CVE-2025-20338
24.09.2025, 18:15
A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, local attacker with administrative privileges to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user arguments that are passed to specific CLI commands. An attacker could exploit this vulnerability by logging in to the device CLI with valid administrative (level 15) credentials and using crafted commands at the CLI prompt. A successful exploit could allow the attacker to execute arbitrary commands as root.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cisco | ios_xe | 3.5.0e:e |
| cisco | ios_xe | 3.5.0sq:sq |
| cisco | ios_xe | 3.5.1e:e |
| cisco | ios_xe | 3.5.1sq:sq |
| cisco | ios_xe | 3.5.2e:e |
| cisco | ios_xe | 3.5.2sq:sq |
| cisco | ios_xe | 3.5.3e:e |
| cisco | ios_xe | 3.5.3sq:sq |
| cisco | ios_xe | 3.5.4sq:sq |
| cisco | ios_xe | 3.5.5sq:sq |
| cisco | ios_xe | 3.5.6sq:sq |
| cisco | ios_xe | 3.5.7sq:sq |
| cisco | ios_xe | 3.5.8sq:sq |
| cisco | ios_xe | 3.6.0e:e |
| cisco | ios_xe | 3.6.1e:e |
| cisco | ios_xe | 3.6.2ae:ae |
| cisco | ios_xe | 3.6.2e:e |
| cisco | ios_xe | 3.6.3e:e |
| cisco | ios_xe | 3.6.4e:e |
| cisco | ios_xe | 3.6.5ae:ae |
| cisco | ios_xe | 3.6.5e:e |
| cisco | ios_xe | 3.6.6e:e |
| cisco | ios_xe | 3.6.7be:be |
| cisco | ios_xe | 3.6.7e:e |
| cisco | ios_xe | 3.6.8e:e |
| cisco | ios_xe | 3.6.9e:e |
| cisco | ios_xe | 3.6.10e:e |
| cisco | ios_xe | 3.7.0e:e |
| cisco | ios_xe | 3.7.1e:e |
| cisco | ios_xe | 3.7.2e:e |
| cisco | ios_xe | 3.7.3e:e |
| cisco | ios_xe | 3.7.4e:e |
| cisco | ios_xe | 3.7.5e:e |
| cisco | ios_xe | 3.8.0e:e |
| cisco | ios_xe | 3.8.1e:e |
| cisco | ios_xe | 3.8.2e:e |
| cisco | ios_xe | 3.8.3e:e |
| cisco | ios_xe | 3.8.4e:e |
| cisco | ios_xe | 3.8.5ae:ae |
| cisco | ios_xe | 3.8.5e:e |
| cisco | ios_xe | 3.8.6e:e |
| cisco | ios_xe | 3.8.7e:e |
| cisco | ios_xe | 3.8.8e:e |
| cisco | ios_xe | 3.8.9e:e |
| cisco | ios_xe | 3.8.10e:e |
| cisco | ios_xe | 3.8.10ee:ee |
| cisco | ios_xe | 3.9.0e:e |
| cisco | ios_xe | 3.9.1e:e |
| cisco | ios_xe | 3.9.2e:e |
| cisco | ios_xe | 3.10.0ce:ce |
| cisco | ios_xe | 3.10.0e:e |
| cisco | ios_xe | 3.10.1e:e |
| cisco | ios_xe | 3.10.2e:e |
| cisco | ios_xe | 3.10.3e:e |
| cisco | ios_xe | 3.11.0e:e |
| cisco | ios_xe | 3.11.0s:s |
| cisco | ios_xe | 3.11.1ae:ae |
| cisco | ios_xe | 3.11.1e:e |
| cisco | ios_xe | 3.11.1s:s |
| cisco | ios_xe | 3.11.2e:e |
| cisco | ios_xe | 3.11.2s:s |
