A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information.
This vulnerability is due to improper validation of certificates that are used by the Smart Licensing feature. An attacker with a privileged network position could exploit this vulnerability by intercepting traffic that is sent over the Internet. A successful exploit could allow the attacker to gain access to sensitive information, including credentials used by the device to connect to Cisco cloud services.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
References
History
Wed, 07 May 2025 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 07 May 2025 17:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A vulnerability in certificate validation processing of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper validation of certificates that are used by the Smart Licensing feature. An attacker with a privileged network position could exploit this vulnerability by intercepting traffic that is sent over the Internet. A successful exploit could allow the attacker to gain access to sensitive information, including credentials used by the device to connect to Cisco cloud services. | |
| Title | Cisco Catalyst vManage Certificate Validation Vulnerability | |
| Weaknesses | CWE-295 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: cisco
Published: 2025-05-07T17:17:01.620Z
Updated: 2025-05-07T19:47:54.546Z
Reserved: 2024-10-10T19:15:13.217Z
Link: CVE-2025-20157
Vulnrichment
Updated: 2025-05-07T18:56:45.222Z
NVD
Status : Awaiting Analysis
Published: 2025-05-07T18:15:37.480
Modified: 2025-05-08T14:39:09.683
Link: CVE-2025-20157
Redhat
No data.