CVE-2025-20157
Cisco Catalyst vManage Certificate Validation Vulnerability
Description
A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper validation of certificates that are used by the Smart Licensing feature. An attacker with a privileged network position could exploit this vulnerability by intercepting traffic that is sent over the Internet. A successful exploit could allow the attacker to gain access to sensitive information, including credentials used by the device to connect to Cisco cloud services.
Weakness: CWE-295
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Cisco | Cisco Catalyst SD-WAN Manager | Network & Security Management | cna-assigner |
Vendor-reported products (1)
- Cisco · Cisco Catalyst SD-WAN Manager
Vendor advisory
cisco-sa-catalyst-tls-PqnD5KEJ
Cisco Catalyst SD-WAN Manager Certificate Validation Vulnerability
Cisco’s rating: Medium (advisory CVSS 5.9) · Published May 7, 2025
Bug ID: CSCwm84885
The vendor’s rating applies to the whole advisory and can differ from this CVE’s own CVSS severity. Where this comes from