| cisco | ios_xe | 3.11.3ae:ae |
| cisco | ios_xe | 3.11.3e:e |
| cisco | ios_xe | 3.11.3s:s |
| cisco | ios_xe | 3.11.4e:e |
| cisco | ios_xe | 3.11.4s:s |
| cisco | ios_xe | 3.11.5e:e |
| cisco | ios_xe | 3.11.6e:e |
| cisco | ios_xe | 3.11.7e:e |
| cisco | ios_xe | 3.11.8e:e |
| cisco | ios_xe | 3.11.9e:e |
| cisco | ios_xe | 3.11.10e:e |
| cisco | ios_xe | 3.11.11e:e |
| cisco | ios_xe | 3.11.12e:e |
| cisco | ios_xe | 3.12.0as:as |
| cisco | ios_xe | 3.12.0s:s |
| cisco | ios_xe | 3.12.1s:s |
| cisco | ios_xe | 3.12.2s:s |
| cisco | ios_xe | 3.12.3s:s |
| cisco | ios_xe | 3.12.4s:s |
| cisco | ios_xe | 3.13.0as:as |
| cisco | ios_xe | 3.13.0s:s |
| cisco | ios_xe | 3.13.1s:s |
| cisco | ios_xe | 3.13.2as:as |
| cisco | ios_xe | 3.13.2s:s |
| cisco | ios_xe | 3.13.3s:s |
| cisco | ios_xe | 3.13.4s:s |
| cisco | ios_xe | 3.13.5as:as |
| cisco | ios_xe | 3.13.5s:s |
| cisco | ios_xe | 3.13.6as:as |
| cisco | ios_xe | 3.13.6s:s |
| cisco | ios_xe | 3.13.7as:as |
| cisco | ios_xe | 3.13.7s:s |
| cisco | ios_xe | 3.13.8s:s |
| cisco | ios_xe | 3.13.9s:s |
| cisco | ios_xe | 3.13.10s:s |
| cisco | ios_xe | 3.14.0s:s |
| cisco | ios_xe | 3.14.1s:s |
| cisco | ios_xe | 3.14.2s:s |
| cisco | ios_xe | 3.14.3s:s |
| cisco | ios_xe | 3.14.4s:s |
| cisco | ios_xe | 3.15.0s:s |
| cisco | ios_xe | 3.15.1cs:cs |
| cisco | ios_xe | 3.15.1s:s |
| cisco | ios_xe | 3.15.2s:s |
| cisco | ios_xe | 3.15.3s:s |
| cisco | ios_xe | 3.15.4s:s |
| cisco | ios_xe | 3.16.0cs:cs |
| cisco | ios_xe | 3.16.0s:s |
| cisco | ios_xe | 3.16.1as:as |
| cisco | ios_xe | 3.16.1s:s |
| cisco | ios_xe | 3.16.2as:as |
| cisco | ios_xe | 3.16.2bs:bs |
| cisco | ios_xe | 3.16.2s:s |
| cisco | ios_xe | 3.16.3as:as |
| cisco | ios_xe | 3.16.3s:s |
| cisco | ios_xe | 3.16.4as:as |
| cisco | ios_xe | 3.16.4bs:bs |
| cisco | ios_xe | 3.16.4ds:ds |
| cisco | ios_xe | 3.16.4s:s |
| cisco | ios_xe | 3.16.5s:s |
| cisco | ios_xe | 3.16.6bs:bs |
| cisco | ios_xe | 3.16.6s:s |
| cisco | ios_xe | 3.16.7as:as |
| cisco | ios_xe | 3.16.7bs:bs |
| cisco | ios_xe | 3.16.7s:s |
| cisco | ios_xe | 3.16.8s:s |
| cisco | ios_xe | 3.16.9s:s |
| cisco | ios_xe | 3.16.10s:s |
| cisco | ios_xe | 3.17.0s:s |
| cisco | ios_xe | 3.17.1as:as |
| cisco | ios_xe | 3.17.1s:s |
| cisco | ios_xe | 3.17.2s:s |
| cisco | ios_xe | 3.17.3s:s |
| cisco | ios_xe | 3.17.4s:s |
| cisco | ios_xe | 3.18.0as:as |
| cisco | ios_xe | 3.18.0s:s |
