Attacker Value
Unknown
0
CVE-2025-20184
0
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
CVE-2025-20184
(Last updated February 06, 2025) ▾
MITRE ATT&CK
Log in to add MITRE ATT&CK tag
Add MITRE ATT&CK tactics and techniques that apply to this CVE.
MITRE ATT&CK
Select the MITRE ATT&CK Tactics that apply to this CVE
Collection
Select any Techniques used:
Command and Control
Select any Techniques used:
Credential Access
Select any Techniques used:
Defense Evasion
Select any Techniques used:
Discovery
Select any Techniques used:
Execution
Select any Techniques used:
Exfiltration
Select any Techniques used:
Impact
Select any Techniques used:
Initial Access
Select any Techniques used:
Lateral Movement
Select any Techniques used:
Persistence
Select any Techniques used:
Privilege Escalation
Select any Techniques used:
Topic Tags
Select the tags that apply to this CVE (Assessment added tags are disabled and cannot be removed)
What makes this of high-value to an attacker?
What makes this of low-value to an attacker?
Description
A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email Gateway and Cisco Secure Web Appliance could allow an authenticated, remote attacker to perform command injection attacks against an affected device. The attacker must authenticate with valid administrator credentials.
This vulnerability is due to insufficient validation of XML configuration files by an affected device. An attacker could exploit this vulnerability by uploading a crafted XML configuration file. A successful exploit could allow the attacker to inject commands to the underlying operating system with root privileges.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
Data provided by the National Vulnerability Database (NVD)
Base Score:
6.5 Medium
Impact Score:
5.2
Exploitability Score:
1.2
Attack Vector (AV):
Network
Attack Complexity (AC):
Low
Privileges Required (PR):
High
User Interaction (UI):
None
Scope (S):
Unchanged
Confidentiality (C):
High
Integrity (I):
High
Availability (A):
None
General Information
Offensive Application
Unknown
Utility Class
Unknown
Ports
Unknown
OS
Unknown
Vulnerable Versions
Cisco Secure Email 14.0.0-698
Cisco Secure Email 13.5.1-277
Cisco Secure Email 13.0.0-392
Cisco Secure Email 14.2.0-620
Cisco Secure Email 13.0.5-007
Cisco Secure Email 13.5.4-038
Cisco Secure Email 14.2.1-020
Cisco Secure Email 14.3.0-032
Cisco Secure Email 15.0.0-104
Cisco Secure Email 15.0.1-030
Cisco Secure Email 15.5.0-048
Cisco Secure Email 15.5.1-055
Cisco Secure Email 15.5.2-018
Cisco Secure Email 15.0.3-002
Cisco Secure Email 15.5.3-022
Cisco Secure Web Appliance 11.8.0-453
Cisco Secure Web Appliance 12.5.3-002
Cisco Secure Web Appliance 12.0.3-007
Cisco Secure Web Appliance 12.0.3-005
Cisco Secure Web Appliance 14.1.0-032
Cisco Secure Web Appliance 14.1.0-047
Cisco Secure Web Appliance 14.1.0-041
Cisco Secure Web Appliance 12.0.4-002
Cisco Secure Web Appliance 14.0.2-012
Cisco Secure Web Appliance 11.8.0-414
Cisco Secure Web Appliance 12.0.1-268
Cisco Secure Web Appliance 11.8.1-023
Cisco Secure Web Appliance 11.8.3-021
Cisco Secure Web Appliance 11.8.3-018
Cisco Secure Web Appliance 12.5.1-011
Cisco Secure Web Appliance 11.8.4-004
Cisco Secure Web Appliance 12.5.2-007
Cisco Secure Web Appliance 12.5.2-011
Cisco Secure Web Appliance 14.5.0-498
Cisco Secure Web Appliance 12.5.4-005
Cisco Secure Web Appliance 12.5.4-011
Cisco Secure Web Appliance 12.0.5-011
Cisco Secure Web Appliance 14.0.3-014
Cisco Secure Web Appliance 12.5.5-004
Cisco Secure Web Appliance 12.5.5-005
Cisco Secure Web Appliance 12.5.5-008
Cisco Secure Web Appliance 14.0.4-005
Cisco Secure Web Appliance 14.5.1-008
Cisco Secure Web Appliance 14.5.1-016
Cisco Secure Web Appliance 15.0.0-355
Cisco Secure Web Appliance 15.0.0-322
Cisco Secure Web Appliance 12.5.6-008
Cisco Secure Web Appliance 15.1.0-287
Cisco Secure Web Appliance 14.5.2-011
Cisco Secure Web Appliance 15.2.0-116
Cisco Secure Web Appliance 14.0.5-007
Cisco Secure Web Appliance 15.2.0-164
Cisco Secure Web Appliance 14.5.1-510
Cisco Secure Web Appliance 12.0.2-012
Cisco Secure Web Appliance 12.0.2-004
Cisco Secure Web Appliance 14.5.1-607
Cisco Secure Web Appliance 14.5.3-033
Cisco Secure Web Appliance 15.0.1-004
Cisco Secure Web Appliance 15.2.1-011
Cisco Secure Web Appliance 14.5.0-673
Cisco Secure Web Appliance 14.5.0-537
Cisco Secure Web Appliance 12.0.1-334
Cisco Secure Web Appliance 14.0.1-503
Cisco Secure Web Appliance 14.0.1-053
Cisco Secure Web Appliance 11.8.0-429
Cisco Secure Web Appliance 14.0.1-040
Cisco Secure Web Appliance 14.0.1-014
Cisco Secure Web Appliance 12.5.1-043
Prerequisites
Unknown
Discovered By
Unknown
PoC Author
Unknown
Metasploit Module
Unknown
Reporter
Unknown
Vendors
References
Additional Info
Authenticated
Unknown
Exploitable
Unknown
Reliability
Unknown
Stability
Unknown
Available Mitigations
Unknown
Shelf Life
Unknown
Userbase/Installbase
Unknown
Patch Effectiveness
Unknown
Rapid7
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
