Product:
Cisco Catalyst Center Virtual Appliance
Summary
A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted HTTP request to an affected system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-20341 |
Exploitation
To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Observer. By submitting a specially crafted HTTP request, the attacker can perform unauthorized modifications to the system, including creating new user accounts or elevating their own privileges.
Affected Products
- Cisco Catalyst Center Virtual Appliance: Affected by a privilege escalation vulnerability due to insufficient input validation.
Mitigation
It is recommended to apply the latest security updates provided by Cisco to mitigate this vulnerability. Additionally, ensure that user accounts are managed properly and limit access to only those who require it.