| cisco | ios_xe | 3.18.0sp:sp |
| cisco | ios_xe | 3.18.1asp:asp |
| cisco | ios_xe | 3.18.1bsp:bsp |
| cisco | ios_xe | 3.18.1csp:csp |
| cisco | ios_xe | 3.18.1s:s |
| cisco | ios_xe | 3.18.1sp:sp |
| cisco | ios_xe | 3.18.2asp:asp |
| cisco | ios_xe | 3.18.2s:s |
| cisco | ios_xe | 3.18.2sp:sp |
| cisco | ios_xe | 3.18.3asp:asp |
| cisco | ios_xe | 3.18.3bsp:bsp |
| cisco | ios_xe | 3.18.3s:s |
| cisco | ios_xe | 3.18.3sp:sp |
| cisco | ios_xe | 3.18.4s:s |
| cisco | ios_xe | 3.18.4sp:sp |
| cisco | ios_xe | 3.18.5sp:sp |
| cisco | ios_xe | 3.18.6sp:sp |
| cisco | ios_xe | 3.18.7sp:sp |
| cisco | ios_xe | 3.18.8asp:asp |
| cisco | ios_xe | 3.18.9sp:sp |
| cisco | ios_xe | 16.6.1 |
| cisco | ios_xe | 16.6.2 |
| cisco | ios_xe | 16.6.3 |
| cisco | ios_xe | 16.6.4 |
| cisco | ios_xe | 16.6.4a:a |
| cisco | ios_xe | 16.6.5 |
| cisco | ios_xe | 16.6.5a:a |
| cisco | ios_xe | 16.6.6 |
| cisco | ios_xe | 16.6.7 |
| cisco | ios_xe | 16.6.8 |
| cisco | ios_xe | 16.6.9 |
| cisco | ios_xe | 16.6.10 |
| cisco | ios_xe | 16.7.1 |
| cisco | ios_xe | 16.7.1a:a |
| cisco | ios_xe | 16.7.1b:b |
| cisco | ios_xe | 16.7.2 |
| cisco | ios_xe | 16.7.3 |
| cisco | ios_xe | 16.7.4 |
| cisco | ios_xe | 16.8.1 |
| cisco | ios_xe | 16.8.1a:a |
| cisco | ios_xe | 16.8.1b:b |
| cisco | ios_xe | 16.8.1c:c |
| cisco | ios_xe | 16.8.1d:d |
| cisco | ios_xe | 16.8.1e:e |
| cisco | ios_xe | 16.8.1s:s |
| cisco | ios_xe | 16.8.2 |
| cisco | ios_xe | 16.8.3 |
| cisco | ios_xe | 16.9.1 |
| cisco | ios_xe | 16.9.1a:a |
| cisco | ios_xe | 16.9.1b:b |
| cisco | ios_xe | 16.9.1s:s |
| cisco | ios_xe | 16.9.2 |
| cisco | ios_xe | 16.9.3 |
| cisco | ios_xe | 16.9.3a:a |
| cisco | ios_xe | 16.9.4 |
| cisco | ios_xe | 16.9.5 |
| cisco | ios_xe | 16.9.5f:f |
| cisco | ios_xe | 16.9.6 |
| cisco | ios_xe | 16.9.7 |
| cisco | ios_xe | 16.9.8 |
| cisco | ios_xe | 16.10.1 |
| cisco | ios_xe | 16.10.1a:a |
| cisco | ios_xe | 16.10.1b:b |
| cisco | ios_xe | 16.10.1c:c |
| cisco | ios_xe | 16.10.1d:d |
| cisco | ios_xe | 16.10.1e:e |
| cisco | ios_xe | 16.10.1f:f |
| cisco | ios_xe | 16.10.1g:g |
| cisco | ios_xe | 16.10.1s:s |
| cisco | ios_xe | 16.10.2 |
| cisco | ios_xe | 16.10.3 |
| cisco | ios_xe | 16.11.1 |
| cisco | ios_xe | 16.11.1a:a |
| cisco | ios_xe | 16.11.1b:b |
| cisco | ios_xe | 16.11.1s:s |
| cisco | ios_xe | 16.11.2 |
| cisco | ios_xe | 16.12.1 |
| cisco | ios_xe | 16.12.1a:a |
| cisco | ios_xe | 16.12.1c:c |
