CVE-2025-20138

{"id": "CVE-2025-20138", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "psirt@cisco.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.0}]}, "published": "2025-03-12T16:15:21.260", "references": [{"url": "https://blog.apnic.net/2024/09/02/crafting-endless-as-paths-in-bgp/", "tags": ["Technical Description"], "source": "psirt@cisco.com"}, {"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-priv-esc-GFQjxvOF", "tags": ["Vendor Advisory"], "source": "psirt@cisco.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@cisco.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device.\r\n\r\nThis vulnerability is due to insufficient validation of user arguments that are passed to specific CLI commands. An attacker with a low-privileged account could exploit this vulnerability by using crafted commands at the prompt. A successful exploit could allow the attacker to elevate privileges to root and execute arbitrary commands."}, {"lang": "es", "value": "Una vulnerabilidad en la CLI del software Cisco IOS XR podr\u00eda permitir que un atacante local autenticado ejecute comandos arbitrarios como superusuario en el sistema operativo subyacente de un dispositivo afectado. Esta vulnerabilidad se debe a una validaci\u00f3n insuficiente de los argumentos de usuario que se pasan a comandos CLI espec\u00edficos. Un atacante con una cuenta con pocos privilegios podr\u00eda explotar esta vulnerabilidad utilizando comandos manipulados en el s\u00edmbolo del sistema. Una explotaci\u00f3n exitosa podr\u00eda permitirle elevar los privilegios a superusuario y ejecutar comandos arbitrarios."}], "lastModified": "2025-07-31T18:11:01.253", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "E9233952-426F-487C-83B4-AFC65496B50B", "versionEndExcluding": "24.2.21"}, {"criteria": "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:x64:*", "vulnerable": true, "matchCriteriaId": "034114AC-4134-4A85-B6CF-C89FD17EEBF2", "versionEndExcluding": "24.4", "versionStartIncluding": "24.3"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@cisco.com"}