12.0.3-007
Cisco Secure Web Appliance 12.0.3-005
Cisco Secure Web Appliance 14.1.0-032
Cisco Secure Web Appliance 14.1.0-047
Cisco Secure Web Appliance 14.1.0-041
Cisco Secure Web Appliance 12.0.4-002
Cisco Secure Web Appliance 14.0.2-012
Cisco Secure Web Appliance 11.8.0-414
Cisco Secure Web Appliance 12.0.1-268
Cisco Secure Web Appliance 11.8.1-023
Cisco Secure Web Appliance 11.8.3-021
Cisco Secure Web Appliance 11.8.3-018
Cisco Secure Web Appliance 12.5.1-011
Cisco Secure Web Appliance 11.8.4-004
Cisco Secure Web Appliance 12.5.2-007
Cisco Secure Web Appliance 12.5.2-011
Cisco Secure Web Appliance 14.5.0-498
Cisco Secure Web Appliance 12.5.4-005
Cisco Secure Web Appliance 12.5.4-011
Cisco Secure Web Appliance 12.0.5-011
Cisco Secure Web Appliance 14.0.3-014
Cisco Secure Web Appliance 12.5.5-004
Cisco Secure Web Appliance 12.5.5-005
Cisco Secure Web Appliance 12.5.5-008
Cisco Secure Web Appliance 14.0.4-005
Cisco Secure Web Appliance 14.5.1-008
Cisco Secure Web Appliance 14.5.1-016
Cisco Secure Web Appliance 15.0.0-355
Cisco Secure Web Appliance 15.0.0-322
Cisco Secure Web Appliance 12.5.6-008
Cisco Secure Web Appliance 15.1.0-287
Cisco Secure Web Appliance 14.5.2-011
Cisco Secure Web Appliance 15.2.0-116
Cisco Secure Web Appliance 14.0.5-007
Cisco Secure Web Appliance 15.2.0-164
Cisco Secure Web Appliance 14.5.1-510
Cisco Secure Web Appliance 12.0.2-012
Cisco Secure Web Appliance 12.0.2-004
Cisco Secure Web Appliance 14.5.1-607
Cisco Secure Web Appliance 14.5.3-033
Cisco Secure Web Appliance 15.0.1-004
Cisco Secure Web Appliance 15.2.1-011
Cisco Secure Web Appliance 14.5.0-673
Cisco Secure Web Appliance 14.5.0-537
Cisco Secure Web Appliance 12.0.1-334
Cisco Secure Web Appliance 14.0.1-503
Cisco Secure Web Appliance 14.0.1-053
Cisco Secure Web Appliance 11.8.0-429
Cisco Secure Web Appliance 14.0.1-040
Cisco Secure Web Appliance 14.0.1-014
Cisco Secure Web Appliance 12.5.1-043
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown
References
Additional Info
Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Rapid7
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