| cisco | ios_xe | 16.12.1s:s |
| cisco | ios_xe | 16.12.1t:t |
| cisco | ios_xe | 16.12.1w:w |
| cisco | ios_xe | 16.12.1x:x |
| cisco | ios_xe | 16.12.1y:y |
| cisco | ios_xe | 16.12.1z1:z1 |
| cisco | ios_xe | 16.12.1z2:z2 |
| cisco | ios_xe | 16.12.2 |
| cisco | ios_xe | 16.12.2a:a |
| cisco | ios_xe | 16.12.2s:s |
| cisco | ios_xe | 16.12.3 |
| cisco | ios_xe | 16.12.3a:a |
| cisco | ios_xe | 16.12.3s:s |
| cisco | ios_xe | 16.12.4 |
| cisco | ios_xe | 16.12.4a:a |
| cisco | ios_xe | 16.12.5 |
| cisco | ios_xe | 16.12.5a:a |
| cisco | ios_xe | 16.12.5b:b |
| cisco | ios_xe | 16.12.6 |
| cisco | ios_xe | 16.12.6a:a |
| cisco | ios_xe | 16.12.7 |
| cisco | ios_xe | 16.12.8 |
| cisco | ios_xe | 16.12.9 |
| cisco | ios_xe | 16.12.10 |
| cisco | ios_xe | 16.12.10a:a |
| cisco | ios_xe | 16.12.11 |
| cisco | ios_xe | 16.12.12 |
| cisco | ios_xe | 16.12.13 |
| cisco | ios_xe | 17.1.1 |
| cisco | ios_xe | 17.1.1a:a |
| cisco | ios_xe | 17.1.1s:s |
| cisco | ios_xe | 17.1.1t:t |
| cisco | ios_xe | 17.1.3 |
| cisco | ios_xe | 17.2.1 |
| cisco | ios_xe | 17.2.1a:a |
| cisco | ios_xe | 17.2.1r:r |
| cisco | ios_xe | 17.2.1v:v |
| cisco | ios_xe | 17.2.2 |
| cisco | ios_xe | 17.2.3 |
| cisco | ios_xe | 17.3.1 |
| cisco | ios_xe | 17.3.1a:a |
| cisco | ios_xe | 17.3.1w:w |
| cisco | ios_xe | 17.3.1x:x |
| cisco | ios_xe | 17.3.1z:z |
| cisco | ios_xe | 17.3.2 |
| cisco | ios_xe | 17.3.2a:a |
| cisco | ios_xe | 17.3.3 |
| cisco | ios_xe | 17.3.4 |
| cisco | ios_xe | 17.3.4a:a |
| cisco | ios_xe | 17.3.4b:b |
| cisco | ios_xe | 17.3.4c:c |
| cisco | ios_xe | 17.3.5 |
| cisco | ios_xe | 17.3.5a:a |
| cisco | ios_xe | 17.3.5b:b |
| cisco | ios_xe | 17.3.6 |
| cisco | ios_xe | 17.3.7 |
| cisco | ios_xe | 17.3.8 |
| cisco | ios_xe | 17.3.8a:a |
| cisco | ios_xe | 17.4.1 |
| cisco | ios_xe | 17.4.1a:a |
| cisco | ios_xe | 17.4.1b:b |
| cisco | ios_xe | 17.4.2 |
| cisco | ios_xe | 17.4.2a:a |
| cisco | ios_xe | 17.5.1 |
| cisco | ios_xe | 17.5.1a:a |
| cisco | ios_xe | 17.6.1 |
| cisco | ios_xe | 17.6.1a:a |
| cisco | ios_xe | 17.6.1w:w |
| cisco | ios_xe | 17.6.1x:x |
| cisco | ios_xe | 17.6.1y:y |
| cisco | ios_xe | 17.6.1z:z |
| cisco | ios_xe | 17.6.1z1:z1 |
| cisco | ios_xe | 17.6.2 |
| cisco | ios_xe | 17.6.3 |
| cisco | ios_xe | 17.6.3a:a |
| cisco | ios_xe | 17.6.4 |
| cisco | ios_xe | 17.6.5 |
| cisco | ios_xe | 17.6.5a:a |
| cisco | ios_xe | 17.6.6 |
| cisco | ios_xe | 17.6.6a:a |
