CVE-2025-20287
BaseFortify
Publication date: 2025-09-03
Last updated on: 2025-09-09
Assigner: Cisco Systems, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| cisco | evolved_programmable_network_manager | to 8.0.0 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-434 | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM). It allows an authenticated remote attacker, who has valid Config Manager credentials, to upload arbitrary files to the affected system by sending a specially crafted file upload request to a specific API endpoint. The root cause is improper validation of uploaded files, which means the system does not correctly check the files being uploaded, enabling potentially malicious files to be placed on the device. [1]
How can this vulnerability impact me? :
If exploited, this vulnerability could allow an attacker with valid credentials to upload arbitrary files to the affected system. This could lead to unauthorized modification or addition of files, potentially enabling further attacks or disruption of the system's normal operation. However, the vulnerability does not directly impact confidentiality or availability according to the CVSS score, but it does impact integrity. There are no known public exploits or malicious use reported so far. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
There are no specific detection commands or methods provided for this vulnerability. Detection would generally require monitoring for crafted file upload requests to the specific API endpoint on the Cisco EPNM web-based management interface by authenticated users. However, no explicit commands or detection tools are mentioned. [1]
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, you should upgrade Cisco EPNM to version 8.1 or later, as these versions are not vulnerable. There are no available workarounds. Additionally, contact Cisco TAC for upgrade assistance and consult Cisco's Security Advisories page for the latest information. [1]