cveboard RSS feed

CVE-2025-20164

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

A vulnerability in the Cisco Industrial Ethernet Switch Device Manager (DM) of Cisco IOS Software could allow an authenticated, remote attacker to elevate privileges. This vulnerability is due to insufficient validation of authorizations for authenticated users. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to elevate privileges to privilege level 15. To exploit this vulnerability, the attacker must have valid credentials for a user account with privilege level 5 or higher. Read-only DM users are assigned privilege level 5.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

IOS

Vendor
Cisco
Product
IOS
Platforms
Unknown
Default status
Unknown
IOS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
15.0(2)SE8affectedUnavailableUnavailableUnavailableNone listed
15.0(2)EAaffectedUnavailableUnavailableUnavailableNone listed
15.0(2)EA1affectedUnavailableUnavailableUnavailableNone listed
15.2(2)EaffectedUnavailableUnavailableUnavailableNone listed
15.2(2)E1affectedUnavailableUnavailableUnavailableNone listed
15.2(3)E1affectedUnavailableUnavailableUnavailableNone listed
15.2(2)E2affectedUnavailableUnavailableUnavailableNone listed
15.2(2)E3affectedUnavailableUnavailableUnavailableNone listed
15.2(2a)E2affectedUnavailableUnavailableUnavailableNone listed
15.2(3)E2affectedUnavailableUnavailableUnavailableNone listed
15.2(3)E3affectedUnavailableUnavailableUnavailableNone listed
15.2(2)E4affectedUnavailableUnavailableUnavailableNone listed
15.2(2)E5affectedUnavailableUnavailableUnavailableNone listed
15.2(3)E4affectedUnavailableUnavailableUnavailableNone listed
15.2(5)EaffectedUnavailableUnavailableUnavailableNone listed
15.2(2)E6affectedUnavailableUnavailableUnavailableNone listed
15.2(5)E1affectedUnavailableUnavailableUnavailableNone listed
15.2(2)E5aaffectedUnavailableUnavailableUnavailableNone listed
15.2(5a)E1affectedUnavailableUnavailableUnavailableNone listed
15.2(2)E7affectedUnavailableUnavailableUnavailableNone listed
15.2(5)E2affectedUnavailableUnavailableUnavailableNone listed
15.2(6)EaffectedUnavailableUnavailableUnavailableNone listed
15.2(5)E2caffectedUnavailableUnavailableUnavailableNone listed
15.2(2)E8affectedUnavailableUnavailableUnavailableNone listed
15.2(6)E0aaffectedUnavailableUnavailableUnavailableNone listed
15.2(6)E1affectedUnavailableUnavailableUnavailableNone listed
15.2(6)E0caffectedUnavailableUnavailableUnavailableNone listed
15.2(2)E9affectedUnavailableUnavailableUnavailableNone listed
15.2(7)EaffectedUnavailableUnavailableUnavailableNone listed
15.2(2)E10affectedUnavailableUnavailableUnavailableNone listed
15.2(6)E2aaffectedUnavailableUnavailableUnavailableNone listed
15.2(7)E0baffectedUnavailableUnavailableUnavailableNone listed
15.2(7)E0saffectedUnavailableUnavailableUnavailableNone listed
15.2(6)E3affectedUnavailableUnavailableUnavailableNone listed
15.2(7)E2affectedUnavailableUnavailableUnavailableNone listed
15.2(7)E3affectedUnavailableUnavailableUnavailableNone listed
15.2(7)E1aaffectedUnavailableUnavailableUnavailableNone listed
15.2(7)E4affectedUnavailableUnavailableUnavailableNone listed
15.2(8)EaffectedUnavailableUnavailableUnavailableNone listed
15.2(8)E1affectedUnavailableUnavailableUnavailableNone listed
15.2(7)E5affectedUnavailableUnavailableUnavailableNone listed
15.2(7)E6affectedUnavailableUnavailableUnavailableNone listed
15.2(8)E2affectedUnavailableUnavailableUnavailableNone listed
15.2(7)E7affectedUnavailableUnavailableUnavailableNone listed
15.2(8)E3affectedUnavailableUnavailableUnavailableNone listed
15.2(7)E8affectedUnavailableUnavailableUnavailableNone listed
15.2(8)E4affectedUnavailableUnavailableUnavailableNone listed
15.2(7)E9affectedUnavailableUnavailableUnavailableNone listed
15.2(8)E5affectedUnavailableUnavailableUnavailableNone listed
15.2(8)E6affectedUnavailableUnavailableUnavailableNone listed
15.2(7)E10affectedUnavailableUnavailableUnavailableNone listed
15.2(7)E11affectedUnavailableUnavailableUnavailableNone listed
15.2(1)EYaffectedUnavailableUnavailableUnavailableNone listed
15.0(2)EKaffectedUnavailableUnavailableUnavailableNone listed
15.0(2)EK1affectedUnavailableUnavailableUnavailableNone listed
15.2(2)EBaffectedUnavailableUnavailableUnavailableNone listed
15.2(2)EB1affectedUnavailableUnavailableUnavailableNone listed
15.2(2)EB2affectedUnavailableUnavailableUnavailableNone listed
15.2(6)EBaffectedUnavailableUnavailableUnavailableNone listed
15.2(2)EAaffectedUnavailableUnavailableUnavailableNone listed
15.2(2)EA2affectedUnavailableUnavailableUnavailableNone listed
15.2(3)EAaffectedUnavailableUnavailableUnavailableNone listed
15.2(4)EAaffectedUnavailableUnavailableUnavailableNone listed
15.2(4)EA1affectedUnavailableUnavailableUnavailableNone listed
15.2(2)EA3affectedUnavailableUnavailableUnavailableNone listed
15.2(4)EA4affectedUnavailableUnavailableUnavailableNone listed
15.2(4)EA5affectedUnavailableUnavailableUnavailableNone listed
15.2(4)EA6affectedUnavailableUnavailableUnavailableNone listed
15.2(4)EA7affectedUnavailableUnavailableUnavailableNone listed
15.2(4)EA8affectedUnavailableUnavailableUnavailableNone listed
15.2(4)EA9affectedUnavailableUnavailableUnavailableNone listed
15.2(4)EA9aaffectedUnavailableUnavailableUnavailableNone listed
15.2(4)EC1affectedUnavailableUnavailableUnavailableNone listed
15.2(4)EC2affectedUnavailableUnavailableUnavailableNone listed
15.3(3)JPUaffectedUnavailableUnavailableUnavailableNone listed