| cisco | ios_xe | 17.6.7 |
| cisco | ios_xe | 17.6.8 |
| cisco | ios_xe | 17.6.8a:a |
| cisco | ios_xe | 17.7.1 |
| cisco | ios_xe | 17.7.1a:a |
| cisco | ios_xe | 17.7.1b:b |
| cisco | ios_xe | 17.7.2 |
| cisco | ios_xe | 17.8.1 |
| cisco | ios_xe | 17.8.1a:a |
| cisco | ios_xe | 17.9.1 |
| cisco | ios_xe | 17.9.1a:a |
| cisco | ios_xe | 17.9.1w:w |
| cisco | ios_xe | 17.9.1x:x |
| cisco | ios_xe | 17.9.1x1:x1 |
| cisco | ios_xe | 17.9.1y:y |
| cisco | ios_xe | 17.9.1y1:y1 |
| cisco | ios_xe | 17.9.2 |
| cisco | ios_xe | 17.9.2a:a |
| cisco | ios_xe | 17.9.3 |
| cisco | ios_xe | 17.9.3a:a |
| cisco | ios_xe | 17.9.4 |
| cisco | ios_xe | 17.9.4a:a |
| cisco | ios_xe | 17.9.5 |
| cisco | ios_xe | 17.9.5a:a |
| cisco | ios_xe | 17.9.5b:b |
| cisco | ios_xe | 17.9.5e:e |
| cisco | ios_xe | 17.9.5f:f |
| cisco | ios_xe | 17.9.6 |
| cisco | ios_xe | 17.9.6a:a |
| cisco | ios_xe | 17.9.7 |
| cisco | ios_xe | 17.9.7a:a |
| cisco | ios_xe | 17.9.7b:b |
| cisco | ios_xe | 17.10.1 |
| cisco | ios_xe | 17.10.1a:a |
| cisco | ios_xe | 17.10.1b:b |
| cisco | ios_xe | 17.11.1 |
| cisco | ios_xe | 17.11.1a:a |
| cisco | ios_xe | 17.12.1 |
| cisco | ios_xe | 17.12.1a:a |
| cisco | ios_xe | 17.12.1w:w |
| cisco | ios_xe | 17.12.1x:x |
| cisco | ios_xe | 17.12.1y:y |
| cisco | ios_xe | 17.12.1z:z |
| cisco | ios_xe | 17.12.1z1:z1 |
| cisco | ios_xe | 17.12.1z2:z2 |
| cisco | ios_xe | 17.12.1z3:z3 |
| cisco | ios_xe | 17.12.1z4:z4 |
| cisco | ios_xe | 17.12.2 |
| cisco | ios_xe | 17.12.2a:a |
| cisco | ios_xe | 17.12.3 |
| cisco | ios_xe | 17.12.3a:a |
| cisco | ios_xe | 17.12.4 |
| cisco | ios_xe | 17.12.4a:a |
| cisco | ios_xe | 17.12.4b:b |
| cisco | ios_xe | 17.12.5 |
| cisco | ios_xe | 17.12.5a:a |
| cisco | ios_xe | 17.12.5b:b |
| cisco | ios_xe | 17.12.5c:c |
| cisco | ios_xe | 17.13.1 |
| cisco | ios_xe | 17.13.1a:a |
| cisco | ios_xe | 17.14.1 |
| cisco | ios_xe | 17.14.1a:a |
| cisco | ios_xe | 17.15.1 |
| cisco | ios_xe | 17.15.1a:a |
| cisco | ios_xe | 17.15.1b:b |
| cisco | ios_xe | 17.15.1w:w |
| cisco | ios_xe | 17.15.1x:x |
| cisco | ios_xe | 17.15.1y:y |
| cisco | ios_xe | 17.15.1z:z |
| cisco | ios_xe | 17.15.2 |
| cisco | ios_xe | 17.15.2a:a |
| cisco | ios_xe | 17.15.2b:b |
| cisco | ios_xe | 17.15.2c:c |
| cisco | ios_xe | 17.15.3 |
| cisco | ios_xe | 17.15.3a:a |
| cisco | ios_xe | 17.15.3b:b |
| cisco | ios_xe | 17.16.1 |
| cisco | ios_xe | 17.16.1a:a |
𝑥
= Vulnerable software versions